Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File:                     QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier:          GF45a2zFDjNSeg4KwGeSpYs09J8s7r9apmsHJ/+FZPs=
Subject key identifier:   A2:74:A6:6A:61:9C:90:FA:DB:36:F3:2A:64:14:73:89:D3:43:E7:A1
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer:       /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial:       019CBF5FF72709BACAB3C00FDB3FB35E7C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number:          09FE
Signing time:             Thu 05 Mar 2026 19:01:03 +0000
Manifest this update:     Thu 05 Mar 2026 19:01:03 +0000
Manifest next update:     Fri 06 Mar 2026 19:01:03 +0000
Files and hashes:         1: 1M-oRRQHQN7WzAJ9drZIYs_Ib5w.roa (hash: NTj3YD9SP7WkKzIuO7OWJNyQJyk6W1qPJFmHH+wxA0s=)
                          2: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: yaC6Vw/hed8J4rglJRjC9k0k2b7JM9ZbSp7epLuKSno=)
                          3: iwD6fP31_W6vGOoxTT3gqLJk_fA.roa (hash: Ome1S1/zjD0FqoPD1PIvZmNPsQ9h6oMkpIMHg8bHlAs=)
                          4: wSoD-Yyuw9oe0PzcTbDZo2JGCUk.roa (hash: Jy2GHX21npd0zGLUhRjI0tTL90Zy1A+Gk3cU0DE8+Os=)
                          5: yb0ajEg9z1jtc-eQZB_4deWv04s.roa (hash: JbsHaJRAdxnzkcLyQJbT2pfp0LO9DsZ4+5HMZ4E0Gmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:5f:f7:27:09:ba:ca:b3:c0:0f:db:3f:b3:5e:7c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
        Validity
            Not Before: Mar  5 19:01:03 2026 GMT
            Not After : Mar  6 19:01:03 2026 GMT
        Subject: CN=a274a66a619c90fadb36f32a64147389d343e7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:4c:6c:75:d1:24:11:b5:41:6b:f5:94:82:
                    4f:fc:d1:47:03:78:f7:ca:ea:df:92:80:48:ac:94:
                    61:66:c5:39:55:9d:cf:70:39:8b:91:23:0d:ea:47:
                    f5:24:1d:39:40:91:f3:16:3d:26:23:e5:31:97:a8:
                    d4:9a:ce:b5:3d:e9:85:ac:18:6a:5b:6e:4f:54:9f:
                    f8:05:28:ba:c6:9d:2f:07:b1:e6:33:8f:e3:cf:f0:
                    0e:6a:2c:19:9c:d6:6c:2a:23:65:0b:97:f2:37:9a:
                    25:8c:25:37:59:2e:be:43:9a:d3:2d:a0:50:5f:bf:
                    df:f0:e3:d8:60:4a:42:de:c0:3e:cc:5d:67:af:3f:
                    d4:60:a4:34:7c:c7:ff:d7:7d:95:02:40:83:18:c8:
                    7d:8b:08:8c:42:4b:a2:2a:1c:1d:64:da:08:39:37:
                    81:4a:de:70:43:62:34:1b:fd:a5:30:4b:4d:28:45:
                    20:2c:1e:02:e0:f3:f9:c8:c0:80:19:fa:29:e9:d5:
                    5d:8b:77:40:7d:55:b8:6a:18:54:25:33:fe:44:0a:
                    be:c5:d4:94:f6:be:96:c3:5b:22:f6:cf:81:1a:a7:
                    85:77:94:cc:73:56:55:30:cf:2d:22:80:4d:df:95:
                    96:b4:7a:fd:84:b8:d2:39:cf:b9:55:63:01:1b:9f:
                    97:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:A6:6A:61:9C:90:FA:DB:36:F3:2A:64:14:73:89:D3:43:E7:A1
            X509v3 Authority Key Identifier:
                keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:22:82:81:7a:29:63:46:2f:d6:a3:13:53:1a:29:f0:5c:6e:
         67:10:2a:d2:7b:a5:a0:f6:b1:fd:38:fc:01:65:07:24:49:c9:
         c1:96:e1:7b:d7:a2:90:2f:8b:04:29:cb:aa:b7:c6:b0:ba:a4:
         1a:ee:14:30:af:cf:21:a4:40:64:d0:51:9a:71:ff:84:5e:9e:
         d6:e1:9a:c7:36:2b:d7:cb:a0:df:45:9b:76:8b:af:76:0f:1f:
         7a:23:0a:f9:70:cc:04:db:58:5d:6d:43:07:b4:e9:b6:10:68:
         0a:a8:80:40:1c:5f:a2:20:2c:61:55:d1:9f:46:ec:62:4b:8f:
         b8:bc:9b:6f:dc:e4:27:89:7f:31:1f:b9:20:47:a2:28:78:28:
         7f:72:5b:a5:62:72:0d:92:16:e2:32:ff:6a:54:0e:27:b9:b5:
         58:cc:6f:0a:f4:be:cc:3f:aa:b5:69:55:e6:96:c1:8d:b4:45:
         34:bc:56:58:ac:c2:18:5b:bb:55:9e:71:0f:05:56:89:93:4a:
         c2:e9:b5:1f:ac:22:c7:7b:26:9c:83:ed:87:2b:e6:86:07:5c:
         43:c4:31:fc:45:b5:db:6f:98:85:29:4a:74:40:4b:72:27:0a:
         c9:6d:e9:ea:67:cb:3d:1c:f3:65:1e:b3:12:51:22:ce:1b:8d:
         01:48:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:58:37 2026 by rpki-client