Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File:                     SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier:          T5AGMOfn7eo1Lpqbx4lwjoGc0BogNZli6yhCqDGVqqc=
Subject key identifier:   03:BD:69:2C:59:0B:D8:0E:CE:AC:68:E5:B1:7D:BB:FC:00:7E:51:DB
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer:       /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial:       019D39AF74CFA6685CACFC48D7B54A707304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number:          15A7
Signing time:             Sun 29 Mar 2026 13:01:33 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:33 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:33 +0000
Files and hashes:         1: 5f7j3zGx8jvsXJiygSNasWYx_Zs.asa (hash: TjoqTdv343Ue7LWqKvDsc7lZXvzPyAhZYFhPUJ6/iB0=)
                          2: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: n2XU7+GQgWy0Rtrrt+thtQoLTDOgKaF0n4X1NvbFp/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:74:cf:a6:68:5c:ac:fc:48:d7:b5:4a:70:73:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
        Validity
            Not Before: Mar 29 13:01:33 2026 GMT
            Not After : Mar 30 13:01:33 2026 GMT
        Subject: CN=03bd692c590bd80eceac68e5b17dbbfc007e51db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:1c:e5:c9:41:73:f0:b9:37:fb:79:c4:a0:
                    00:33:ff:73:2b:7b:69:72:de:f1:81:98:9e:7d:cd:
                    9c:7d:46:82:86:34:02:36:25:73:1f:d7:7d:ff:40:
                    5c:ea:b2:6b:f2:3d:2c:7c:de:24:94:8b:6f:13:ae:
                    9e:2a:76:9c:ef:b5:26:85:80:98:39:da:b4:68:05:
                    57:59:86:7f:e9:92:34:85:8b:26:0f:ab:ba:a9:2e:
                    13:e9:df:3b:c3:b0:0c:8b:34:cf:97:2c:e7:e0:dd:
                    d1:97:28:d6:17:8c:6a:80:0c:e0:81:45:06:d9:76:
                    e9:cf:32:bb:4a:ca:69:de:ef:d0:01:18:46:ee:79:
                    c9:12:a5:b7:d4:04:53:b9:39:2c:1a:0a:41:53:fb:
                    53:5b:45:26:53:56:73:06:da:90:04:e0:a0:91:05:
                    a3:88:f4:54:6a:b3:dc:94:0e:47:06:95:49:c3:64:
                    ca:26:85:66:8d:c9:6f:07:5d:80:39:dc:9c:10:a8:
                    2c:b3:fa:df:58:c0:3a:56:81:6a:64:43:42:32:18:
                    52:2f:68:60:ed:5e:25:e9:8e:6c:b9:41:aa:99:08:
                    28:79:04:5f:43:7b:b6:5e:2d:bd:21:98:12:0b:f0:
                    52:25:81:96:77:e0:90:61:03:69:34:59:f2:22:f4:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BD:69:2C:59:0B:D8:0E:CE:AC:68:E5:B1:7D:BB:FC:00:7E:51:DB
            X509v3 Authority Key Identifier:
                keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:52:4f:30:3c:88:1e:2e:bd:b3:00:52:f6:38:ef:a6:73:7c:
         a3:dc:0f:df:bf:f2:63:12:7f:f1:11:fc:bd:5f:8d:97:5e:04:
         5f:74:7f:50:be:91:50:81:f0:6a:d3:26:b0:24:39:b7:28:ea:
         3a:fa:b9:b5:9c:f7:03:fe:da:fa:7b:79:b0:53:b7:a2:f1:48:
         6f:54:98:61:a4:1f:71:e8:73:6c:fe:00:3f:4b:1d:5f:0a:00:
         dd:0d:3e:c6:5a:1c:c9:f1:69:b9:a5:10:ca:6a:c0:a0:f0:ad:
         9e:ab:fa:4c:1b:a7:ca:2f:c9:4a:6b:77:2c:01:20:e3:ec:05:
         13:8f:0d:d4:2d:bc:38:fe:48:d3:a6:12:12:40:d4:bd:64:e6:
         f7:01:ad:53:e3:23:aa:5b:e4:4d:62:7e:61:c2:c0:01:28:fd:
         7f:aa:3c:73:ec:cb:db:f0:0a:f1:66:75:9d:81:61:f3:27:a5:
         c7:df:31:42:15:e6:11:ce:2e:1c:05:c2:9e:e0:8f:95:b7:36:
         b6:5f:d4:21:bc:44:35:ea:f3:d8:d7:09:0f:88:b2:55:06:2b:
         8b:f0:2a:8a:a6:23:72:c5:77:ee:40:7a:95:ab:aa:d6:20:7a:
         5a:be:3e:d3:be:06:fb:4d:0c:30:c2:4d:26:37:6e:d8:f0:4a:
         80:93:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:06 2026 by rpki-client