Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File:                     MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier:          ng9AW3T1QXYdFD4Cxhe/jAtBMP5qhGxAYqKRnPpRJnk=
Subject key identifier:   72:7B:93:09:45:90:DF:A4:A1:A5:4D:E0:4A:F1:74:4D:53:1E:99:29
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer:       /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial:       019D3865928F234DE485952C018D60F6CB01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 07:01:13 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:13 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:13 +0000
Files and hashes:         1: I-BczlQ87u3cZxP5X5d_PlT55BM.asa (hash: DRlmLGJSRr+fe7px26Jne8q0/DHdNfMhrIjwQGGjyaI=)
                          2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: LKqIxSeRPfXzblYO8QPc1rhswW831hxjFpz42K5ri8g=)
                          3: NaTtSMcFSdIxu8H6S2lvgqrJ0Uk.roa (hash: 3H1l6ys+xgmXRMr5rMXY56PSQg72vyKmuhKkZeQKlIw=)
                          4: Ov46GgLCmGN9cynwnomndLJK3rE.roa (hash: 4L/nJ8yxPDp+NjD2T6a5/b4C4w4UlasaJygLN6MYTus=)
                          5: UqRSxyomKtUymi7IXAoPkqqc9Mg.asa (hash: J1GRn2t62rZaNAhTHkwBgbzGS8c8siyOl252umE8GzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:92:8f:23:4d:e4:85:95:2c:01:8d:60:f6:cb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
        Validity
            Not Before: Mar 29 07:01:13 2026 GMT
            Not After : Mar 30 07:01:13 2026 GMT
        Subject: CN=727b93094590dfa4a1a54de04af1744d531e9929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:7b:80:1d:bc:f8:57:f4:60:b9:34:88:ae:
                    23:c1:41:e5:81:ce:36:0f:44:71:86:b2:32:4a:95:
                    e0:19:d3:80:a6:1e:c6:ee:64:53:a7:61:52:c5:3f:
                    16:89:04:31:30:3e:00:fa:51:32:d0:6c:5a:05:b5:
                    fb:05:d7:f0:b6:28:06:cc:e8:72:e8:7a:e7:4c:63:
                    34:a7:c0:3e:b9:c8:a4:ec:86:5b:77:6c:7f:6d:bf:
                    5f:cb:60:b3:e5:9a:9e:99:cc:b9:2a:b0:de:a3:11:
                    32:da:3f:10:45:15:e8:9f:4a:8e:5e:d2:94:a2:6c:
                    47:f9:e7:4b:7e:c2:04:a7:1e:bc:00:00:d0:29:39:
                    52:c9:2c:05:39:2d:16:f1:2c:ce:1d:cc:e1:5b:7e:
                    59:42:ed:24:04:2a:3a:58:10:9f:db:5f:43:49:3f:
                    d4:d4:92:a7:92:02:b6:69:09:af:17:8c:1a:7b:65:
                    81:bd:73:20:72:44:fe:fc:2f:35:b6:ec:fd:18:e2:
                    0f:16:50:3e:82:97:98:f9:2f:3c:9c:1d:46:0c:c5:
                    22:84:22:6f:9b:ee:c9:03:a4:e7:9c:bb:9d:d7:c4:
                    e9:b5:b3:73:a1:20:37:b4:52:20:c8:23:97:2f:a3:
