Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
File:                     QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json)
Hash identifier:          jWugAw5qZMS13GilyFzxRf+Y0u8aC8K2J75G3Xvnl7o=
Subject key identifier:   96:48:01:60:35:71:BE:D1:77:08:D3:3D:40:16:BC:D6:32:4F:A9:4A
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Certificate issuer:       /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial:       019D382E86EF6FBDA81667E5DEF703E36F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
Manifest number:          0F09
Signing time:             Sun 29 Mar 2026 06:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:06 +0000
Files and hashes:         1: 3kLb2SclnRZ3nd2D3Q0PJ_hFvoA.roa (hash: 6pxbFnk+ektQu+gyRYaAFu/ZHeh+7fJhw5N9t7HsTNc=)
                          2: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: HWGWbPV01rH4bog1OJteeD3vFuyezqJ1k4CumkDn7WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:86:ef:6f:bd:a8:16:67:e5:de:f7:03:e3:6f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
        Validity
            Not Before: Mar 29 06:01:06 2026 GMT
            Not After : Mar 30 06:01:06 2026 GMT
        Subject: CN=964801603571bed17708d33d4016bcd6324fa94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:f0:45:54:4f:17:cc:f5:2b:a3:fd:39:88:
                    02:65:9a:3c:80:4d:0a:97:84:89:fb:ae:0f:4f:68:
                    31:60:bf:4c:b5:90:33:d8:74:ec:e8:97:4b:98:7b:
                    23:41:b5:a2:ec:e6:98:61:75:bc:d4:27:1a:14:62:
                    36:86:7d:6c:21:11:a0:ba:46:d3:82:a6:2d:90:ef:
                    91:9b:e8:cc:b2:cf:90:7e:62:9f:32:01:9a:08:74:
                    19:5c:f6:fe:36:db:e3:f4:c1:07:24:e5:62:e1:b1:
                    1e:3c:b8:25:8e:0d:60:22:56:d0:2e:d4:c9:de:cb:
                    79:86:71:b2:b6:d0:0d:da:a9:25:92:e1:d8:36:f5:
                    44:9e:0c:fc:e5:71:2e:7a:bc:6e:99:43:ad:5f:c0:
                    4e:16:6b:e3:64:d1:87:6c:97:ae:14:13:63:c8:d5:
                    6e:68:03:2d:c6:7f:6b:5a:d0:7d:2c:ce:a2:b0:3e:
                    d5:b9:c8:94:b4:21:54:06:3c:ae:fa:cf:b2:0e:f9:
                    83:24:cb:df:93:ec:75:ae:7e:68:56:ff:be:4b:54:
                    c8:b4:c7:40:85:3b:af:0d:36:be:ce:21:f5:64:76:
                    9a:3b:7e:e1:dd:de:a0:bd:34:7c:2c:8f:b5:37:8a:
                    35:d0:bb:4b:36:41:58:ca:57:b1:22:72:04:18:f3:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:48:01:60:35:71:BE:D1:77:08:D3:3D:40:16:BC:D6:32:4F:A9:4A
            X509v3 Authority Key Identifier:
                keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:64:0d:bd:9d:80:ca:ba:e9:1e:ad:c9:40:99:79:6f:2e:e1:
         f1:a8:f1:1c:98:14:57:f4:35:6b:89:ca:96:f7:ba:dc:f8:0b:
         3c:6e:55:86:a7:b5:64:1e:e9:2a:3c:5f:f4:fc:82:5b:43:8c:
         c0:34:cc:6f:9d:6e:73:b2:d1:a1:56:a7:08:ad:31:2b:66:e5:
         0c:73:c1:8c:6c:9e:d4:e4:5e:3b:13:24:24:a8:99:05:71:8b:
         2c:ac:d1:a4:1c:33:05:bd:21:66:d0:82:5f:ef:66:8d:b5:09:
         5f:95:8d:6e:af:04:82:ac:8a:bf:f5:da:af:4a:a8:e1:c3:9f:
         c9:1c:bd:36:b2:23:5f:59:d2:87:53:c1:e3:b4:6a:33:df:79:
         e0:89:a6:8e:82:14:e9:54:52:54:b8:9c:b1:2f:0f:d1:5e:eb:
         fd:64:6a:4c:47:f4:19:99:9b:72:d6:d9:ef:5d:78:e5:0f:c5:
         6c:40:33:2f:d7:02:f0:1c:d1:fe:5f:c8:57:4e:32:dc:30:87:
         ff:69:79:a1:43:b5:8a:5b:9e:35:43:13:7f:40:0d:d0:4e:6a:
         f1:e8:93:07:30:2d:6a:7d:c2:9a:fc:a3:e6:1e:4e:da:46:1b:
         4c:37:0f:67:ca:af:0b:28:14:b4:a5:d3:1d:0b:84:cf:26:70:
         d0:70:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:12 2026 by rpki-client