Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          sqeAebvbaVFzW+s8ojnuFbNLjGM2759hvP5K09P0nhI=
Subject key identifier:   A2:83:2D:22:BC:6F:25:75:79:A0:32:EC:98:8F:80:3B:7F:D3:03:C4
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       019D389BE37968857E33C4383E4EF2F8EBF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0F66
Signing time:             Sun 29 Mar 2026 08:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:33 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: 6vtjbzDaZjqbdb1Vn3KLug8JqzENq9NyFhlcody6H+M=)
                          2: X9p1dpq5cNTg4oaZ6x30uyHelQI.roa (hash: D5fNoAic1Tp57BY17A3hU+C+OdDJaGcq/k7ZyehvTB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:e3:79:68:85:7e:33:c4:38:3e:4e:f2:f8:eb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Mar 29 08:00:33 2026 GMT
            Not After : Mar 30 08:00:33 2026 GMT
        Subject: CN=a2832d22bc6f257579a032ec988f803b7fd303c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:0f:6a:4a:9b:a5:89:07:2f:34:cd:6d:ca:
                    97:e5:da:77:93:3c:58:14:95:c6:ab:b4:ec:56:5f:
                    f5:cb:2a:31:cb:80:89:a1:6a:29:44:ae:28:18:32:
                    3e:49:37:05:93:10:f4:fa:66:b5:0d:76:a8:40:a6:
                    35:77:84:14:ee:de:64:9f:5f:4a:81:23:3f:a5:ef:
                    3b:84:61:01:a5:a4:f2:2b:36:78:5f:12:6c:89:e7:
                    f3:d7:bb:a0:e2:c7:17:59:1a:39:c3:89:a5:f5:70:
                    71:f0:a2:67:e9:31:57:f2:a8:7c:3b:5e:67:f6:2c:
                    30:38:27:e1:de:38:6a:0a:72:e6:4d:d4:80:05:2f:
                    c6:98:64:70:ac:bd:92:50:fb:f3:aa:26:69:c7:76:
                    6a:b9:54:08:b9:b4:9b:a0:6f:2d:06:81:de:b2:44:
                    98:e6:dd:d9:82:79:eb:e0:c9:e5:07:52:76:cf:0b:
                    0e:68:ae:7f:ee:ca:31:29:c1:c7:ca:b0:4e:48:6d:
                    c8:27:cb:87:10:92:6a:66:2b:4f:06:bb:d2:d6:3c:
                    31:c5:54:bc:18:11:14:7f:b3:9f:8c:3e:2f:0c:69:
                    73:f7:a9:ac:f1:ee:b3:cc:ad:cb:0f:1e:19:b5:ae:
                    2a:ac:2c:0b:74:bc:b9:04:4c:14:25:c7:74:a6:4a:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:83:2D:22:BC:6F:25:75:79:A0:32:EC:98:8F:80:3B:7F:D3:03:C4
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b8:99:f1:c4:6a:f9:74:5f:17:62:4a:5e:c4:6f:72:62:f7:
         08:a4:b9:53:df:53:11:91:50:55:04:83:05:b4:63:fc:29:85:
         4b:a3:0f:44:3d:a3:73:68:bb:19:6a:c3:97:38:73:ed:f5:ff:
         9b:a4:bb:cc:42:53:13:85:49:df:5b:4e:a7:cf:81:57:03:b0:
         6c:f8:11:fa:89:9f:02:dd:8c:b8:45:55:29:f6:f9:82:ae:03:
         4d:79:35:71:4b:e3:65:9b:d9:ce:e8:dc:49:c3:15:e7:c1:7a:
         bd:1a:2b:8f:64:28:e0:9a:ab:99:0d:df:89:da:69:ad:6a:a1:
         2f:3b:4f:ce:be:e0:22:2e:23:85:7d:83:6e:de:88:b4:90:b7:
         e3:76:e7:03:26:14:d4:f6:de:4e:04:0c:7b:1e:4f:4f:0f:73:
         e3:60:d5:ba:72:eb:4d:33:ad:e7:ac:a4:3d:02:9c:4e:87:74:
         6e:52:72:db:7a:4a:01:92:62:2d:0f:c9:83:5a:8f:c7:e2:a2:
         fe:2e:c4:5b:ff:e4:72:ba:a8:da:db:47:3d:08:7d:e5:6f:98:
         43:db:c3:23:86:86:98:f4:8b:99:17:b6:f6:55:56:85:f9:5d:
         54:b4:4c:bd:76:f4:66:e3:99:16:8b:be:9f:50:d3:9c:83:15:
         bc:b4:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:03 2026 by rpki-client