Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File:                     Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier:          v7+in9Ypx9gx783byS7FpEuUqLijCwg31lHxN54LchU=
Subject key identifier:   98:37:54:E0:91:20:46:A7:3F:E6:DB:FA:77:B4:1E:BA:6B:4E:E0:74
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer:       /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial:       019D05F8C165EDDC5E9754FD865F1C84B762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number:          151C
Signing time:             Thu 19 Mar 2026 12:01:21 +0000
Manifest this update:     Thu 19 Mar 2026 12:01:21 +0000
Manifest next update:     Fri 20 Mar 2026 12:01:21 +0000
Files and hashes:         1: 1-fDNlBb6dsCiNLwxYDANed4hKIM.roa (hash: 9WlEGtitw0vTUbPB2qKPl7C4ap723iLSdLT/GkzHijE=)
                          2: EeCb3xsgZulN1LmF6ikRslFxSCw.roa (hash: jjFm2wg01dKI6dAHnYnTU6ux1bEVbh+vpvsqWitVX/U=)
                          3: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: Veu4WwTltDYsziUMWVCf4DGViW/MyCnSMSJ/ZI/FsdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:f8:c1:65:ed:dc:5e:97:54:fd:86:5f:1c:84:b7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
        Validity
            Not Before: Mar 19 12:01:21 2026 GMT
            Not After : Mar 20 12:01:21 2026 GMT
        Subject: CN=983754e0912046a73fe6dbfa77b41eba6b4ee074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:5a:81:8e:ce:d0:31:bb:e6:9d:05:fe:7f:
                    1c:3d:c6:ae:6a:b3:75:57:ac:36:9f:98:08:b7:39:
                    1f:26:bf:59:a0:2d:98:a4:4e:0a:ff:c7:d7:d5:c2:
                    36:de:be:c4:3a:ea:0e:70:3d:5c:eb:f1:c1:f6:7f:
                    d6:20:21:0a:ea:13:7d:1e:cc:d2:99:ae:87:fd:3f:
                    cb:5b:4c:c8:e7:39:86:f0:7f:46:96:43:50:5f:c9:
                    b8:27:14:41:61:33:f8:20:fb:44:e3:11:8c:b4:5e:
                    43:b7:4b:f2:16:dd:44:ec:a0:d9:80:5e:4b:12:28:
                    25:d4:9b:a0:7d:7d:1f:f2:61:94:a6:8e:fb:39:79:
                    6b:33:d2:d8:aa:95:0c:08:86:f8:32:34:d5:ed:ff:
                    7b:99:5f:94:b0:12:5a:e6:bc:40:6a:6c:e0:d9:c6:
                    d8:6e:5b:0b:c0:a7:33:e5:66:20:88:7c:e8:a5:1d:
                    0a:72:06:c0:36:f3:3b:2f:13:44:bf:55:9f:2b:c1:
                    67:eb:39:84:60:ea:64:d2:b8:78:c5:e6:d7:50:b3:
                    3e:a8:a2:d4:7e:5e:4e:de:8a:76:a8:f3:83:52:9b:
                    47:d5:1e:91:14:52:27:ae:20:63:9d:57:55:b3:54:
                    67:15:68:d5:94:90:2a:55:53:59:d3:35:81:a8:a5:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:37:54:E0:91:20:46:A7:3F:E6:DB:FA:77:B4:1E:BA:6B:4E:E0:74
            X509v3 Authority Key Identifier:
                keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d0:2a:85:ec:31:74:5e:ad:a1:18:2d:56:df:07:b0:0c:b8:
         f6:fe:e9:1f:db:ba:d8:41:97:17:69:78:b5:af:ee:1e:d3:46:
         af:49:44:57:8a:b8:b0:65:5b:bc:96:56:52:4d:26:ca:ef:ee:
         b9:38:70:75:b7:ea:80:e2:ab:e6:fe:07:5c:18:32:47:3a:ac:
         a3:d2:ac:b0:4d:b6:07:12:be:a2:62:ae:63:04:40:d0:a1:3c:
         b6:2b:0b:b6:7c:32:21:e6:22:a9:b7:67:25:36:4c:2e:7c:71:
         59:3c:61:37:1e:38:7d:72:80:fb:93:16:f8:21:e2:48:7f:ed:
         a2:18:73:da:30:14:7d:3f:cf:6a:ab:a7:4b:48:bf:d3:ea:9e:
         6b:5e:5b:40:0f:25:22:f9:1e:f4:d4:51:45:31:70:b2:1d:23:
         22:e0:b2:a4:f2:30:f1:9d:d2:c8:c3:cc:89:1d:84:13:b5:a9:
         9e:f1:65:8a:56:21:d4:e7:a5:cc:00:23:5b:11:53:b3:9e:64:
         07:a0:bc:65:bb:b1:30:8a:93:5e:bf:72:e9:85:a3:8d:0b:f0:
         50:99:c1:71:4b:23:40:de:41:ee:da:64:22:fa:d3:ce:b2:5b:
         71:35:18:7b:08:dd:54:10:e9:3e:f1:4c:b6:6d:86:11:d5:f0:
         52:f7:f5:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0F+MFl7dxel1T9hl8chLdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmViZTBiNjBiYWUyZWNiZjIxZWYxNGZjNWZkYzlkZGI5
YTNmMjEwHhcNMjYwMzE5MTIwMTIxWhcNMjYwMzIwMTIwMTIxWjAzMTEwLwYDVQQD
Eyg5ODM3NTRlMDkxMjA0NmE3M2ZlNmRiZmE3N2I0MWViYTZiNGVlMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngJagY7O0DG75p0F/n8cPcauarN1
V6w2n5gItzkfJr9ZoC2YpE4K/8fX1cI23r7EOuoOcD1c6/HB9n/WICEK6hN9HszS
ma6H/T/LW0zI5zmG8H9GlkNQX8m4JxRBYTP4IPtE4xGMtF5Dt0vyFt1E7KDZgF5L
Eigl1JugfX0f8mGUpo77OXlrM9LYqpUMCIb4MjTV7f97mV+UsBJa5rxAamzg2cbY
blsLwKcz5WYgiHzopR0KcgbANvM7LxNEv1WfK8Fn6zmEYOpk0rh4xebXULM+qKLU
fl5O3op2qPODUptH1R6RFFInriBjnVdVs1RnFWjVlJAqVVNZ0zWBqKVbhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg3VOCRIEanP+bb+ne0HrprTuB0MB8GA1UdIwQY
MBaAFEMuvgtguuLsvyHvFPxf3J3bmj8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NGM3MGQtZjU3YS00YTU2LWIyMGMt
MTM5OWFkMzdjNGUzLzEvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NGM3MGQtZjU3YS00YTU2LWIyMGMtMTM5OWFkMzdjNGUz
LzEvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdAqhewx
dF6toRgtVt8HsAy49v7pH9u62EGXF2l4ta/uHtNGr0lEV4q4sGVbvJZWUk0myu/u
uThwdbfqgOKr5v4HXBgyRzqso9KssE22BxK+omKuYwRA0KE8tisLtnwyIeYiqbdn
JTZMLnxxWTxhNx44fXKA+5MW+CHiSH/tohhz2jAUfT/PaqunS0i/0+qea15bQA8l
Ivke9NRRRTFwsh0jIuCypPIw8Z3SyMPMiR2EE7WpnvFlilYh1OelzAAjWxFTs55k
B6C8ZbuxMIqTXr9y6YWjjQvwUJnBcUsjQN5B7tpkIvrTzrJbcTUYewjdVBDpPvFM
tm2GEdXwUvf1xg==
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:02:23 2026 by rpki-client