Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          tUTMbYBUgiaTI+vKnO7O+A5d+KzTGBBVQGk6JyYHDp8=
Subject key identifier:   65:C9:8B:21:AE:65:87:98:08:8E:19:51:BD:99:4E:13:A0:BC:17:0C
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       019D3941046005BB4AF1C3D4D18845BAF1E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          18C1
Signing time:             Sun 29 Mar 2026 11:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:55 +0000
Files and hashes:         1: A7_y22PIg0hPAMpCsH_sCKGtyg8.roa (hash: jYk6V/JIFZujPYouL6dTCjVEwQr4OkGYQk0D5ScRZVo=)
                          2: Ksd3OiB_AIxcmUtGOKUPQuXbBbs.roa (hash: mbt2rFbow8jwUY5FOtfvQrtCibBO+H5M+VNJrWE5hUY=)
                          3: bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa (hash: BubMw86WqvaBOSfoNUBrIVcL+fL5Ns64cLxY/APuJ7E=)
                          4: f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa (hash: PDGWp7iUzyz4cXF2Z4OAk/knVLv4u1kvbR76Ezmz3vs=)
                          5: j4Ert-J3RYXgEKpLcLx5_T9dxS8.roa (hash: keE/Qns0D+PUwgQtZ9LOIqamoxuah8ZLWQxn+5RiOWw=)
                          6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: WKF1f7yhjJXHG1Il0h6d79GVxdQnnN3VNRygdztIr24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:04:60:05:bb:4a:f1:c3:d4:d1:88:45:ba:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Mar 29 11:00:55 2026 GMT
            Not After : Mar 30 11:00:55 2026 GMT
        Subject: CN=65c98b21ae658798088e1951bd994e13a0bc170c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:80:c3:30:79:16:a3:37:18:32:75:c8:b6:
                    5c:0a:6f:c1:b3:51:f0:09:68:55:41:67:63:57:01:
                    03:ed:ab:7f:dc:dd:20:69:45:4a:5b:5f:dd:d2:e1:
                    17:c6:cb:b0:53:9b:d7:99:62:f8:a4:15:43:c6:cd:
                    f2:be:26:8f:82:39:be:71:95:a7:52:9f:ef:72:e2:
                    72:e3:44:16:a8:1a:00:e7:e8:12:61:2d:60:8e:c4:
                    1d:82:2e:8c:ff:12:2a:1e:a7:d4:38:1f:43:8e:e0:
                    70:43:b1:25:b2:b6:71:69:60:64:18:9b:9c:cb:14:
                    2a:ab:34:e0:30:38:dd:14:45:32:be:94:b1:63:68:
                    a1:a5:71:54:d3:e3:bc:f3:f8:80:aa:87:78:49:88:
                    b5:e5:b7:f8:35:54:2a:bf:f7:87:8f:a0:58:96:c1:
                    73:c0:aa:bc:48:ac:42:9a:fb:67:75:ac:3c:8e:a3:
                    3b:5d:24:fe:a6:e5:58:d5:6c:24:51:0c:08:15:5b:
                    14:ff:6f:94:2e:00:de:66:2f:7d:19:7d:2a:20:61:
                    7d:0e:83:20:23:43:4f:bc:37:aa:44:1e:a3:a7:1e:
                    ad:01:42:ac:15:36:f7:e5:41:2d:7a:af:c4:ef:a3:
                    4e:44:b4:36:3b:18:ef:f4:02:c0:57:79:26:45:6b:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C9:8B:21:AE:65:87:98:08:8E:19:51:BD:99:4E:13:A0:BC:17:0C
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:16:9a:78:f6:cf:db:eb:a4:d1:1f:07:21:b5:35:e7:0a:a6:
         b7:b1:84:b7:69:8f:b0:54:05:18:7d:de:a8:95:cc:ec:ae:66:
         8b:8c:65:d2:c4:65:bd:e4:85:ef:34:92:d9:f7:c6:d9:01:c5:
         83:02:4d:3e:3a:0b:74:eb:6f:6a:6d:aa:c8:6a:5a:54:9a:62:
         74:f2:31:a8:51:a4:77:a4:cc:c6:6f:1b:4b:bd:f3:16:52:20:
         aa:0a:6b:9d:48:01:97:5d:48:0d:9a:96:7a:7a:94:64:b2:2b:
         8f:8d:70:dd:3a:ab:c8:15:98:53:8b:e5:7d:82:1d:4b:8b:a8:
         02:51:e1:d4:04:64:a4:e4:2d:b2:c9:fa:ee:d3:63:b5:b0:1c:
         4e:65:4b:48:ee:1c:70:b9:96:37:e2:b6:5f:bf:65:0f:ad:d8:
         65:9d:49:6f:c7:8f:4a:b0:7a:e7:3f:06:c8:0e:0e:cd:89:5e:
         a2:3d:39:b1:dd:68:81:cc:30:51:f0:de:eb:d4:2f:46:dc:b9:
         94:37:69:f4:58:fe:b5:5d:08:61:c5:b0:86:37:6f:dc:de:8b:
         34:42:49:3b:58:54:8c:80:21:c7:68:07:9f:2c:f2:33:47:02:
         97:73:f9:68:2a:06:3b:94:57:d7:c7:74:52:86:60:ad:a3:88:
         c0:54:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:49 2026 by rpki-client