                    8f:37:d6:df:2a:e4:2c:8a:61:63:8c:59:cc:c9:a1:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7B:93:09:45:90:DF:A4:A1:A5:4D:E0:4A:F1:74:4D:53:1E:99:29
            X509v3 Authority Key Identifier:
                keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:e7:64:04:c1:e3:9f:5c:c5:30:a7:d6:45:f8:97:4f:a2:
         4e:35:cb:35:7f:7d:a2:01:07:cd:8d:ee:46:66:b6:34:4d:c4:
         9c:d4:d7:1d:ae:cb:9a:e1:32:06:5e:16:3d:b1:8d:8e:52:ad:
         d3:85:ba:c8:ea:80:72:1e:54:84:00:c0:ab:04:6c:50:68:50:
         91:c0:39:86:71:1c:f8:2f:2f:8e:4e:aa:01:39:b1:f7:b0:11:
         7a:39:8d:e6:6e:7e:9b:3a:05:0c:b5:51:7b:fb:66:88:8b:db:
         3c:df:39:8c:83:df:c5:c7:80:d3:b8:54:5b:3c:8f:58:fc:75:
         3c:3e:ef:e5:6e:d6:21:c0:d3:7b:bb:db:f0:0f:91:17:71:66:
         7b:63:65:60:ae:08:fa:a4:36:73:e9:21:42:61:8b:63:97:16:
         67:00:58:de:1d:a0:b5:60:c1:57:cd:b1:67:0a:ff:52:19:66:
         69:9b:2f:28:89:44:01:3d:3e:c9:c9:e5:6a:2b:e9:ca:53:49:
         a3:b3:2d:a9:c7:32:94:71:97:12:9e:ec:db:eb:41:0d:91:ac:
         d9:ec:02:40:5e:1d:4f:83:9b:11:d8:de:54:36:19:df:16:4b:
         07:1c:2f:9c:1e:59:7f:55:ea:e1:02:ea:4e:8a:1f:d4:6a:f7:
         d0:af:f3:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZKPI03khZUsAY1g9ssBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjQyODUwY2FkNDFjZGY3NWEzYzlkNjBiMjFmY2E1NDNm
NzQzODQwHhcNMjYwMzI5MDcwMTEzWhcNMjYwMzMwMDcwMTEzWjAzMTEwLwYDVQQD
Eyg3MjdiOTMwOTQ1OTBkZmE0YTFhNTRkZTA0YWYxNzQ0ZDUzMWU5OTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltd7gB28+Ff0YLk0iK4jwUHlgc42
D0RxhrIySpXgGdOAph7G7mRTp2FSxT8WiQQxMD4A+lEy0GxaBbX7BdfwtigGzOhy
6HrnTGM0p8A+ucik7IZbd2x/bb9fy2Cz5Zqemcy5KrDeoxEy2j8QRRXon0qOXtKU
omxH+edLfsIEpx68AADQKTlSySwFOS0W8SzOHczhW35ZQu0kBCo6WBCf219DST/U
1JKnkgK2aQmvF4wae2WBvXMgckT+/C81tuz9GOIPFlA+gpeY+S88nB1GDMUihCJv
m+7JA6TnnLud18TptbNzoSA3tFIgyCOXL6OPN9bfKuQsimFjjFnMyaGsdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJ7kwlFkN+koaVN4ErxdE1THpkpMB8GA1UdIwQY
MBaAFDEkKFDK1BzfdaPJ1gsh/KVD90OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEt
MDdlZDQ2YjE0OWMzLzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEtMDdlZDQ2YjE0OWMz
LzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpTnZATB
459cxTCn1kX4l0+iTjXLNX99ogEHzY3uRma2NE3EnNTXHa7LmuEyBl4WPbGNjlKt
04W6yOqAch5UhADAqwRsUGhQkcA5hnEc+C8vjk6qATmx97ARejmN5m5+mzoFDLVR
e/tmiIvbPN85jIPfxceA07hUWzyPWPx1PD7v5W7WIcDTe7vb8A+RF3Fme2NlYK4I
+qQ2c+khQmGLY5cWZwBY3h2gtWDBV82xZwr/UhlmaZsvKIlEAT0+ycnlaivpylNJ
o7MtqccylHGXEp7s2+tBDZGs2ewCQF4dT4ObEdjeVDYZ3xZLBxwvnB5Zf1Xq4QLq
Toof1Gr30K/zVA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:35 2026 by rpki-client