Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File:                     QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier:          u14nZBeQyr6Bq/xuIm2md6haOpZkXFomKFItwbQDlQU=
Subject key identifier:   7C:7D:75:41:B7:30:84:0A:2B:CB:EC:69:22:74:A1:97:92:AC:78:D4
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer:       /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial:       019CE47EA88EC987F806CD0BCD8165AC861B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number:          1865
Signing time:             Fri 13 Mar 2026 00:00:31 +0000
Manifest this update:     Fri 13 Mar 2026 00:00:31 +0000
Manifest next update:     Sat 14 Mar 2026 00:00:31 +0000
Files and hashes:         1: 7Ajy7T_IXat5EHnX5jOdCl3BXSs.roa (hash: Rn+5opWUGoRW49OpMrdlbpM9u9h2SBCx0mFY1z5Li4g=)
                          2: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: 0gJbaZtyTlcNdR1aQPH1UftjLwwo1UwE+M/dth2jnpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7e:a8:8e:c9:87:f8:06:cd:0b:cd:81:65:ac:86:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
        Validity
            Not Before: Mar 13 00:00:31 2026 GMT
            Not After : Mar 14 00:00:31 2026 GMT
        Subject: CN=7c7d7541b730840a2bcbec692274a19792ac78d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:72:2c:de:5e:b6:83:af:76:01:19:f6:a2:
                    cd:03:af:55:1a:08:20:83:7a:08:54:10:f0:c7:d5:
                    6a:20:44:d5:8d:f5:45:b9:2a:37:3c:d0:eb:0a:3a:
                    cb:2a:b2:31:b4:63:ef:52:7a:33:17:a4:cd:14:4d:
                    8b:99:d4:fb:18:f7:be:7d:2a:88:be:49:34:e5:3f:
                    cd:ac:44:32:ea:2a:db:c1:25:2e:d0:85:2f:e4:eb:
                    70:74:08:f1:45:ce:5e:f3:88:03:09:d9:1b:87:fc:
                    b6:61:ca:a6:aa:7f:9e:f3:21:dc:d1:fc:7b:9a:70:
                    c6:e8:c2:74:42:e4:34:cb:82:2b:7d:fe:65:f6:a8:
                    42:c6:1f:d1:c1:e1:94:a4:10:d4:d9:b1:a8:1a:84:
                    29:5a:f9:ab:86:44:26:9a:5e:d2:f3:c3:5f:5b:3b:
                    f4:14:26:a5:7a:48:96:a3:2f:eb:6f:b3:fc:52:e6:
                    41:3d:3a:bc:0b:6f:93:95:ae:d9:d2:9f:d0:de:12:
                    75:88:77:50:7f:cd:f1:59:69:e3:ab:b0:b8:2e:45:
                    08:92:01:07:27:a1:fb:4d:96:cb:17:d9:6a:45:62:
                    44:75:24:23:56:4b:d8:99:83:4a:de:83:ba:03:85:
                    ef:72:24:76:76:ac:24:58:cc:85:a2:ea:ab:2d:03:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7D:75:41:B7:30:84:0A:2B:CB:EC:69:22:74:A1:97:92:AC:78:D4
            X509v3 Authority Key Identifier:
                keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:30:aa:04:31:1c:cc:ec:77:84:6a:cc:28:b3:67:9b:7e:
         60:cd:3d:06:aa:a6:de:1b:a6:b9:17:be:bf:ba:7e:66:72:2f:
         dc:3c:41:b1:08:75:5c:bc:9a:0c:c3:04:ae:9c:cc:e4:c9:c6:
         5c:e9:1e:d7:37:46:78:1a:e1:8b:53:eb:85:3e:2c:14:df:5e:
         d0:71:be:55:76:f6:3f:66:88:15:be:7b:af:bf:8b:37:15:df:
         9d:b2:cc:0a:39:b2:53:1a:4a:20:d2:e0:79:eb:e1:67:4b:35:
         80:f0:a7:65:6d:e0:78:39:d9:3a:e3:bf:e4:4e:21:0e:4b:9e:
         55:53:14:1c:5d:95:2f:ac:f2:25:cb:cf:91:61:0a:31:80:3e:
         28:99:13:ea:64:a7:65:7c:9d:77:e3:0a:6d:18:1e:de:93:6e:
         97:e2:31:41:d3:93:89:ea:48:0f:ed:ca:17:25:26:fe:49:12:
         64:a3:c8:a5:2f:54:1d:4d:ac:dc:6b:98:42:80:c4:2c:6c:53:
         56:ff:c3:8a:e2:46:d0:2c:1b:0a:ab:7f:be:ce:1f:55:98:80:
         e4:77:b7:fc:12:70:6c:0b:73:65:a4:10:15:69:3b:69:5b:f6:
         fb:97:a8:5f:7c:cc:a8:b1:4f:c8:fd:f1:ac:df:5d:78:ac:5d:
         37:f3:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:04 2026 by rpki-client