Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File:                     qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier:          e+u/2GmVbpifKnnX9Z1IH5HipeQrvkKIzdsEGIzch9w=
Subject key identifier:   CA:27:1C:55:A0:4F:34:63:51:9D:69:37:5A:8C:D2:C8:CE:EC:2C:29
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer:       /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial:       019CE448733905027781196345DBB1606E1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number:          0B32
Signing time:             Thu 12 Mar 2026 23:01:19 +0000
Manifest this update:     Thu 12 Mar 2026 23:01:19 +0000
Manifest next update:     Fri 13 Mar 2026 23:01:19 +0000
Files and hashes:         1: m86oxA_k3vw-M6KhPPiDUZnBVgA.roa (hash: 1GePjxZamSe3/wMfx0CTdKkbwHo9MTWnsxySOK90U8k=)
                          2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: 4+TQDNE9fejctm0dfy06L8WRiYNQi2fG8lwmX+Z3OC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:48:73:39:05:02:77:81:19:63:45:db:b1:60:6e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
        Validity
            Not Before: Mar 12 23:01:19 2026 GMT
            Not After : Mar 13 23:01:19 2026 GMT
        Subject: CN=ca271c55a04f3463519d69375a8cd2c8ceec2c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:30:7c:39:ac:70:94:5e:df:13:8e:24:58:
                    71:de:38:6d:a8:e2:33:60:07:0b:97:17:93:63:49:
                    48:e4:63:bb:ee:1a:48:66:9b:20:26:84:f7:5c:95:
                    97:41:7c:97:03:15:f2:9e:b1:8f:9a:13:89:bc:c1:
                    e8:ee:0e:4f:7b:da:0a:ed:b8:8b:a9:af:f5:9a:43:
                    9a:26:13:60:b5:e6:48:7b:83:38:fe:b8:4b:90:b5:
                    e1:68:e0:b9:92:db:a3:26:68:c5:0a:d8:07:e3:c8:
                    9d:7e:9e:4a:16:24:26:b9:ba:5b:5a:ed:95:f2:80:
                    d2:0f:45:22:fe:08:66:be:45:b7:02:3a:c3:b4:11:
                    22:5c:60:47:bc:60:25:8b:0b:6e:b8:76:cb:7a:05:
                    7c:9d:2a:94:f6:c0:c9:ab:3a:16:15:7d:20:18:82:
                    1f:a6:4e:ca:48:be:f9:1f:99:e8:2e:2c:e0:d3:5c:
                    24:8d:2b:97:8c:2e:2a:69:18:a4:32:90:a3:00:64:
                    e1:88:88:1a:cf:28:4b:fc:1b:c0:2e:be:fa:82:c6:
                    71:d1:c9:c8:70:e6:b1:55:6d:47:a2:57:4f:1c:93:
                    db:93:81:73:f5:46:72:f3:26:a7:de:28:6e:39:ba:
                    0e:2d:50:cd:1e:e7:76:95:f3:bc:12:fb:4f:f4:6e:
                    9d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:1C:55:A0:4F:34:63:51:9D:69:37:5A:8C:D2:C8:CE:EC:2C:29
            X509v3 Authority Key Identifier:
                keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:31:57:fb:4a:34:44:ea:c1:0e:84:10:60:ae:4c:ac:e7:b9:
         2b:f1:b8:d6:66:92:41:c2:a8:0b:90:c1:ef:7c:c6:33:e5:a3:
         46:d7:b9:5f:a5:1e:03:0b:2a:53:94:7c:c4:78:ab:27:b1:65:
         23:3c:34:8b:1b:ef:88:42:ab:83:ef:73:79:55:52:23:48:8e:
         ff:90:bb:93:56:61:05:08:24:86:52:ef:55:9c:90:7f:ab:6e:
         56:78:6c:1c:6f:42:35:16:33:69:0b:d0:29:ce:1f:3c:14:5f:
         7b:47:26:9a:bb:7a:4f:59:25:fa:36:7a:04:df:06:d0:ed:b8:
         27:e1:57:cf:df:65:d2:f5:8e:18:aa:09:d4:5e:d3:b2:a1:73:
         a2:1c:e9:86:9d:9c:86:1e:ab:bb:70:4d:2c:aa:df:ea:62:94:
         fa:c7:a8:eb:56:f5:22:4b:a1:9b:b3:a2:f4:0b:c0:f6:42:3b:
         ac:f1:0f:96:83:6d:0b:91:2c:24:9c:00:3a:38:0e:8e:88:81:
         6f:04:8d:9a:9a:bf:32:3e:6c:5a:e2:75:a8:c2:87:a6:39:cc:
         7a:26:35:2f:de:fc:01:9d:60:63:98:f9:fb:46:dc:9b:f4:4a:
         66:83:e1:76:8b:fe:96:7b:9e:c1:04:19:82:0e:16:20:3e:6f:
         f3:f8:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:38 2026 by rpki-client