Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
File:                     qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft (raw, json)
Hash identifier:          aAPZrHazwEcyEhroLKBzlb9FPYP6zTTI9/qy0eW6zeQ=
Subject key identifier:   FB:4D:73:CC:9E:B2:F0:43:0E:60:9F:33:DB:01:30:99:92:23:C1:30
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Certificate issuer:       /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial:       019D341A83DF31AF4A4D36D237E8710F6A8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
Manifest number:          1892
Signing time:             Sat 28 Mar 2026 11:00:45 +0000
Manifest this update:     Sat 28 Mar 2026 11:00:45 +0000
Manifest next update:     Sun 29 Mar 2026 11:00:45 +0000
Files and hashes:         1: fsorRjNLpV567Bfhzvrah76aFJM.roa (hash: j4qP9CY0ItXZav1pWfPGEd7YIBpId1LZ5wWL7A5xDlc=)
                          2: hMWRlyBu_98qhrvASUIfs50ilt4.roa (hash: IGWE5HJqvsWQ/JQ2ivM4pc0kcFg9yZY3dxE1FGpgh1g=)
                          3: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl (hash: uM7UNg6nyX1wwxexrXkZniv20bzerc8VRnsSIHwxDG4=)
                          4: yeLJIzyENF-xSwUvcw-83vXbHV0.roa (hash: /maHsTe7P80FB56mfWTMzRdcMrW1yJ3jN8SeCvnlqtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:1a:83:df:31:af:4a:4d:36:d2:37:e8:71:0f:6a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
        Validity
            Not Before: Mar 28 11:00:45 2026 GMT
            Not After : Mar 29 11:00:45 2026 GMT
        Subject: CN=fb4d73cc9eb2f0430e609f33db0130999223c130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:fd:78:1f:dc:4e:de:ff:98:5c:14:84:a0:
                    be:5d:5a:7b:d3:78:03:70:ef:b9:4b:11:6c:b5:4b:
                    09:c1:b3:94:85:4d:0c:82:d3:90:7b:0b:19:96:0b:
                    84:f1:31:78:3b:82:2b:37:6b:b5:8c:6f:47:ff:32:
                    44:c3:72:f6:f2:be:3b:db:e9:70:89:2c:19:7b:1d:
                    02:2c:7c:55:2a:c6:52:70:db:ef:25:b8:9a:0b:dd:
                    54:5a:c5:47:52:ab:41:16:4d:6c:d0:3e:19:65:47:
                    78:a4:47:8b:6a:d3:b9:0a:ba:ae:09:7d:f8:5b:af:
                    49:9d:f9:66:8b:ac:e5:3f:93:3c:08:a3:15:79:69:
                    87:c7:43:7f:11:3c:5e:f1:3c:79:e4:60:38:d9:a7:
                    de:2c:5e:e3:66:b6:1b:35:dc:33:99:cf:7e:8e:de:
                    d9:ce:89:69:5c:76:25:53:84:c6:27:a4:c0:b4:27:
                    6c:5f:96:b1:d2:d8:f1:65:e3:36:a2:c2:4d:4e:74:
                    c2:a1:1c:20:56:a2:b8:fa:eb:af:1d:9a:eb:6c:bc:
                    a5:fd:13:76:22:cc:5e:e0:a3:48:61:7c:4b:73:9e:
                    7e:b2:c0:60:c6:10:07:16:01:71:e2:48:c2:7f:a3:
                    fe:3b:1b:ad:33:01:ba:23:e1:e4:bc:6e:ce:ee:89:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4D:73:CC:9E:B2:F0:43:0E:60:9F:33:DB:01:30:99:92:23:C1:30
            X509v3 Authority Key Identifier:
                keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bf:aa:00:1f:94:04:2b:b2:46:ac:61:73:20:0a:a5:15:50:
         42:c4:78:23:fc:c3:cb:d5:80:2b:0f:65:a2:37:ea:44:98:68:
         96:0e:48:85:95:97:94:4e:b0:83:37:3c:78:6d:fd:d3:22:36:
         04:bb:44:56:a9:a2:4f:b4:da:5c:1b:29:bc:49:d0:83:f1:c4:
         80:7b:6c:e3:f3:7f:98:43:fd:bf:a0:f9:91:c1:bb:c5:11:83:
         33:86:90:cc:57:1d:3b:87:20:b1:f9:d0:bf:b9:fd:b5:5b:49:
         04:c2:d3:ec:74:45:41:9b:1c:20:f5:20:84:22:a9:05:ae:a0:
         42:1c:9f:b1:15:bf:8d:52:40:0c:3b:1f:29:4f:74:3d:38:09:
         52:d5:82:80:26:3f:c3:9f:4e:cb:9f:05:40:a8:06:e4:57:53:
         0f:83:f0:76:eb:d6:6a:1d:4b:d5:9e:f2:1d:a4:c8:f4:f0:db:
         ba:7e:09:28:40:31:93:bc:48:55:38:a5:8c:a9:3d:cd:68:83:
         dc:2f:f0:de:7b:04:a0:e9:75:78:50:78:56:0e:91:0e:4a:97:
         80:24:a8:60:8e:25:0c:52:ba:00:34:30:ae:96:6a:c1:9f:1f:
         05:ca:18:49:2b:e2:17:60:5e:d4:a0:9d:b4:b5:c2:e5:2a:18:
         99:4f:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:46:27 2026 by rpki-client