Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File:                     SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier:          x5XkVK1J1WxxJT6wtVxTS1Ie/M+xF7LE14RTuOKA1qE=
Subject key identifier:   1A:1A:9B:89:28:91:6E:15:88:08:59:02:D3:9D:C7:0C:71:5B:1C:60
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer:       /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial:       019D3752D8F3F41159DA1215381F8D6FA724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number:          15F1
Signing time:             Sun 29 Mar 2026 02:01:09 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:09 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:09 +0000
Files and hashes:         1: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: jWIyaDNEjBNoVlCgRSkPsep95VyzwJLnxOcT24U0PAE=)
                          2: dEe9kef00viBgag16NgYd-MmkFk.roa (hash: ijeJQOQCPV+rQCmqff64uTf1aTuDHnwhJzXA65R50R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:d8:f3:f4:11:59:da:12:15:38:1f:8d:6f:a7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
        Validity
            Not Before: Mar 29 02:01:09 2026 GMT
            Not After : Mar 30 02:01:09 2026 GMT
        Subject: CN=1a1a9b8928916e1588085902d39dc70c715b1c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:ba:89:20:c3:4f:21:c9:55:65:d2:2b:43:
                    7a:ee:e5:86:b2:c9:b5:41:61:ec:52:81:a2:5a:d1:
                    d7:62:d5:73:4c:95:d5:e9:ae:05:c8:66:17:d4:67:
                    c5:5a:55:c3:29:98:ef:11:27:b8:6f:93:00:6d:6b:
                    be:1c:ca:ec:a7:15:0d:54:0c:96:2f:c7:3c:99:a8:
                    44:38:37:54:e0:38:cc:fd:30:07:48:da:ca:67:20:
                    3b:70:7a:30:c6:b6:05:25:39:e6:10:27:b0:ca:57:
                    08:da:c7:e8:29:0f:48:1c:c2:4f:0b:6a:d2:60:fc:
                    44:44:3f:67:dd:1d:66:72:3b:ba:c1:1a:43:7b:8c:
                    a7:d7:50:60:b0:7f:d6:5a:65:1f:3f:cd:13:a5:03:
                    70:73:96:5c:bf:9e:f5:6b:64:2c:09:39:94:f3:6e:
                    9b:a8:7b:2c:1c:32:4d:a2:ea:33:c9:7f:09:f8:bd:
                    d6:94:f2:4a:a6:0e:e4:a4:5c:18:6c:f6:96:33:27:
                    1b:ac:40:7d:48:8c:62:04:a9:02:9a:43:5f:2c:8a:
                    a4:28:24:1a:9b:37:13:1b:54:f8:16:2f:90:be:25:
                    43:be:6e:be:63:39:3b:5c:65:a5:5c:9a:90:15:06:
                    0f:ab:c7:6e:4a:e2:ad:61:ae:e7:76:5c:7d:4a:c0:
                    dc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1A:9B:89:28:91:6E:15:88:08:59:02:D3:9D:C7:0C:71:5B:1C:60
            X509v3 Authority Key Identifier:
                keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fe:76:69:aa:be:95:2a:0e:50:ac:b1:a5:79:d1:2d:5e:74:
         74:9e:91:2a:cd:9b:ce:0a:be:3b:59:57:1d:d4:df:0b:60:5f:
         02:6d:cf:c6:1f:eb:e0:b6:0c:a6:81:aa:da:41:24:a3:05:69:
         87:b9:3a:2e:09:24:de:34:fe:6f:5d:05:0b:6d:3e:6e:7c:10:
         5b:88:6a:ba:cc:83:08:a8:2a:49:a8:8d:3e:a2:4f:fe:eb:6b:
         c0:23:5a:df:57:e2:4e:af:af:48:ae:8a:a8:78:82:33:e1:1a:
         61:88:e1:e9:1e:5d:f9:ef:e8:2e:49:f3:3b:f2:eb:24:ab:14:
         20:83:f0:d1:b9:af:f4:df:b1:40:10:b4:3c:33:ca:dd:ba:3a:
         91:f4:da:28:8d:be:8b:38:44:95:78:d6:af:43:d6:e1:c6:20:
         df:10:1a:a2:7b:d7:00:9b:08:15:12:a9:bb:a5:d8:d3:88:19:
         60:50:af:28:c5:f4:73:7f:9b:e5:da:c8:7d:a7:c2:8a:9d:41:
         fb:de:d8:4c:ce:65:b0:69:3a:cc:38:8a:fd:c6:bc:70:0b:df:
         09:a9:b8:73:ca:cd:51:97:04:3e:7e:9a:0c:ba:a3:81:7a:6b:
         16:08:8f:a7:fd:9f:18:ca:1f:9f:1c:23:2a:13:5f:13:dc:b1:
         cc:d1:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:02 2026 by rpki-client