Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
File:                     SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json)
Hash identifier:          n7faYtQccB0K10AormBeXO5O2WLWjLEvqnL+26E2Lhg=
Subject key identifier:   C7:7A:DC:62:9C:12:0B:92:B9:D0:F7:87:82:B1:85:98:DA:E6:5D:9A
Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Certificate issuer:       /CN=4aa6dc84f46b690721485a4405bfc939da254969
Certificate serial:       019D39E55BDE4AD17B0209C8F8A47F57C7CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
Manifest number:          03E6
Signing time:             Sun 29 Mar 2026 14:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:25 +0000
Files and hashes:         1: 1kPwWdchsNxn-Bc9d2kic34pLHM.roa (hash: Pw0uzLsLdRPJc3mWei6tAgpkvqXkdwbkwjXBKfc2x8E=)
                          2: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: mBn66iupF6LxZIiLY59fBAbPy575ronCKwKJIoBXL+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:5b:de:4a:d1:7b:02:09:c8:f8:a4:7f:57:c7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969
        Validity
            Not Before: Mar 29 14:00:25 2026 GMT
            Not After : Mar 30 14:00:25 2026 GMT
        Subject: CN=c77adc629c120b92b9d0f78782b18598dae65d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:3b:36:15:4a:91:b7:f9:7d:2d:1a:ba:5e:
                    6a:b4:d5:6d:ad:1a:97:38:72:e6:c4:4b:5a:f3:9b:
                    a8:d0:a2:b3:29:57:e4:7d:77:78:14:96:74:75:e6:
                    fe:3e:de:bd:c4:0c:3a:c1:3f:fe:75:48:52:7d:b4:
                    26:24:1a:ec:23:63:f7:23:bb:48:e9:72:88:af:71:
                    75:0c:5f:dd:b6:99:8a:7e:c5:06:13:bd:0d:49:ed:
                    2b:1e:5c:9c:2c:eb:5a:25:7d:b8:62:f5:3d:a8:26:
                    0c:fa:b6:86:9d:67:10:0f:fd:0a:43:16:b9:95:6f:
                    24:c2:73:ab:9f:75:51:19:9c:fc:f3:44:88:d8:fb:
                    49:2a:32:b9:c4:49:5d:b5:1d:18:a1:ef:a6:67:e5:
                    27:0b:7e:a8:25:07:99:b5:e7:7a:28:5d:14:87:0c:
                    59:24:0e:0a:98:2d:d7:75:d9:5c:74:57:ae:1d:69:
                    ba:96:9a:c5:a4:2b:9f:95:84:37:bb:f6:62:3a:cc:
                    6a:c6:4b:3d:9e:40:3f:97:9c:a8:2e:6f:ef:2d:23:
                    64:87:15:87:52:2b:84:3b:61:c7:34:2f:22:00:b9:
                    ed:0e:72:54:85:8a:6a:09:bc:2f:e0:88:1f:00:94:
                    7e:8c:04:85:cd:2f:cd:80:32:93:6a:3f:b6:84:9e:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7A:DC:62:9C:12:0B:92:B9:D0:F7:87:82:B1:85:98:DA:E6:5D:9A
            X509v3 Authority Key Identifier:
                keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:eb:d8:c7:97:6b:b4:6a:86:2b:f8:cc:f8:c0:66:54:1a:
         2e:00:95:df:96:95:f4:70:df:34:70:cf:9b:ef:f0:69:b6:4f:
         90:7d:f6:e6:f4:63:b1:94:43:77:8b:7c:04:b8:51:a0:f5:93:
         d3:34:bf:12:71:3a:78:be:af:6b:41:20:50:c7:e1:ba:dc:c3:
         86:c7:05:bb:ed:8e:f4:e1:ce:3e:92:43:11:6b:a5:c4:ea:1b:
         16:1c:6d:2b:4a:be:f3:2d:88:0a:fc:34:c5:79:d5:4b:29:1a:
         ad:2a:12:b1:0d:bd:e3:a6:d5:74:59:34:80:f7:61:f2:8d:a7:
         36:55:cc:7e:80:ca:ad:1b:c3:64:6f:9d:4c:41:8c:e9:e5:41:
         98:6a:31:9c:c2:ba:4e:19:5e:71:0a:0d:73:e9:5b:b0:25:23:
         b2:f0:ea:17:87:e5:5f:d7:ba:f8:c3:06:92:4e:ad:8d:7e:63:
         df:3f:a3:e5:2c:d0:0d:48:84:fc:ca:73:af:e3:1d:23:9d:cb:
         33:4a:fc:b6:aa:7e:ec:d3:59:59:87:fb:d2:9c:64:45:90:9b:
         3c:78:ab:67:d2:0b:97:3f:f7:db:25:0e:a7:03:69:d6:81:75:
         3e:c6:e7:77:22:af:c1:5c:8c:43:0d:4b:da:da:f0:00:bc:25:
         8c:51:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:09:22 2026 by rpki-client