Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File:                     aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier:          4AhtdUDI78ZbVKG4B1gjBTHaN3br89YqsNOMepvv9HM=
Subject key identifier:   E6:42:BA:31:58:E6:95:99:BF:9A:32:31:42:2A:4F:49:22:03:61:3C
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer:       /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial:       019CC899EF603A6C1C25B48A4B873F4993B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number:          185A
Signing time:             Sat 07 Mar 2026 14:00:57 +0000
Manifest this update:     Sat 07 Mar 2026 14:00:57 +0000
Manifest next update:     Sun 08 Mar 2026 14:00:57 +0000
Files and hashes:         1: CN6EXSiFw5QSIshsUFF4IHVqqoo.roa (hash: hpI75KnlbJC0wwYzc+gWN1gE3ImkLqA31jIBmq06I9w=)
                          2: IKsaSv5WbGQp-IZQdBzI2DlILNc.roa (hash: gbpIt6mebnTkZL27KKmJpAj3jmjIS87m4pvl+MU+r/0=)
                          3: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: QIy/g5xLX7qNcxi0e+BNCDu8NqfPKj4fmIL2rqTx7IY=)
                          4: tI5rZ2OkW-tqnmPYZ_XEde1g-_c.roa (hash: wfc7uwTsNdE3QVJnENIdl7HtSGoVTLNa8OFvwh5hQ/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:99:ef:60:3a:6c:1c:25:b4:8a:4b:87:3f:49:93:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
        Validity
            Not Before: Mar  7 14:00:57 2026 GMT
            Not After : Mar  8 14:00:57 2026 GMT
        Subject: CN=e642ba3158e69599bf9a3231422a4f492203613c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:c5:bd:59:1c:8a:44:68:eb:39:ff:bb:ad:
                    0c:a5:bb:e3:64:4d:b5:b2:84:4e:f9:c5:8f:99:bf:
                    c5:8e:87:c3:f9:a7:77:ec:37:bc:9a:3f:6d:22:ae:
                    d8:e6:04:b0:1a:c3:c2:fe:50:71:66:65:60:bb:8d:
                    f1:dd:83:c4:c4:d4:51:37:10:3d:58:35:74:b3:9b:
                    23:7f:dd:c8:a7:1d:76:a8:63:a2:84:9a:7f:99:4e:
                    6c:84:96:f5:5a:77:8d:c1:1f:ab:a1:bf:ea:dd:cf:
                    4b:1d:dd:64:d3:ae:04:da:0a:42:b4:83:2e:11:36:
                    5b:d9:f2:0a:ed:0e:a7:69:91:40:53:40:4f:be:f1:
                    0c:5d:e5:dc:bd:d7:67:f6:94:a5:33:cc:96:6a:50:
                    b9:85:42:eb:ff:2d:2f:12:96:c0:2a:6b:9b:bd:f9:
                    34:e1:97:35:59:82:ce:f7:b3:b9:ef:e2:27:32:12:
                    cb:fc:ff:ad:d8:c0:5b:1b:d3:30:b1:d6:cf:69:ca:
                    d4:91:1a:b2:8f:cd:cc:b5:fd:60:b1:ef:dd:56:b1:
                    27:c2:5e:e6:07:b4:66:4f:c5:0b:ea:b2:d6:8a:94:
                    52:76:d7:4b:64:93:20:8e:13:88:8f:ac:4a:dd:59:
                    21:af:9f:01:f4:bf:9d:d5:e2:0d:1e:77:e0:16:f5:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:42:BA:31:58:E6:95:99:BF:9A:32:31:42:2A:4F:49:22:03:61:3C
            X509v3 Authority Key Identifier:
                keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:ac:f6:2a:8d:f7:11:e5:90:43:4e:0f:d6:ee:dc:ce:6c:
         cf:3d:1a:6c:81:3f:b1:1c:e4:8f:70:1f:a7:f4:d8:d5:9e:8c:
         33:dd:5d:3f:47:e5:d4:a8:4a:95:3f:cd:00:da:b7:da:34:31:
         d2:79:58:40:4c:4d:b2:1d:48:5f:54:80:8b:25:43:39:99:e9:
         96:f9:11:c2:d1:a5:a0:86:ed:cd:5a:14:e7:21:e1:4c:aa:26:
         f2:0d:8b:e0:7a:ba:72:b3:e6:1d:1f:6f:64:84:f3:4a:c9:ed:
         bb:3e:08:84:bf:6e:f9:fe:0e:1b:06:d9:68:7d:9e:ef:12:43:
         cb:f4:d0:04:27:45:c1:c9:9e:29:d4:14:90:32:88:21:76:db:
         64:8a:4a:fb:4e:93:bc:b7:8b:7e:7d:06:5d:5e:ea:ab:a9:f1:
         72:4a:08:a0:d2:ca:da:fe:a0:9e:cb:fe:98:ff:fc:df:4b:6b:
         2d:23:8a:c9:78:94:11:1d:a7:18:1e:47:c7:e5:b6:60:9c:51:
         d3:5d:46:14:bf:87:86:de:f7:e8:d4:c5:2b:54:41:a2:5f:f9:
         e9:1c:bb:89:ca:ec:f4:b6:20:98:4c:66:61:ef:14:bc:f5:b2:
         6c:8f:fb:42:24:c2:e1:30:92:f5:d5:d3:8c:f5:67:8e:73:31:
         52:54:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:22:38 2026 by rpki-client