Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
File:                     qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft (raw, json)
Hash identifier:          Nbwiucd0PYJd2MLJFzeyCsOcMKzAPjRLc4nOvNs2cNE=
Subject key identifier:   DE:4E:E4:56:2C:CB:91:6C:18:59:BB:9B:51:21:77:A5:44:57:7F:3A
Authority key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3
Certificate issuer:       /CN=aa358cc061e36be03a4ed92ad671780f06589be3
Certificate serial:       019D37F72B8E8F49580FBECB728CD6A8ED8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
Manifest number:          0135
Signing time:             Sun 29 Mar 2026 05:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:38 +0000
Files and hashes:         1: qhkhDbPLjPfZGzwb2pQpWhREyBA.roa (hash: ClIQH06bbp+6RP85PzycOSnYtQQfejT/0AH06HLWtZo=)
                          2: qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl (hash: 8mHCk4BWmy081A9ytLEJuoXNcrLPtkWGQnLV1YnU7rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:2b:8e:8f:49:58:0f:be:cb:72:8c:d6:a8:ed:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa358cc061e36be03a4ed92ad671780f06589be3
        Validity
            Not Before: Mar 29 05:00:38 2026 GMT
            Not After : Mar 30 05:00:38 2026 GMT
        Subject: CN=de4ee4562ccb916c1859bb9b512177a544577f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9b:cb:b6:f5:2f:af:09:27:5b:d1:d6:08:60:
                    22:b9:98:59:ed:1f:73:2c:10:be:db:bf:0f:8e:80:
                    e2:b9:89:31:be:05:e6:e0:37:70:1f:a7:62:b4:ed:
                    71:b7:bc:1c:f6:ed:8a:7f:96:ff:2e:57:cc:d2:ce:
                    52:d5:9a:ab:52:aa:6b:58:26:38:e3:78:1c:22:39:
                    b7:3d:d2:91:52:bb:d1:73:4a:b4:c8:e6:c9:1a:cd:
                    87:54:e7:59:fd:e1:91:b8:78:ee:8e:bb:ca:f4:39:
                    7d:a8:30:39:f5:e2:05:10:db:bf:a0:b4:ce:72:2b:
                    ab:f2:50:e2:57:cc:eb:2c:83:1f:80:50:55:5b:98:
                    03:73:e0:cc:c4:a7:9a:0a:20:fa:86:c1:60:98:79:
                    80:e4:aa:d4:92:41:cf:cd:aa:64:16:df:24:64:35:
                    31:5e:1f:8c:09:57:2e:4c:a0:65:91:27:e3:ab:29:
                    33:01:06:18:98:f5:c6:12:09:96:6a:cb:fe:16:d1:
                    3e:1a:85:41:86:17:8e:6e:fd:1a:9a:13:be:f3:12:
                    b6:7a:a9:ac:42:a8:be:51:cf:20:00:6f:ec:89:4b:
                    c3:7e:a5:1f:73:5d:45:f4:e5:c5:f6:76:6f:dc:82:
                    66:90:63:33:d9:c2:0d:ef:2e:96:d8:c2:84:a1:b0:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4E:E4:56:2C:CB:91:6C:18:59:BB:9B:51:21:77:A5:44:57:7F:3A
            X509v3 Authority Key Identifier:
                keyid:AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:b7:a0:35:46:a7:76:13:d4:c9:8b:33:4a:93:55:b8:78:
         ad:cf:4d:8b:d4:4f:9c:41:92:67:b5:f7:e6:3e:9c:67:8e:15:
         8d:2b:9a:2c:94:c0:6a:21:64:c6:a4:af:d5:ae:8c:55:99:8f:
         4a:82:a6:49:c4:f1:e4:c0:ce:58:e3:74:f7:1b:62:9c:4f:a4:
         2c:f2:d1:c2:fb:f6:83:77:19:62:d1:f1:ea:2e:88:e3:0d:5d:
         eb:06:45:43:d2:a1:ff:a4:88:5a:07:9f:c5:cd:f9:53:93:b0:
         64:f4:cd:ce:5a:63:29:2d:ed:b5:3b:f1:10:05:de:24:e6:1e:
         fe:98:ae:37:76:fd:d2:21:1a:b9:4f:c9:d5:bc:f3:d3:38:9c:
         54:ad:c7:29:8f:c8:59:d1:df:bd:43:54:f8:78:74:4b:6e:b8:
         a8:d5:75:06:3a:55:93:fb:b1:2e:c2:92:50:4e:66:8d:66:84:
         d4:33:56:65:e7:44:4e:7e:ef:ce:5c:de:4d:cb:af:9c:ff:42:
         ef:c8:6e:87:d7:25:01:a8:eb:e6:91:52:41:38:c2:9f:2b:44:
         5d:a4:8d:b9:a9:47:0f:f6:2c:37:4b:61:56:3c:e9:7a:43:da:
         71:04:53:72:30:e7:32:33:0c:b6:58:30:30:98:f1:34:30:31:
         16:8c:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:07 2026 by rpki-client