Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
File:                     QVpBISe1FPZFXsiobinTjrCrtaw.mft (raw, json)
Hash identifier:          voYJLdgzxSYAcPBr2UJxtpbTqykSjucBZyjlO5KI8qA=
Subject key identifier:   DA:BF:E8:A6:18:23:F2:39:5A:DD:5D:3E:81:5C:BD:F9:A2:CB:59:07
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Certificate issuer:       /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial:       019D3A543EE46467F46E8045424A20CBD157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 16:01:32 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:32 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:32 +0000
Files and hashes:         1: 7Rp3GdcKfVUWm4cQ63fBxEuydME.roa (hash: pT/MLKvd9rZPCZ0i8dhFBDQSL+HDF/WyEyWHYfgrkVc=)
                          2: ClYH5zdUq2avTHJ8ifv2RHlVvmQ.roa (hash: LMju03bIoiZeMfDoSkXpr6oRp36HwgwDO6weFxJjdDQ=)
                          3: QVpBISe1FPZFXsiobinTjrCrtaw.crl (hash: RrUKCkSYWQ8MQLctp4UU+BtorTtrcrQhzW7yFlZC+i0=)
                          4: ryDLC_ILEFr49nieVNiDA4Xo9hs.roa (hash: em6ryr8LwG3BVr36hOTyHeON9oVwPVEYFMxyRSNV31w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:54:3e:e4:64:67:f4:6e:80:45:42:4a:20:cb:d1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
        Validity
            Not Before: Mar 29 16:01:32 2026 GMT
            Not After : Mar 30 16:01:32 2026 GMT
        Subject: CN=dabfe8a61823f2395add5d3e815cbdf9a2cb5907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:31:6d:ac:9c:9c:30:91:12:71:45:45:40:
                    d3:6b:48:d4:2e:65:45:b6:18:7a:84:e8:22:05:90:
                    b5:80:22:67:4c:3c:38:9f:1e:96:1c:b8:50:90:99:
                    7e:4c:0d:f1:f1:1f:d9:9e:04:88:ea:c4:5d:0f:dc:
                    1f:f2:8d:ed:08:70:f3:92:a0:2a:07:1c:83:3f:fb:
                    54:0b:37:20:d8:06:6d:4a:90:f2:92:bc:f2:e1:14:
                    84:c6:88:ae:74:4e:cf:74:07:4f:60:95:38:b1:6c:
                    4e:da:81:76:64:97:36:39:b1:98:91:4a:c2:75:f8:
                    42:ff:c4:78:e8:a1:0a:ce:5e:b4:f9:a8:b9:82:81:
                    a6:6e:13:1c:ef:60:f2:f1:d3:a5:e2:a9:b5:aa:d6:
                    2f:4c:8e:0e:49:47:4c:5d:55:b3:38:7e:ad:9c:1f:
                    b1:37:fa:42:93:c0:64:b4:47:45:4f:a7:47:7b:f6:
                    fa:ca:96:ed:5f:6b:23:6a:b5:89:62:7b:f9:88:d2:
                    3c:1f:33:16:0d:10:c9:a6:57:a7:cb:82:72:3c:bb:
                    b6:90:72:ea:2a:9c:5e:fb:67:30:eb:ee:f1:96:f8:
                    fb:39:51:c3:d3:86:d2:da:c5:96:84:97:7f:d4:00:
                    09:21:51:3a:36:cb:82:9c:b9:9c:84:88:d1:b4:63:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BF:E8:A6:18:23:F2:39:5A:DD:5D:3E:81:5C:BD:F9:A2:CB:59:07
            X509v3 Authority Key Identifier:
                keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7d:e8:3b:e5:3e:6c:86:e7:dd:75:e2:1b:0c:c1:7e:e0:02:
         6a:03:4b:aa:29:41:4e:94:28:9c:81:53:a8:6b:7a:9f:92:8b:
         3d:e5:c1:ab:c7:fc:8a:30:8e:a8:42:a5:32:50:4e:4f:12:24:
         6a:98:46:e0:86:2f:33:2b:d5:fb:69:ad:b1:dd:35:e5:97:07:
         34:68:0e:b5:55:6f:f2:1f:88:9f:fa:f9:d7:db:54:58:27:0e:
         a1:f3:f3:94:1e:3c:14:e6:98:ac:ab:21:db:35:33:cb:85:07:
         9b:95:f3:eb:cc:49:36:60:8c:6e:33:e8:8e:68:7e:9c:7c:e6:
         d7:8e:16:b3:83:d7:c1:e2:54:25:a6:d8:ab:8f:2a:63:fe:e9:
         e5:e1:82:7c:40:96:c3:7f:62:46:6c:f8:36:7f:e7:84:b0:5d:
         15:e0:88:16:2d:1a:9f:3c:62:22:de:da:2b:8d:d4:6d:e3:f5:
         70:c5:a4:01:24:e9:2e:5d:44:38:56:0a:a1:98:54:84:40:f1:
         d7:7a:11:d6:14:3a:0a:91:8d:e0:c7:59:da:b0:d2:a0:d2:df:
         bd:36:ca:8c:22:34:85:6c:8f:ac:46:d1:92:c6:a2:b2:cc:f1:
         29:60:2a:f4:b3:d1:5d:1c:60:18:a2:25:4b:61:ba:19:57:de:
         31:5d:84:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:48 2026 by rpki-client