Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File:                     QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier:          r0CvUbkFB5SlKxvY/SGLfBLcqj1AsTUIvYzXhYvGdro=
Subject key identifier:   3B:D8:18:3F:73:A0:67:18:2B:DF:1E:EA:B9:E5:1F:34:D8:61:26:E9
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer:       /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial:       019D39AF05548E2945A00DA67A0CD65EBE31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number:          1899
Signing time:             Sun 29 Mar 2026 13:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:04 +0000
Files and hashes:         1: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: vGJTjwRuyfomJ5jTUsLYhoRbrnE9JdI8dtWhvEaDIJk=)
                          2: k3T33aZGj24vxqNw1UfxEFrHk44.roa (hash: 3m3SCEsy+0+eUIAdjTP7HM49Wof/8SG/a2XAHOJJcbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:05:54:8e:29:45:a0:0d:a6:7a:0c:d6:5e:be:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
        Validity
            Not Before: Mar 29 13:01:04 2026 GMT
            Not After : Mar 30 13:01:04 2026 GMT
        Subject: CN=3bd8183f73a067182bdf1eeab9e51f34d86126e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:db:ea:12:9c:ad:13:64:b7:6c:88:c3:08:
                    25:e3:42:cd:c4:d1:d4:3e:ca:63:70:05:35:7e:30:
                    d1:c9:01:a8:df:27:3c:4a:9a:33:42:38:df:78:f8:
                    40:ab:7c:51:27:56:ac:cd:cc:db:06:a0:b3:18:a6:
                    5b:4f:33:2e:18:07:15:5f:4e:dc:0e:12:4b:25:e9:
                    da:6a:05:86:f7:ab:1a:cb:93:55:ca:4e:22:7d:88:
                    fc:14:58:2c:36:f8:59:7f:bd:b8:72:62:b1:37:3e:
                    0c:f7:e1:62:3c:f4:50:b9:70:93:93:2a:cd:1b:d7:
                    83:80:5d:e8:3e:e7:44:f4:ee:d4:af:35:5f:a0:12:
                    72:9f:86:54:f1:4a:07:c0:46:a2:d7:52:d1:d0:b9:
                    d0:ef:f7:4b:d0:e6:6e:be:09:d6:c7:6c:bb:a2:6f:
                    f4:fa:09:44:c0:61:8d:31:47:c0:be:8b:b0:2d:68:
                    fe:23:ad:3c:2d:dd:b3:6e:92:67:e2:94:99:73:fc:
                    1a:b9:88:b9:f3:76:78:23:2d:fa:f1:c1:89:02:58:
                    1b:af:e8:d1:a0:9b:ff:39:4b:08:2a:5a:09:ac:5e:
                    da:84:9d:25:71:ae:d1:c6:2b:95:d3:28:06:5f:8b:
                    af:0b:a7:bc:6d:46:8b:61:e4:0c:cd:70:e8:bc:56:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D8:18:3F:73:A0:67:18:2B:DF:1E:EA:B9:E5:1F:34:D8:61:26:E9
            X509v3 Authority Key Identifier:
                keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:61:68:c4:3a:7f:8c:f1:96:94:71:68:72:cc:bf:45:7e:b0:
         be:29:2b:c2:3d:61:76:33:19:9c:56:d4:fa:48:8c:0e:7f:47:
         09:56:92:f7:2d:b1:80:94:0f:20:17:f5:01:28:2d:3c:12:73:
         1f:f2:b1:42:0c:b9:79:43:4f:4f:50:4a:b9:27:2b:72:6a:50:
         cf:e3:84:8c:98:5c:7f:cc:0c:9a:7e:17:d0:48:04:3d:29:2a:
         fd:60:f1:65:6c:1c:8d:2e:9a:0f:f4:0b:75:fa:40:ee:51:c3:
         15:47:ba:53:23:f7:9b:27:52:9f:50:1e:a0:89:3e:fc:f7:9c:
         15:ad:95:04:07:85:a2:05:48:ab:d8:2f:5d:4a:c3:a1:c3:9d:
         f9:74:61:a3:83:2b:ac:36:c8:17:bf:a3:b2:c3:32:96:ce:f3:
         45:19:14:e7:96:e6:e6:36:05:50:b1:32:87:ed:14:67:2d:4c:
         f7:51:62:45:f9:69:a2:7c:79:23:2f:69:1c:7d:3e:99:07:6b:
         cd:40:d4:d1:72:25:78:cf:41:43:4b:55:9b:a1:cb:3c:17:55:
         7b:43:5e:49:46:11:d0:ba:e4:a1:4f:b5:e4:1d:11:bf:fd:b9:
         7f:aa:5e:cb:e8:9f:b8:f5:0e:fb:a0:22:3f:74:de:fe:57:d7:
         08:90:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:05 2026 by rpki-client