Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
File:                     qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft (raw, json)
Hash identifier:          Zb2smgFIaKSyGDmWbTfMc46Br/sUn1yJFU4dtdlWy2I=
Subject key identifier:   AC:7D:29:5E:65:7C:25:29:7D:C9:A2:B6:48:B1:A8:14:59:F1:AD:6A
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Certificate issuer:       /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial:       019D37C0CC60AA059DC415C62AE86173C74C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
Manifest number:          1260
Signing time:             Sun 29 Mar 2026 04:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:15 +0000
Files and hashes:         1: 9BXJOc4KzcwJ_gxDdNfTFpPCWH4.roa (hash: pkuMeH0UPmv52lxpZhcTdpJlbDSliFaKfs/env8uGi4=)
                          2: qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl (hash: paMCGeUYNxahfr6RkOpufKkwQibAmp3fXuT2SSnNsXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:cc:60:aa:05:9d:c4:15:c6:2a:e8:61:73:c7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
        Validity
            Not Before: Mar 29 04:01:15 2026 GMT
            Not After : Mar 30 04:01:15 2026 GMT
        Subject: CN=ac7d295e657c25297dc9a2b648b1a81459f1ad6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:90:4e:65:de:76:f4:2e:8e:ac:d2:ec:e9:
                    a0:fc:3e:ac:5e:e6:b8:0e:21:4d:85:ee:db:29:d3:
                    0d:bc:76:b2:67:7c:13:ec:64:55:78:b8:9f:eb:1c:
                    4e:1d:db:88:fd:ce:4c:df:70:64:c2:57:9c:5c:a5:
                    d4:94:43:fb:92:21:49:f9:0d:46:45:3e:1f:f4:03:
                    62:84:c9:5b:91:b7:b2:f7:e8:d4:fe:96:4f:eb:75:
                    84:41:cc:30:9c:34:b3:f3:2b:59:8d:69:4e:24:8e:
                    17:97:42:e4:23:cb:73:06:99:ab:37:e9:bd:2e:f5:
                    20:b0:bf:91:60:50:12:d8:31:c6:57:22:d8:79:11:
                    48:c7:ed:5a:41:1f:95:5f:d1:62:ef:09:d4:33:14:
                    0c:27:8f:fc:a3:d6:52:01:4f:b4:f8:a9:66:79:09:
                    ae:7c:de:62:c9:9c:4d:8a:f0:46:4b:a0:d4:55:26:
                    b4:91:c4:76:ed:22:b3:78:34:e6:50:36:25:0f:f4:
                    1e:a3:8f:aa:e1:2c:f3:aa:d0:45:6d:08:78:82:05:
                    bf:5a:e2:7e:e8:f3:38:20:cd:6a:de:57:1f:80:81:
                    dd:de:01:41:50:8e:97:36:a9:ed:5a:2a:6b:a9:d4:
                    f0:09:bb:c2:1d:79:63:8b:4b:30:55:cb:fd:75:27:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7D:29:5E:65:7C:25:29:7D:C9:A2:B6:48:B1:A8:14:59:F1:AD:6A
            X509v3 Authority Key Identifier:
                keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:84:1d:9e:7d:1a:99:03:5d:73:4b:53:5a:80:e2:56:9c:ff:
         45:7d:25:e3:a5:69:d2:69:1b:7a:07:ab:ba:2f:bf:89:e0:6d:
         5a:c7:8a:0e:a4:22:31:20:2e:d2:02:e7:08:2e:d2:a8:4a:54:
         da:e4:78:40:03:78:3f:a6:3d:fa:1c:4a:09:e5:bd:44:49:ee:
         08:56:bd:8f:6d:07:c6:d0:d9:5c:1e:01:fe:46:47:3c:d7:30:
         7f:60:4f:21:58:6a:90:6e:b0:c3:f3:6b:ac:a4:72:75:b2:7c:
         e2:94:51:7e:93:50:b5:ba:f2:e2:c1:d7:12:91:72:93:e1:08:
         df:2b:57:a3:7a:61:85:3d:ee:12:4b:0e:a6:cf:c1:ce:6f:e2:
         bf:49:90:7c:44:3a:bd:92:24:40:85:d2:99:c0:de:9f:61:af:
         12:87:88:27:01:f9:5b:b7:66:38:53:a9:42:16:4f:a2:20:2c:
         20:7c:c1:1f:73:d2:dc:de:1b:76:fc:51:ae:2b:6c:15:d6:51:
         8c:b0:ac:f1:a0:1a:9a:20:7e:92:f0:eb:be:8f:14:30:64:29:
         28:75:5d:9f:ce:86:7b:81:02:54:4f:62:2f:32:32:0e:f7:5a:
         01:09:3b:10:29:4e:f7:89:7f:a1:90:5f:a2:76:86:bf:43:75:
         a9:b4:6d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wMxgqgWdxBXGKuhhc8dMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MWIzMjRlYzAyNjEyMWZmZTVkY2E3N2YwZTk0YTZjMDg3
ZTcwZDIwHhcNMjYwMzI5MDQwMTE1WhcNMjYwMzMwMDQwMTE1WjAzMTEwLwYDVQQD
EyhhYzdkMjk1ZTY1N2MyNTI5N2RjOWEyYjY0OGIxYTgxNDU5ZjFhZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZeQTmXedvQujqzS7Omg/D6sXua4
DiFNhe7bKdMNvHayZ3wT7GRVeLif6xxOHduI/c5M33BkwlecXKXUlEP7kiFJ+Q1G
RT4f9ANihMlbkbey9+jU/pZP63WEQcwwnDSz8ytZjWlOJI4Xl0LkI8tzBpmrN+m9
LvUgsL+RYFAS2DHGVyLYeRFIx+1aQR+VX9Fi7wnUMxQMJ4/8o9ZSAU+0+KlmeQmu
fN5iyZxNivBGS6DUVSa0kcR27SKzeDTmUDYlD/Qeo4+q4SzzqtBFbQh4ggW/WuJ+
6PM4IM1q3lcfgIHd3gFBUI6XNqntWiprqdTwCbvCHXlji0swVcv9dScQiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKx9KV5lfCUpfcmitkixqBRZ8a1qMB8GA1UdIwQY
MBaAFKgbMk7AJhIf/l3Kd/DpSmwIfnDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xMTliMzEtNzc0Yy00YTQwLTg3YTAt
NzU4ZmJhNWEzOTUxLzEvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xMTliMzEtNzc0Yy00YTQwLTg3YTAtNzU4ZmJhNWEzOTUx
LzEvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYQdnn0a
mQNdc0tTWoDiVpz/RX0l46Vp0mkbegerui+/ieBtWseKDqQiMSAu0gLnCC7SqEpU
2uR4QAN4P6Y9+hxKCeW9REnuCFa9j20HxtDZXB4B/kZHPNcwf2BPIVhqkG6ww/Nr
rKRydbJ84pRRfpNQtbry4sHXEpFyk+EI3ytXo3phhT3uEksOps/Bzm/iv0mQfEQ6
vZIkQIXSmcDen2GvEoeIJwH5W7dmOFOpQhZPoiAsIHzBH3PS3N4bdvxRritsFdZR
jLCs8aAamiB+kvDrvo8UMGQpKHVdn86Ge4ECVE9iLzIyDvdaAQk7EClO94l/oZBf
onaGv0N1qbRt+A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:50 2026 by rpki-client