Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
File:                     QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft (raw, json)
Hash identifier:          9wWMTM8CltZ9FkiJ6ayacWv5VLBB0oAac75UW4NFWlc=
Subject key identifier:   E3:ED:97:3A:B9:3F:76:02:E2:20:90:EA:AD:75:C0:3B:D5:D7:21:BF
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Certificate issuer:       /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial:       019D382E4462568A44D01B03A5B111ECA53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
Manifest number:          12BD
Signing time:             Sun 29 Mar 2026 06:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:49 +0000
Files and hashes:         1: 2SKAnmNppGmTIZV2xgVXbNnLQZE.roa (hash: 0TEDM1XRgsWS8H5Ci7uA1v4v4wOO9F775kBBURCrd3c=)
                          2: QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl (hash: /s0SfNtkUzZMEPEnl6Q/FvRoyvPpnLKfUTGXahP5Ofk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:44:62:56:8a:44:d0:1b:03:a5:b1:11:ec:a5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
        Validity
            Not Before: Mar 29 06:00:49 2026 GMT
            Not After : Mar 30 06:00:49 2026 GMT
        Subject: CN=e3ed973ab93f7602e22090eaad75c03bd5d721bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2c:11:f6:f3:ef:9c:c7:12:07:d9:bc:44:30:
                    bf:b0:54:63:42:84:9a:da:86:cf:a0:59:85:00:8c:
                    a0:7d:02:01:c4:13:43:13:d7:c9:45:05:a3:3e:e3:
                    2c:34:29:d8:3b:88:d7:58:99:b6:3b:ea:02:52:26:
                    71:f6:73:c4:40:8b:1f:07:99:ba:55:e4:66:66:9f:
                    74:01:f5:ab:61:7c:05:dc:66:97:8a:25:df:b8:07:
                    76:81:d7:c7:19:1b:b5:46:8b:5d:e8:7c:80:d4:f5:
                    aa:12:ca:cb:93:71:ec:79:25:5d:b3:3e:7d:dc:47:
                    fb:10:09:de:95:f8:dc:b3:1d:7e:2c:67:71:2c:f4:
                    26:cc:94:59:7f:3c:92:3e:9d:95:cf:c8:16:ec:d0:
                    db:4f:dd:09:c6:11:50:4a:38:28:4c:ec:1a:b7:a2:
                    c6:2a:26:b1:46:bd:6d:35:80:7d:7c:b0:22:e6:e0:
                    b0:8f:bf:c4:14:3a:5f:9d:ae:39:53:fd:30:e9:68:
                    6e:39:1f:b9:23:06:25:f1:84:f7:8a:cb:bb:4a:a2:
                    90:b0:bf:b3:55:d3:ba:2c:4c:f9:97:b2:bd:23:9a:
                    ad:1a:15:28:85:0b:f7:10:57:62:42:95:bd:97:d8:
                    fe:82:c9:f2:18:62:91:d6:a6:95:31:8c:35:0a:23:
                    5e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:ED:97:3A:B9:3F:76:02:E2:20:90:EA:AD:75:C0:3B:D5:D7:21:BF
            X509v3 Authority Key Identifier:
                keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8d:4a:91:47:8c:ad:74:da:c6:6c:92:47:27:ca:69:b4:4a:
         ae:45:c9:5a:2b:ce:c1:44:e7:1a:ed:a9:71:39:49:03:1a:f3:
         72:41:77:f3:42:fb:8c:03:2c:86:49:78:6a:81:ac:2e:77:b9:
         28:1b:3a:ae:e5:e6:1b:19:15:0c:34:ed:fd:c2:4e:b8:c2:6b:
         a5:b8:2a:59:5d:b0:f8:a2:90:0f:e8:ad:f0:44:8c:6e:a2:71:
         3e:8f:90:fe:60:7a:5b:89:8c:bb:7c:41:99:f9:f6:19:7b:96:
         ba:7c:59:fd:1b:d8:79:33:7a:cc:71:6a:64:4e:ba:d2:b1:5e:
         12:7b:67:d9:b8:11:c3:a5:14:1d:97:d4:18:7b:e8:75:7a:23:
         0b:c9:47:cb:4b:53:dc:bf:0d:d8:b9:84:7b:ac:b7:60:5f:04:
         64:a3:27:b9:1c:53:7c:7a:94:98:66:53:87:76:8d:2f:41:2c:
         a7:4b:ec:f6:87:d3:29:60:c8:99:cc:d0:ff:4c:33:68:8d:af:
         f7:ac:5a:63:76:23:ae:d1:34:16:43:e4:4d:f3:2c:08:5e:23:
         35:7d:c3:68:ad:23:f7:de:42:39:4c:5b:b6:ba:34:ac:31:47:
         67:68:20:99:ad:fb:22:52:44:34:72:58:fb:9c:b7:21:7e:57:
         50:36:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:42 2026 by rpki-client