Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File:                     qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier:          GrgxXhm3RFeJZNxkTXU26+thvG507R0mYFPo6D+Zeq4=
Subject key identifier:   CF:0D:1C:9B:61:1A:95:EA:91:55:20:68:89:EA:F4:BC:65:01:79:BB
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer:       /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial:       019CE4B54EC1BAA5C87FF4CDC988234DED5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number:          1866
Signing time:             Fri 13 Mar 2026 01:00:13 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:13 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:13 +0000
Files and hashes:         1: 1b_krTT_K4qK4dHHlDSdwvTB_Ck.roa (hash: WyAqk00HCYlIWNZ7WJdQWAHo5r3VFoh2daJ+Uc2V4bY=)
                          2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: 8sG5ukxpqXPnb5HTQGMfx3bhicgLDnQfo0HckaeAazI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:4e:c1:ba:a5:c8:7f:f4:cd:c9:88:23:4d:ed:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
        Validity
            Not Before: Mar 13 01:00:13 2026 GMT
            Not After : Mar 14 01:00:13 2026 GMT
        Subject: CN=cf0d1c9b611a95ea9155206889eaf4bc650179bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:31:18:27:2a:0d:05:54:b9:05:fb:e9:e0:
                    5e:fd:89:9b:28:fa:cb:c4:0c:1e:3d:3e:57:c5:4e:
                    9f:f6:f5:00:ae:58:94:71:2c:0f:25:1e:58:0a:0c:
                    57:51:77:4c:1c:5a:e1:34:88:6f:28:de:9d:61:ef:
                    8f:6f:c6:9f:a5:cb:78:c4:66:f5:41:b8:cc:a2:94:
                    e1:d3:82:fc:16:39:30:6a:b3:7f:fd:15:ad:a7:a9:
                    0c:aa:aa:99:5d:08:09:87:8c:ee:e5:0c:40:11:2c:
                    58:5b:30:13:99:8f:b1:6e:ad:a7:62:65:13:c3:bb:
                    e7:5c:77:ac:52:d0:46:a5:2c:db:ca:4b:a2:aa:fe:
                    6e:5d:b3:5a:a8:58:8f:17:b3:b7:bd:b7:e3:71:b2:
                    ae:b7:7d:82:5d:a7:8d:fc:35:da:78:3b:e2:bb:29:
                    91:87:01:b4:a4:55:32:4b:e8:88:73:01:a2:27:5e:
                    8e:9a:4e:fb:2f:94:b7:5a:7f:39:d8:5e:0e:b6:ac:
                    d4:d3:8a:06:8a:ec:94:8d:92:02:fd:9d:98:4f:ba:
                    96:f9:cd:80:88:20:0e:a7:28:3c:f5:df:39:a5:10:
                    9e:e6:a7:bd:57:c4:c8:35:c3:4c:dc:1d:ea:e5:d5:
                    ed:37:1a:1b:26:6c:ac:ca:27:cb:d6:8e:86:76:58:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0D:1C:9B:61:1A:95:EA:91:55:20:68:89:EA:F4:BC:65:01:79:BB
            X509v3 Authority Key Identifier:
                keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:82:75:4a:4b:6e:5e:04:de:32:15:5f:62:d5:fe:6a:13:
         9f:7d:bf:91:26:d8:b6:33:20:ad:62:76:a5:f5:48:b4:7a:cf:
         60:98:a0:97:a0:cd:f2:f8:99:db:d8:af:25:cd:77:a8:3e:ec:
         fe:79:38:7f:3d:a7:95:0d:15:43:1a:53:d8:11:11:70:ea:67:
         4d:88:79:d9:50:97:d3:76:c4:96:41:89:23:8f:ca:4d:35:c0:
         fc:bf:19:97:c3:58:3d:b7:96:eb:eb:18:ce:3a:31:e9:1a:77:
         2c:80:48:ba:c1:6f:d7:8a:57:1e:03:b7:0c:84:bc:a4:ed:47:
         8d:23:fe:4c:78:a0:88:39:3f:46:c3:e6:37:d9:93:1c:60:b6:
         a9:69:57:16:8f:2f:45:ca:dd:f4:a7:78:46:7f:97:2e:58:cc:
         0f:c0:71:9f:bd:4f:ae:c4:d6:a4:e4:28:d3:d8:c0:02:0b:2e:
         6c:88:f3:2f:4e:77:7c:ac:4e:d9:6b:68:32:fd:b2:27:0c:2c:
         ff:fa:1f:07:cc:67:3e:d1:64:26:0e:ac:e9:f9:3d:18:da:c7:
         b1:92:c4:eb:74:d5:10:ad:54:35:f0:f6:c8:a0:7b:cb:7c:04:
         cf:2a:dd:1b:dd:ab:7d:c4:3e:de:c6:ef:c3:88:8d:a3:6a:0e:
         1b:9f:7a:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktU7BuqXIf/TNyYgjTe1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDY5MDU4YjRkMzY3NjEyYmU0ODA3MzcyYjVlNTkzZTAz
NDc3NjYwHhcNMjYwMzEzMDEwMDEzWhcNMjYwMzE0MDEwMDEzWjAzMTEwLwYDVQQD
EyhjZjBkMWM5YjYxMWE5NWVhOTE1NTIwNjg4OWVhZjRiYzY1MDE3OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpExGCcqDQVUuQX76eBe/YmbKPrL
xAwePT5XxU6f9vUArliUcSwPJR5YCgxXUXdMHFrhNIhvKN6dYe+Pb8afpct4xGb1
QbjMopTh04L8FjkwarN//RWtp6kMqqqZXQgJh4zu5QxAESxYWzATmY+xbq2nYmUT
w7vnXHesUtBGpSzbykuiqv5uXbNaqFiPF7O3vbfjcbKut32CXaeN/DXaeDviuymR
hwG0pFUyS+iIcwGiJ16Omk77L5S3Wn852F4OtqzU04oGiuyUjZIC/Z2YT7qW+c2A
iCAOpyg89d85pRCe5qe9V8TINcNM3B3q5dXtNxobJmysyifL1o6GdliUJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8NHJthGpXqkVUgaInq9LxlAXm7MB8GA1UdIwQY
MBaAFKsGkFi002dhK+SAc3K15ZPgNHdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUt
NTY2NzQxOWY0NGU4LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUtNTY2NzQxOWY0NGU4
LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLmCdUpL
bl4E3jIVX2LV/moTn32/kSbYtjMgrWJ2pfVItHrPYJigl6DN8viZ29ivJc13qD7s
/nk4fz2nlQ0VQxpT2BERcOpnTYh52VCX03bElkGJI4/KTTXA/L8Zl8NYPbeW6+sY
zjox6Rp3LIBIusFv14pXHgO3DIS8pO1HjSP+THigiDk/RsPmN9mTHGC2qWlXFo8v
Rcrd9Kd4Rn+XLljMD8Bxn71PrsTWpOQo09jAAgsubIjzL053fKxO2WtoMv2yJwws
//ofB8xnPtFkJg6s6fk9GNrHsZLE63TVEK1UNfD2yKB7y3wEzyrdG92rfcQ+3sbv
w4iNo2oOG596Kw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:37 2026 by rpki-client