Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
File:                     qPuDH1vWwMILjgm-URwhvn3F3ro.mft (raw, json)
Hash identifier:          ZHOWoT+ssCoAwoabdBMW/EooOQ/Y9uk/7IqzYxRonyA=
Subject key identifier:   EC:3A:8F:60:18:28:41:87:4D:B7:4A:50:9E:53:5E:3C:43:11:24:FC
Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA
Certificate issuer:       /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
Certificate serial:       019D382EA2B2231EC813E4D169D884B40907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
Manifest number:          0874
Signing time:             Sun 29 Mar 2026 06:01:13 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:13 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:13 +0000
Files and hashes:         1: _TbqxBppKm12gy3lALRD55qlP1U.roa (hash: aJvpW0eR4IubuFYLuhnLpJl7IWTizqcPOJubGM/2djI=)
                          2: qPuDH1vWwMILjgm-URwhvn3F3ro.crl (hash: eU/7tUNgB19Ky+J/5tg0DShhOaea7xcGyj2cP5Upv6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:a2:b2:23:1e:c8:13:e4:d1:69:d8:84:b4:09:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
        Validity
            Not Before: Mar 29 06:01:13 2026 GMT
            Not After : Mar 30 06:01:13 2026 GMT
        Subject: CN=ec3a8f60182841874db74a509e535e3c431124fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:0d:63:9e:11:89:1f:e6:0a:b8:73:bb:ce:
                    51:37:a4:d8:e9:cb:b1:2c:42:7b:ed:cd:d6:6f:5e:
                    7d:d0:ab:ca:b5:75:66:4a:b2:d2:76:cd:25:b0:ad:
                    68:07:9a:09:a8:66:56:d7:c0:27:f7:56:f0:eb:d6:
                    f5:37:da:71:e7:3c:61:ee:42:7e:da:c5:fc:0f:8e:
                    f2:18:4e:dc:1d:92:2a:66:1e:75:92:34:e2:52:3c:
                    7d:32:06:8b:42:eb:35:a6:31:39:b5:34:22:43:94:
                    f6:65:7b:fc:2d:88:76:8e:ba:0b:e3:d2:a5:ac:6e:
                    a4:5b:29:bd:7f:e1:cc:97:97:b1:c7:ed:50:3b:52:
                    39:7e:aa:ee:4d:7d:a9:c2:7b:1c:7c:f0:ce:a2:de:
                    c0:f2:fd:7e:fb:42:89:e2:d0:d8:47:50:dc:cd:0a:
                    ad:31:15:c7:f5:ba:6a:d7:c0:2b:6c:63:c2:55:4e:
                    a9:68:d8:15:91:bc:2a:2e:0c:2d:e0:21:5b:04:0e:
                    0c:a9:35:25:34:7d:86:f1:0e:df:81:0c:6b:f1:06:
                    68:dc:f8:94:97:8b:50:73:53:f0:2e:3e:d6:aa:48:
                    50:83:95:9b:0d:be:9e:9e:c0:86:5e:51:ba:35:e6:
                    69:e0:30:cb:8b:35:65:7c:75:77:4d:f2:2f:e7:21:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3A:8F:60:18:28:41:87:4D:B7:4A:50:9E:53:5E:3C:43:11:24:FC
            X509v3 Authority Key Identifier:
                keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9f:87:e8:8a:8e:ed:c0:5b:54:c7:8f:89:eb:46:86:82:b6:
         c8:c4:09:ef:a5:ac:73:d6:f6:c8:9e:51:b4:7d:ad:96:0e:9c:
         d9:0b:d6:5f:68:6b:ce:f9:eb:63:fe:c7:3c:d6:29:37:db:5b:
         16:11:32:c0:59:d6:24:ea:53:45:9e:ba:c2:ca:dd:ea:80:fa:
         01:89:68:74:ec:ee:fa:d9:c8:b1:3e:56:2a:9f:5e:9f:52:3a:
         41:0a:80:4a:2c:b5:f1:ac:8c:9e:29:51:fc:ac:6f:72:c7:eb:
         37:40:c1:15:7f:f5:89:1c:fe:df:29:05:95:e2:73:7e:9b:83:
         db:9f:73:28:60:68:e3:21:8d:79:4e:cb:32:86:4c:2d:21:68:
         0a:71:20:f1:6d:bc:ff:61:8a:8e:74:f1:34:57:18:ab:f4:62:
         16:aa:34:33:b4:8b:bd:c5:3d:93:7d:a1:b9:cc:ae:a8:a4:c6:
         15:8c:48:4a:ff:e6:ef:9b:18:5e:81:77:d5:d9:20:7a:b2:6d:
         38:dd:2a:1c:e6:d0:cd:8d:c7:f6:64:9c:54:e6:de:13:22:07:
         4b:02:f5:de:00:dc:88:11:7c:04:b0:19:58:06:82:b4:e9:a0:
         9b:67:a3:06:0e:e4:37:e5:c8:9a:f5:9b:61:b6:e7:24:72:8b:
         29:64:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:35 2026 by rpki-client