Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
File:                     qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft (raw, json)
Hash identifier:          RP8eRu7Fv+Rb8hdDhArbw36iBmqUpsr0ojOwssysfVc=
Subject key identifier:   9B:32:E8:05:F1:BA:FF:F1:65:AD:BD:34:45:21:09:D6:9D:9D:10:40
Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A
Certificate issuer:       /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
Certificate serial:       019D38D2C132F6CBA41DE468A34F7D03F908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
Manifest number:          10EB
Signing time:             Sun 29 Mar 2026 09:00:29 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:29 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:29 +0000
Files and hashes:         1: RraYMVrCuJixNGbRQ0z9NDKek1E.roa (hash: AsevObrrGX9qqWXcQtZtj+F6pyw1NJ4ndfCznJ1rbmc=)
                          2: qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl (hash: V1Y6tFdquhO/WVaKLK452PsKn1qbQno2wt0EafdMWcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:c1:32:f6:cb:a4:1d:e4:68:a3:4f:7d:03:f9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
        Validity
            Not Before: Mar 29 09:00:29 2026 GMT
            Not After : Mar 30 09:00:29 2026 GMT
        Subject: CN=9b32e805f1bafff165adbd34452109d69d9d1040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:b7:45:a0:93:b2:22:26:9a:40:83:bb:8a:
                    85:ea:ab:82:81:b8:85:d4:fc:d9:01:a2:74:55:ff:
                    d1:20:a2:18:61:f9:25:eb:ce:7c:75:7a:8c:e4:2c:
                    90:b5:eb:94:0c:01:52:a0:d5:b5:d0:e8:15:ec:e9:
                    4f:2f:f0:df:0f:dd:85:43:7f:aa:2b:74:bc:78:6e:
                    93:2b:d9:a4:ed:3c:38:e7:9e:4e:4e:a5:af:9c:44:
                    91:3d:7d:ef:25:c8:02:fe:9d:23:41:7e:12:3b:17:
                    b6:6e:65:8f:bb:3c:e3:c4:6a:aa:1b:26:80:b7:5a:
                    e3:9a:4e:df:61:75:b1:84:c5:41:d6:4a:e4:0d:6f:
                    79:9f:e7:5a:f9:09:52:ad:1c:26:87:78:f0:c6:15:
                    7f:7f:1d:3e:db:f9:1b:e6:27:2a:b9:e6:c5:2c:a9:
                    cf:dd:49:9e:1f:e4:29:1b:15:83:c4:f2:34:af:7d:
                    7d:7e:8f:25:09:41:d0:56:be:fc:7f:df:d5:f8:a3:
                    f7:fd:e7:a1:ad:0e:ea:cf:94:80:b0:86:5c:6d:4b:
                    56:e1:47:52:98:dd:15:d4:3e:af:21:96:bb:21:f7:
                    f7:ca:e0:b2:d8:0c:37:65:a2:8d:03:3c:68:2a:08:
                    00:9f:28:30:0f:eb:3f:1a:9b:84:87:75:11:6b:1c:
                    d2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:E8:05:F1:BA:FF:F1:65:AD:BD:34:45:21:09:D6:9D:9D:10:40
            X509v3 Authority Key Identifier:
                keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:fe:39:17:89:1e:1b:d6:1e:af:df:a1:8f:af:d0:b0:a7:
         dc:0f:02:f6:2f:d1:8b:a5:e1:f4:9b:76:4a:f4:dc:4d:d5:1b:
         70:33:a0:23:2f:02:3d:42:d5:a8:33:4a:95:28:4b:24:92:c3:
         bc:8c:ca:63:78:98:cb:0f:c3:01:b6:d7:f6:12:e3:db:08:44:
         8d:a7:80:43:ed:99:8a:35:b9:07:35:1b:3a:bd:d9:79:9c:a5:
         28:eb:57:c4:d7:ad:92:f6:22:5f:70:02:e8:02:76:08:be:89:
         9c:d9:05:8f:d1:23:db:6c:a7:36:14:f9:02:e6:0d:9e:19:b3:
         5e:40:8d:02:04:2c:c4:5c:43:b4:22:da:3a:03:dc:3a:68:f3:
         68:e1:4a:f9:8f:d0:94:37:3c:18:e4:a3:96:09:20:77:ae:b4:
         1b:3f:b3:ba:45:e4:d7:f0:55:18:1b:f9:95:0a:4d:df:f1:42:
         7e:99:bc:47:9d:62:98:f8:4e:33:33:30:a6:28:b2:27:28:5a:
         c6:56:c8:85:75:1b:9d:0b:14:70:16:8c:85:8d:74:c8:25:5b:
         7d:1b:a5:f2:6f:fb:2e:cb:30:e3:31:a4:2a:6b:be:1f:2d:bb:
         71:2e:db:ac:18:65:ea:a8:2d:0e:8e:f3:48:01:5b:a5:3f:44:
         e7:61:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:27 2026 by rpki-client