Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File:                     QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier:          rAXble1wwkRpPO6oF7dz1/t3VZceR4F292ciWay0ZK0=
Subject key identifier:   08:EF:B9:D4:96:01:CC:8A:40:5E:A7:6C:CF:27:DB:6A:F1:A4:1B:7F
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer:       /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial:       019D10B3C819DF662A089FCEF79699D2804B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number:          038E
Signing time:             Sat 21 Mar 2026 14:01:50 +0000
Manifest this update:     Sat 21 Mar 2026 14:01:50 +0000
Manifest next update:     Sun 22 Mar 2026 14:01:50 +0000
Files and hashes:         1: 0fZE0uIvZ6ZkQgfjfFBSc-iQ15Q.roa (hash: XBQwm3jQjgkMj0LZQlnffF8nBMAdgqCU7K93V782wzA=)
                          2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: lsNk7DjLZC3YX7GgCUoxolDHXtFLvgEQLuuVA4h59oo=)
                          3: VL-lnxlE6fflxqRRlw7b9MCnGvo.roa (hash: GtOH60oIJtJHnm++7YABJtPUhpfnGJz3iJ4jvFL6ZBk=)
                          4: hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa (hash: yt1gpylTF5DwEVRgiWOOxqt2J7YwsxusRFsZDCgtRfE=)
                          5: kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa (hash: qZYqyURYcynOIWE252O3MtzO4WaOHKWvGwoZG8pxdGk=)
                          6: sJ4fBRlYkaW2DfbwT41aefbNZtc.asa (hash: KPvz8H9YcmTAaol7AmPzK6hmkkiOVVm9HlZufolZpd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:10:b3:c8:19:df:66:2a:08:9f:ce:f7:96:99:d2:80:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
        Validity
            Not Before: Mar 21 14:01:50 2026 GMT
            Not After : Mar 22 14:01:50 2026 GMT
        Subject: CN=08efb9d49601cc8a405ea76ccf27db6af1a41b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:31:52:85:2e:ea:33:70:b3:92:6a:84:42:
                    55:7a:c8:42:8f:14:4b:32:49:1f:96:bd:08:13:3d:
                    81:28:85:d0:fd:4e:1b:a3:30:1a:81:a7:91:29:c6:
                    f1:6c:f0:bf:70:e5:e4:05:82:f5:af:0f:76:a8:3c:
                    d0:f4:1d:ff:60:94:f0:fb:b8:2b:72:a9:96:78:0e:
                    0d:3e:b1:f9:94:70:d9:c4:66:1c:ca:65:f4:50:58:
                    6f:46:5b:8d:47:df:f9:88:fb:88:78:c6:9b:15:db:
                    a8:b4:09:bd:d5:f4:0a:51:73:f7:fc:47:89:4f:cd:
                    05:53:ea:19:44:9f:8b:2b:f0:2c:09:db:91:36:7e:
                    f4:59:ec:7f:9b:19:b9:27:da:99:54:d8:51:04:6f:
                    60:c9:a5:dd:1d:57:78:86:5e:7b:67:6c:68:55:d5:
                    60:bc:2b:0b:c8:bc:ff:f9:fd:a7:74:dd:29:a3:f9:
                    52:c6:a3:04:30:07:ca:e7:75:60:b3:79:2c:bb:7e:
                    30:e1:70:0d:d3:36:47:9c:3c:67:5b:6a:52:ff:a1:
                    e7:13:75:03:b4:d6:34:cb:85:29:c8:45:5b:c5:5e:
                    9f:0f:c8:cb:15:19:31:6e:f0:31:3f:03:ac:ad:c1:
                    c3:2d:98:89:11:37:ed:44:d5:32:62:0c:2f:d5:f7:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EF:B9:D4:96:01:CC:8A:40:5E:A7:6C:CF:27:DB:6A:F1:A4:1B:7F
            X509v3 Authority Key Identifier:
                keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:75:d4:14:f2:5d:9c:cc:24:94:5c:4e:c6:0c:09:30:a9:
         c9:7b:12:66:ac:5b:59:cf:f8:c4:d3:78:a4:77:16:f0:05:2b:
         c5:93:58:40:74:6e:5e:82:78:96:31:fe:c6:fc:8b:93:7a:a3:
         b7:ba:4e:e1:59:c3:b1:50:aa:ce:c9:50:b8:07:88:7e:db:96:
         71:4e:ed:29:32:0f:a2:e0:66:df:c3:b7:30:d3:02:22:97:31:
         e5:7a:b2:3b:98:39:05:e1:22:56:45:a5:73:7e:bf:1e:23:c4:
         24:4c:8e:41:5e:83:61:8f:0d:fc:9c:c0:2b:cb:8d:93:14:07:
         9f:9a:83:14:98:97:ed:69:b4:03:27:e8:e7:25:13:97:86:6d:
         07:1b:33:32:39:a3:24:d0:e8:03:26:e4:19:bc:24:27:3a:0a:
         97:18:0e:46:66:2c:d5:43:cf:3b:37:7e:de:27:1f:67:9f:3d:
         64:18:0b:12:e0:9a:83:c4:6e:23:95:eb:1e:05:ca:ad:b4:c6:
         f6:0f:ba:e6:81:42:f6:92:9a:b5:77:55:b7:19:40:62:90:52:
         31:31:19:c8:10:0f:b9:21:9a:f4:7c:1f:9e:29:5b:e8:da:1a:
         db:56:85:ea:fc:82:ff:1e:2c:4f:e3:75:14:d2:62:ed:b1:c9:
         13:e5:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:08:56 2026 by rpki-client