Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File:                     qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier:          4BtylJz1KvYUApQKTzqH+FBjKuFvmw6awTDXJ2hlCog=
Subject key identifier:   E0:6B:B2:E1:16:AF:45:28:71:27:E7:67:D2:7D:8A:B5:DA:0B:BF:CE
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer:       /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial:       019CE66D9EFD4506BE975C8A5AC492F749E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number:          05D0
Signing time:             Fri 13 Mar 2026 09:01:09 +0000
Manifest this update:     Fri 13 Mar 2026 09:01:09 +0000
Manifest next update:     Sat 14 Mar 2026 09:01:09 +0000
Files and hashes:         1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=)
                          2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: 6OdANr1QTgUEThbmMJhMtmcQaClCP4Zwm3I98NaHgoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:6d:9e:fd:45:06:be:97:5c:8a:5a:c4:92:f7:49:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
        Validity
            Not Before: Mar 13 09:01:09 2026 GMT
            Not After : Mar 14 09:01:09 2026 GMT
        Subject: CN=e06bb2e116af45287127e767d27d8ab5da0bbfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:43:39:5b:72:32:d8:98:2c:8e:fc:eb:cd:
                    ee:76:5d:b1:ce:9d:2d:83:96:0c:6c:4f:14:78:95:
                    8d:a6:33:72:c8:79:3c:88:78:6d:6f:a5:54:e6:72:
                    4c:26:59:00:eb:45:fd:70:96:8e:9c:a6:73:03:ef:
                    c3:cb:a6:c0:aa:2b:03:1a:98:57:53:3d:22:89:8d:
                    75:1d:8b:72:fa:6e:c8:0f:d8:e9:3c:d2:b4:86:00:
                    39:35:fa:c1:c8:e4:d6:62:5d:4f:14:bf:71:87:9b:
                    22:87:0a:41:3f:fa:59:1d:34:ab:cb:c4:ba:57:a0:
                    c3:4a:05:41:6c:06:9c:42:ca:f5:f9:d7:82:e7:1c:
                    20:fa:8a:59:1a:9a:04:6f:60:56:09:e9:29:b4:3b:
                    e0:52:29:7d:04:12:63:8b:1d:df:1d:da:e2:1d:57:
                    56:54:01:38:ff:11:5c:8f:d0:ca:50:d3:8a:48:35:
                    98:75:33:00:ba:85:2a:00:bd:7d:6d:e6:2e:ef:b4:
                    41:61:f9:1b:71:8a:2f:e7:1b:5b:d6:a2:63:ba:d5:
                    12:ed:73:f6:1f:b4:88:df:bc:d4:67:19:69:f5:51:
                    db:5e:b5:4c:af:1a:46:d9:4b:73:ea:16:c9:4b:a3:
                    96:d4:08:4f:b9:06:78:8b:c1:db:cd:1c:59:ea:ad:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6B:B2:E1:16:AF:45:28:71:27:E7:67:D2:7D:8A:B5:DA:0B:BF:CE
            X509v3 Authority Key Identifier:
                keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ca:78:f8:e1:7c:b9:fd:bd:fe:b7:85:ff:73:bc:a4:86:86:
         0b:a3:09:e3:9f:9e:d0:6b:99:b0:51:f2:63:4f:1e:33:5a:a9:
         28:e9:9f:59:32:c6:b5:0e:3f:61:ab:dd:86:e8:97:52:53:44:
         89:1d:6f:66:b5:2c:48:fc:b9:c3:f9:05:2d:7f:4c:eb:59:46:
         ec:ea:a6:d2:69:b5:e5:ec:1f:e9:d6:4f:57:fe:b1:a7:7b:5c:
         c9:6d:ab:a9:d6:b2:f4:a0:cb:e7:4a:89:f9:4a:8b:37:15:92:
         6b:40:c3:04:41:57:a1:5a:eb:00:42:dd:3e:8f:ed:ee:f8:20:
         b8:21:74:c7:c2:95:5d:3a:19:dd:13:45:63:eb:12:de:a2:b3:
         c5:b1:aa:98:ec:d7:4f:3f:1d:56:a6:54:d3:10:e1:81:aa:6e:
         80:55:cc:64:dc:fd:fa:5f:ee:e2:0d:19:83:d3:06:29:d0:9e:
         33:e4:c7:a0:34:94:98:85:b2:27:f8:ec:e6:20:2d:67:77:f8:
         06:3a:93:a3:a5:8d:36:1f:47:10:9a:0b:46:6b:07:02:cb:b1:
         22:97:85:45:ed:9b:2a:96:6c:2b:26:31:af:3e:66:af:09:e4:
         78:a7:10:85:ae:d0:68:1e:eb:5e:64:65:cc:3f:a7:0a:e7:f3:
         01:4d:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:36:17 2026 by rpki-client