Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File:                     qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier:          9osRO+W/xH6l4HMMX09iPU8H/jzhHTNsclD5MGppYrc=
Subject key identifier:   C1:E9:74:5A:3E:1E:6A:1B:0D:64:04:D6:98:71:08:7D:83:38:58:40
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer:       /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial:       019CE4B636C45FDA47B366A284DA50E866C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number:          17F8
Signing time:             Fri 13 Mar 2026 01:01:12 +0000
Manifest this update:     Fri 13 Mar 2026 01:01:12 +0000
Manifest next update:     Sat 14 Mar 2026 01:01:12 +0000
Files and hashes:         1: HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa (hash: VJAIFmjRG0CrMBQmMTvTyvzSn9UbCMce42aoZ7KBzXY=)
                          2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: NR41wJ2a7dvpXD8beyIknVN+4Kp0OaMAZHI3lvl3BQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b6:36:c4:5f:da:47:b3:66:a2:84:da:50:e8:66:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
        Validity
            Not Before: Mar 13 01:01:12 2026 GMT
            Not After : Mar 14 01:01:12 2026 GMT
        Subject: CN=c1e9745a3e1e6a1b0d6404d69871087d83385840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:fa:6d:82:04:70:63:3e:1d:70:82:3c:4b:
                    b9:e0:af:91:bf:82:a0:2f:b1:8e:ed:a9:1f:af:9b:
                    ac:04:00:3d:69:ed:94:c6:f3:6e:bb:a8:36:cb:b7:
                    b5:af:e1:a3:fa:6a:a0:f0:70:a3:9e:ad:b9:64:be:
                    8a:4b:20:7f:5e:ce:8b:6b:f6:a2:13:48:8c:12:77:
                    43:87:56:a6:09:ea:4e:b2:a3:8e:1c:8c:d9:6d:c6:
                    43:31:70:36:bd:45:77:44:d2:6b:35:3b:7e:a8:ff:
                    a3:bc:c7:2f:f4:eb:8d:07:0e:7a:fe:6a:fc:91:bb:
                    63:8e:6c:83:18:d5:33:2c:c4:cd:8e:87:7a:94:a2:
                    06:26:3b:e2:4c:45:6a:e5:c5:3b:ad:b2:7d:d3:e6:
                    c9:37:12:1d:9d:d8:81:fc:d4:5f:e6:fe:18:f7:0d:
                    5d:de:fd:78:5e:00:68:2e:fe:ca:88:11:cd:e0:f1:
                    e8:98:02:7d:85:b8:f0:7a:d3:0a:74:ef:ac:75:d4:
                    6d:0b:0b:af:92:6e:d6:87:07:39:52:d5:f3:7f:bd:
                    c7:ee:13:8e:d1:06:13:08:78:62:86:5a:3f:26:d7:
                    c1:cc:49:20:48:57:06:93:34:19:ee:dc:19:b0:30:
                    7c:a5:5c:35:91:ef:e9:8b:5c:ef:dd:08:47:26:37:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E9:74:5A:3E:1E:6A:1B:0D:64:04:D6:98:71:08:7D:83:38:58:40
            X509v3 Authority Key Identifier:
                keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fb:7f:ef:3e:28:1b:16:d8:82:3d:4a:13:4b:e4:d7:67:76:
         18:0a:e0:08:86:45:0e:fc:2c:4d:47:43:21:f3:03:7f:dc:e6:
         8f:e9:7e:73:ff:dd:d4:57:74:21:4f:c0:6f:68:4f:f3:a1:11:
         97:8f:d1:48:ff:3b:f0:57:35:82:7d:60:04:18:be:98:df:af:
         ff:d5:1f:6a:9a:e8:c3:33:ad:91:d1:8b:31:e9:40:4d:d8:4b:
         ec:24:51:d6:ca:62:9b:f2:88:27:73:74:de:0d:22:47:88:ab:
         20:40:ce:28:c6:46:0a:6e:14:7c:53:c9:ee:3e:c1:b8:f1:cd:
         c5:67:49:b5:8f:e7:db:f1:1e:d6:62:68:6d:d6:c7:9a:76:86:
         8b:17:46:1b:c1:84:20:cc:8e:42:3a:de:1e:97:79:51:5a:a9:
         7d:8d:d5:c8:5c:80:4b:b7:44:65:6e:a9:94:15:dd:16:ff:e4:
         74:e5:ff:c2:fd:00:e7:5e:f1:3d:cc:dc:e5:4f:11:c5:be:a4:
         36:dc:d7:29:a8:19:d4:3b:49:d4:8d:b5:a3:69:26:56:e5:45:
         58:1b:88:ea:bf:24:22:f6:5c:8e:5d:af:ca:a6:5a:90:f7:4c:
         80:87:64:05:5c:ed:1d:be:6f:65:75:9a:35:49:96:36:dd:16:
         82:28:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:25 2026 by rpki-client