Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
File:                     QpoEfERhf8-ynNVy962HR9C5Mms.mft (raw, json)
Hash identifier:          582Co99ridwnS9Ca9VhBAZsgVki/52MGkG4NwSVbnjI=
Subject key identifier:   77:EE:60:27:4D:15:1E:63:A2:EF:CC:EB:B2:10:FD:83:BB:07:F6:10
Authority key identifier: 42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
Certificate issuer:       /CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Certificate serial:       019D386586B0A5D8D7AA7978E06993A53752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
Manifest number:          0D04
Signing time:             Sun 29 Mar 2026 07:01:10 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:10 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:10 +0000
Files and hashes:         1: QpoEfERhf8-ynNVy962HR9C5Mms.crl (hash: CDSymDpnnUVaTnkdMqQmcHXZMg1GZEvkpSVwGNDQig0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:86:b0:a5:d8:d7:aa:79:78:e0:69:93:a5:37:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
        Validity
            Not Before: Mar 29 07:01:10 2026 GMT
            Not After : Mar 30 07:01:10 2026 GMT
        Subject: CN=77ee60274d151e63a2efccebb210fd83bb07f610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:06:f8:1b:9a:bb:5c:10:61:2b:7e:a8:ce:
                    15:06:c1:6e:24:0d:2e:18:45:62:5e:e0:c0:bc:2c:
                    53:8d:5b:47:e3:25:12:4a:5d:03:40:31:8d:5f:d6:
                    39:89:f5:fb:f6:51:b1:7a:b0:96:27:18:5a:d7:80:
                    7e:63:ab:c8:0c:df:ff:a9:e8:b9:2c:15:f0:9c:ce:
                    d2:26:b4:d8:94:e8:b3:63:87:91:e2:a3:0d:33:11:
                    84:c6:ee:7a:5c:24:ff:2b:b3:6b:c0:c0:98:5b:58:
                    bf:dc:f0:03:f9:94:11:d8:30:9b:f6:95:8c:13:a6:
                    29:04:69:f6:ee:32:ee:f8:ed:27:12:94:38:c4:9f:
                    95:44:4b:33:1f:9f:26:77:b9:b4:93:71:cc:3d:84:
                    d8:b7:34:61:6f:d5:e6:0f:15:cf:2b:4b:7c:48:cc:
                    00:b3:d0:a4:9b:ee:90:1e:5a:ef:42:fc:53:8e:f6:
                    df:6f:d0:0f:1a:c4:1d:97:fa:cd:83:9a:8e:77:36:
                    8d:93:de:4a:6c:1f:08:e3:ea:4c:e8:5e:f8:eb:ea:
                    4c:01:45:e9:f7:80:57:1a:89:ee:d9:49:4c:2c:28:
                    5b:d6:cb:93:d5:c7:2f:71:f0:a9:59:7a:03:f2:01:
                    82:2b:fd:5c:a8:cb:ed:0f:19:68:7e:ff:74:b9:1d:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:60:27:4D:15:1E:63:A2:EF:CC:EB:B2:10:FD:83:BB:07:F6:10
            X509v3 Authority Key Identifier:
                keyid:42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e7:e3:bc:e1:2e:1f:39:71:9a:5a:80:a7:f1:2a:49:ac:54:
         73:fe:36:f1:0e:5e:57:e2:e8:84:57:b5:0a:9e:7e:08:96:7e:
         3d:3b:3f:61:12:3e:79:78:43:6f:e6:47:ff:f1:14:cf:49:bf:
         36:48:89:2a:29:a9:f0:00:61:47:58:26:6a:c5:dc:86:3a:30:
         8b:ef:51:20:9d:06:66:12:c5:78:fe:ed:8b:b8:a3:a2:ba:13:
         71:12:0a:83:6f:f4:e2:fd:e2:7a:c5:82:14:48:49:65:1c:2d:
         c0:55:2b:a9:60:12:b1:42:f8:67:05:59:1a:d4:d7:ca:d5:bc:
         b3:ef:e2:a8:a6:1d:cb:82:30:4f:17:30:43:13:33:26:d7:3f:
         f4:7c:42:36:0f:7e:cd:c2:3f:aa:44:4d:95:b0:6a:36:b3:0f:
         2a:e6:0f:46:1a:d0:df:eb:49:6c:64:8d:f3:0e:54:06:fb:e8:
         db:c8:bd:0e:77:39:45:0e:e2:39:22:0d:48:4f:cc:2c:9f:fc:
         72:b6:1a:aa:4d:39:49:ca:2e:8a:2c:ba:a0:e0:78:d7:8d:4e:
         c5:28:e0:77:97:85:18:1d:16:86:4f:b6:97:26:bb:5f:02:02:
         39:6f:72:73:a2:68:64:f9:11:3f:72:d2:98:24:ed:09:45:f7:
         e9:0d:c8:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYawpdjXqnl44GmTpTdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWEwNDdjNDQ2MTdmY2ZiMjljZDU3MmY3YWQ4NzQ3ZDBi
OTMyNmIwHhcNMjYwMzI5MDcwMTEwWhcNMjYwMzMwMDcwMTEwWjAzMTEwLwYDVQQD
Eyg3N2VlNjAyNzRkMTUxZTYzYTJlZmNjZWJiMjEwZmQ4M2JiMDdmNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmAG+Buau1wQYSt+qM4VBsFuJA0u
GEViXuDAvCxTjVtH4yUSSl0DQDGNX9Y5ifX79lGxerCWJxha14B+Y6vIDN//qei5
LBXwnM7SJrTYlOizY4eR4qMNMxGExu56XCT/K7NrwMCYW1i/3PAD+ZQR2DCb9pWM
E6YpBGn27jLu+O0nEpQ4xJ+VREszH58md7m0k3HMPYTYtzRhb9XmDxXPK0t8SMwA
s9Ckm+6QHlrvQvxTjvbfb9APGsQdl/rNg5qOdzaNk95KbB8I4+pM6F746+pMAUXp
94BXGonu2UlMLChb1suT1ccvcfCpWXoD8gGCK/1cqMvtDxlofv90uR0xgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfuYCdNFR5jou/M67IQ/YO7B/YQMB8GA1UdIwQY
MBaAFEKaBHxEYX/PspzVcveth0fQuTJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jNTc0NjctNDlhNS00Y2M2LTllMGMt
NzdlNjFlZWE2YTY0LzEvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jNTc0NjctNDlhNS00Y2M2LTllMGMtNzdlNjFlZWE2YTY0
LzEvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHufjvOEu
HzlxmlqAp/EqSaxUc/428Q5eV+LohFe1Cp5+CJZ+PTs/YRI+eXhDb+ZH//EUz0m/
NkiJKimp8ABhR1gmasXchjowi+9RIJ0GZhLFeP7ti7ijoroTcRIKg2/04v3iesWC
FEhJZRwtwFUrqWASsUL4ZwVZGtTXytW8s+/iqKYdy4IwTxcwQxMzJtc/9HxCNg9+
zcI/qkRNlbBqNrMPKuYPRhrQ3+tJbGSN8w5UBvvo28i9Dnc5RQ7iOSINSE/MLJ/8
crYaqk05Scouiiy6oOB4141OxSjgd5eFGB0Whk+2lya7XwICOW9yc6JoZPkRP3LS
mCTtCUX36Q3I2w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:22 2026 by rpki-client