Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
File:                     qMbudsTo2UYU4IJQX_6MmRokr4o.mft (raw, json)
Hash identifier:          AVlLyx+IP6pja5QoRS94HuLWPrLvTH2kr4777QLnFVI=
Subject key identifier:   F8:DD:F9:3B:68:B1:AB:ED:F4:F7:07:A3:67:99:C7:82:C3:41:DE:21
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Certificate issuer:       /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial:       019D390A5F6EC6975E169286F39574475060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
Manifest number:          14F5
Signing time:             Sun 29 Mar 2026 10:01:14 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:14 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:14 +0000
Files and hashes:         1: Ig5_iQWFva6wEaZIrvBQREaV2rM.roa (hash: FNZtMMnZ+tjsd2FzsKX3m62nR2nsdipfzhoI6BMqglg=)
                          2: qMbudsTo2UYU4IJQX_6MmRokr4o.crl (hash: gqtiaBQ5DH2HbnWJiHLHJghc7YoB2hz87oklJsDMFPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:5f:6e:c6:97:5e:16:92:86:f3:95:74:47:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
        Validity
            Not Before: Mar 29 10:01:14 2026 GMT
            Not After : Mar 30 10:01:14 2026 GMT
        Subject: CN=f8ddf93b68b1abedf4f707a36799c782c341de21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:89:0c:93:fa:42:61:56:93:00:b8:57:c8:
                    33:b8:c0:11:46:ad:f0:f3:2a:b7:36:3b:1a:c9:fd:
                    7c:0f:a6:35:34:50:f1:1e:c5:41:bc:25:49:6f:e2:
                    44:19:8f:a7:59:1c:c3:07:b6:32:04:86:b1:9e:c6:
                    6b:9f:dc:ed:ef:69:b2:09:c4:4a:e3:18:e7:66:64:
                    51:69:2e:87:1b:5a:8e:ec:c2:d0:0e:7c:24:ea:d7:
                    8e:c6:07:0b:c4:be:30:32:96:e9:0f:64:11:9a:44:
                    dc:85:ca:5b:cd:c9:90:42:e8:e7:98:5f:fc:9f:25:
                    24:20:b8:35:4c:0e:1a:fb:cc:c1:72:6f:74:13:de:
                    63:b0:87:ec:18:e7:88:f4:fd:49:0c:4b:26:7b:2b:
                    7e:87:75:82:9a:54:91:91:d8:fd:31:78:b4:7f:6a:
                    55:8c:1e:bc:22:6c:d1:27:fc:6f:e4:fb:e8:ab:79:
                    b5:22:8e:d1:41:5d:70:14:ed:91:6c:06:c6:25:77:
                    33:76:1c:a0:2a:a9:cf:cd:fc:d1:91:a0:28:5d:dd:
                    c4:23:63:3b:2f:3b:18:0e:7a:88:e6:e2:94:fc:02:
                    f0:98:6e:da:6b:78:85:d0:7e:10:8b:14:1b:84:ff:
                    b1:d0:2c:bc:5c:e1:be:00:27:f7:32:97:30:06:e2:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DD:F9:3B:68:B1:AB:ED:F4:F7:07:A3:67:99:C7:82:C3:41:DE:21
            X509v3 Authority Key Identifier:
                keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:34:56:79:b9:d6:b6:ac:f1:72:b2:ea:5f:83:dd:7c:23:21:
         7d:55:da:17:61:19:a7:f3:50:c4:5c:26:89:23:ee:6e:f5:40:
         0d:2f:e2:5a:99:53:e6:0b:58:a1:72:c7:79:cf:5a:ea:12:b1:
         b0:04:f2:be:a0:ae:ec:18:98:e0:15:38:52:e4:31:2e:7b:79:
         a7:51:26:b4:ea:b5:ac:18:2b:e6:bc:bc:0e:0d:8c:e4:5a:7f:
         b7:f3:c1:23:49:9c:71:8e:5f:0c:64:7b:ed:80:78:9d:1e:d8:
         07:a8:5d:33:0f:82:c1:cc:de:4c:c6:2a:f7:53:99:9d:9b:86:
         82:33:31:04:0a:35:3e:e1:73:32:0f:74:9d:d9:a0:1b:44:a3:
         84:47:f1:b8:89:6c:20:74:31:c3:95:f3:8a:fd:eb:21:ba:92:
         56:6b:f2:31:05:f2:27:a1:f0:77:3a:98:ac:46:b8:21:73:cf:
         56:98:31:55:66:05:20:cf:49:4d:40:c6:90:ad:91:18:6c:c1:
         12:3a:a8:0f:a5:c2:fb:f9:e8:fd:1f:83:a4:fc:23:da:a7:e1:
         1d:53:6c:2a:4d:c0:50:b4:7e:3d:4c:1a:3c:43:d4:e2:45:68:
         1f:c4:d4:8c:6b:19:bf:f5:61:c8:3b:5f:46:6b:b4:1d:e5:2a:
         fc:47:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:41:09 2026 by rpki-client