Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File:                     qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier:          CmjUgbhMDK4aUrmYuP1hHC1VuBgWyMpua56dq0uIN5w=
Subject key identifier:   EC:79:FC:5B:6B:56:D0:59:F3:32:8C:93:1C:23:83:5A:10:C0:98:48
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer:       /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial:       019D38D2D382600AA370846D4D6986B0062E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 09:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:33 +0000
Files and hashes:         1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: wTVJuNHxbSpZla+w7Jrhn/Sfj3zF8+RkPJXmRB5XB4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:d3:82:60:0a:a3:70:84:6d:4d:69:86:b0:06:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
        Validity
            Not Before: Mar 29 09:00:33 2026 GMT
            Not After : Mar 30 09:00:33 2026 GMT
        Subject: CN=ec79fc5b6b56d059f3328c931c23835a10c09848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:07:74:98:c8:d0:82:87:e2:9e:97:5c:c9:7c:
                    26:ca:f4:cb:19:1c:e0:4b:c9:6b:ae:96:b1:f0:fa:
                    11:7a:7a:d4:31:44:fb:db:56:5a:9a:3e:22:7d:b9:
                    1c:49:7b:bd:fc:43:ab:8d:26:ee:f5:7d:0e:34:7f:
                    63:b5:04:de:9e:42:20:4a:22:a3:91:51:a7:1f:9d:
                    06:81:ad:6c:7b:f1:9c:79:b7:90:2e:c2:d5:28:e1:
                    f1:1f:2b:1e:22:e8:09:fc:c5:e6:62:06:50:10:ba:
                    d9:ce:13:3d:28:71:c8:f9:7d:d0:7b:b7:45:dc:8c:
                    c2:e8:1a:a1:d0:5c:35:26:03:74:22:d4:28:c6:d8:
                    40:f7:18:6c:a0:53:f5:16:62:a9:a9:fd:61:e8:15:
                    b8:09:75:97:a0:c8:4a:37:ab:7b:75:60:48:40:8d:
                    58:48:e5:f7:8f:e9:a0:85:ee:14:86:5f:01:c2:92:
                    d7:7c:b8:97:cd:0e:93:b9:c3:df:32:70:39:de:2c:
                    43:b2:52:28:a5:bf:85:76:b4:11:ab:56:ad:67:a9:
                    a0:7e:b7:5e:ea:2a:b4:ac:2a:e5:81:ac:b6:b8:3c:
                    b8:6a:9d:8b:7f:c7:b6:2b:e3:24:1c:1f:62:c0:8a:
                    b3:c3:dc:36:26:d7:4b:00:8d:e6:5b:de:ec:81:94:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:FC:5B:6B:56:D0:59:F3:32:8C:93:1C:23:83:5A:10:C0:98:48
            X509v3 Authority Key Identifier:
                keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0d:80:71:7c:b5:e2:b6:cd:5b:aa:2c:3d:d7:b6:a9:5d:e7:
         fb:b6:8d:b8:71:65:56:35:97:c2:5b:31:44:67:4a:3a:16:a9:
         ee:f9:84:9e:5f:76:a8:3a:1f:52:97:24:14:65:fe:07:a2:3d:
         ea:15:78:4b:c7:5d:8a:15:7e:44:1e:05:64:85:37:0f:24:19:
         5c:1a:8f:46:0e:e3:ad:00:9d:9d:ea:95:c3:55:2a:07:34:38:
         10:dd:4a:44:10:7a:36:20:52:bf:a8:81:16:7c:08:fb:67:fe:
         fc:d2:8c:0d:71:fe:19:29:f7:5b:21:fc:bd:6e:bc:fb:d7:7d:
         57:fe:92:2c:18:dc:1b:ab:c5:de:57:c5:c4:7e:4f:50:ec:5b:
         e0:a9:3c:c6:a7:30:39:e9:19:03:74:11:04:7c:30:77:ed:b2:
         cb:01:67:83:6a:af:63:78:27:60:bb:5a:a2:81:17:97:1b:d6:
         0c:9f:69:8c:15:c2:89:6e:1f:12:b6:0b:3c:0c:bd:ba:d9:5b:
         f6:57:d1:0b:8e:a0:1d:df:51:0a:cb:93:17:0f:1c:86:24:02:
         91:19:07:a0:75:18:f5:6e:2c:44:3e:88:00:43:a9:32:70:dd:
         4b:7f:42:bc:0d:04:52:51:88:61:a5:7a:7f:8c:0b:8e:cc:84:
         1d:7a:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:21 2026 by rpki-client