Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File:                     Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier:          uIpfd3BAcjDfrnnYuSiefhho6c0j3lz1o043tJKPwkQ=
Subject key identifier:   E6:BB:DB:28:7F:C8:20:85:80:40:85:7A:34:92:E8:23:22:31:8D:8D
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer:       /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial:       019CE44832D54512B4AEFE692716EB65A466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number:          01B8
Signing time:             Thu 12 Mar 2026 23:01:02 +0000
Manifest this update:     Thu 12 Mar 2026 23:01:02 +0000
Manifest next update:     Fri 13 Mar 2026 23:01:02 +0000
Files and hashes:         1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
                          2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: mJWQkinDwGdnxksqL83iLg5HmxeBZy0PAnPSdDlXLds=)
                          3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
                          4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:48:32:d5:45:12:b4:ae:fe:69:27:16:eb:65:a4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
        Validity
            Not Before: Mar 12 23:01:02 2026 GMT
            Not After : Mar 13 23:01:02 2026 GMT
        Subject: CN=e6bbdb287fc820858040857a3492e82322318d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:b6:59:31:9b:f2:92:e0:ec:af:d0:a1:82:
                    02:d2:a0:70:11:d9:99:05:df:d1:38:1e:a7:ef:fd:
                    6d:f1:85:11:c3:c5:7f:16:f7:66:45:50:6c:25:19:
                    08:6d:e7:20:8e:d4:b6:40:14:84:97:bc:7b:e0:ac:
                    78:8b:6e:06:93:54:3f:ff:da:2e:b6:bc:21:16:3f:
                    08:39:46:cf:89:d7:f9:9c:7b:b1:d4:b3:95:a9:2e:
                    3c:65:67:b0:9a:57:53:b0:07:ec:34:b0:fb:d6:ae:
                    cd:1e:ce:a2:fe:66:61:7d:76:0c:d7:db:98:ea:2b:
                    f5:52:25:0f:92:6d:8f:6e:24:fd:ad:36:68:71:84:
                    78:76:42:ca:f4:a1:19:00:b7:5c:81:67:4a:1e:d5:
                    74:c2:98:82:dd:b0:cd:a9:31:7c:57:80:4a:69:16:
                    42:dd:34:fd:b5:3c:fb:ff:56:27:8e:00:64:ed:22:
                    ac:26:9d:b0:f0:87:bc:94:a3:c8:51:c0:52:d4:72:
                    18:47:b9:9c:3b:b8:25:66:d0:8d:95:84:12:f1:97:
                    e1:13:e3:98:dc:a2:a5:b4:ca:96:53:ea:dd:5c:32:
                    9c:64:3f:cc:91:10:6b:c9:a3:84:19:f1:64:a0:02:
                    a4:bd:c0:ca:dc:a2:59:b1:df:d6:56:4d:76:19:b1:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BB:DB:28:7F:C8:20:85:80:40:85:7A:34:92:E8:23:22:31:8D:8D
            X509v3 Authority Key Identifier:
                keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d1:ad:b2:bf:5d:7e:b1:85:03:cc:2c:2f:38:34:29:33:91:
         86:79:48:4d:3a:c0:cc:0f:3a:38:7c:b9:f3:1d:f4:90:2a:70:
         1a:ee:42:fd:88:6d:88:ad:b4:9a:a3:ec:89:4e:ea:de:4c:f3:
         3d:6a:f1:4d:09:f4:2b:35:cd:d2:91:81:47:fa:01:80:a2:e8:
         08:cd:29:e6:99:5b:8b:fa:94:5e:b1:4a:54:52:3a:1f:82:a9:
         a8:10:61:5d:c9:1e:9d:67:f9:2e:b6:bd:e9:a1:9b:a7:77:56:
         81:2a:3e:0b:b1:92:93:ea:89:f4:ca:e3:b8:46:59:41:3c:d2:
         5a:32:67:a4:e8:d4:3b:15:15:6d:af:d5:91:90:51:47:5e:cd:
         79:c4:93:84:d2:16:84:f0:50:dc:5c:27:ec:20:16:61:dd:8c:
         60:b4:fa:7f:1d:87:c8:ea:cb:cc:43:09:8f:e5:6d:f1:27:52:
         95:22:06:33:7b:e3:aa:f6:58:70:2d:40:48:e3:b9:a6:28:49:
         a0:e3:9e:ca:b4:5a:0a:31:89:8c:23:58:d8:9e:a1:e1:58:1b:
         3b:ee:85:85:1f:04:07:b7:9d:29:77:39:4f:df:8e:41:a6:1a:
         5a:30:74:8a:91:bf:d3:bd:7c:0f:c8:18:da:0c:a6:92:0f:c6:
         91:6e:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:05:17 2026 by rpki-client