Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
File:                     qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json)
Hash identifier:          yrZwGAV9WJMw85nuMHIIWhBM8VA2/WhhdC926OwYptc=
Subject key identifier:   EE:50:B6:53:82:48:9C:89:84:AB:9A:E3:44:35:58:46:C0:B4:15:F4
Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
Certificate issuer:       /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Certificate serial:       019D2EBD2951372E2F4F9C5CFE149B9B025D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
Manifest number:          07C6
Signing time:             Fri 27 Mar 2026 10:00:41 +0000
Manifest this update:     Fri 27 Mar 2026 10:00:41 +0000
Manifest next update:     Sat 28 Mar 2026 10:00:41 +0000
Files and hashes:         1: 1-8RpzQOO8MH_8tY_8CiuesNU5kw.roa (hash: NwZ58UxGQif1qZHSYOqbsi4+8X/Tbr0yxp1KYuyKjAA=)
                          2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: rLA8RvA0AysWywLW2gQuP6wK/SbUrK9GOqyg3w8S6Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2e:bd:29:51:37:2e:2f:4f:9c:5c:fe:14:9b:9b:02:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
        Validity
            Not Before: Mar 27 10:00:41 2026 GMT
            Not After : Mar 28 10:00:41 2026 GMT
        Subject: CN=ee50b65382489c8984ab9ae344355846c0b415f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:15:cc:7f:e2:87:4e:6c:35:b8:02:ca:30:
                    f9:00:58:a5:00:7c:2e:1f:8b:37:84:70:36:4f:2b:
                    f4:3d:8a:5d:f3:ba:cc:ec:1c:e0:8d:34:99:4d:31:
                    8c:6c:f8:71:c0:01:ee:41:51:5e:3d:9d:ad:ff:92:
                    63:5b:4c:70:0a:a1:6b:65:ad:7c:8d:10:2a:14:4b:
                    50:f9:3e:21:24:26:e4:e4:dc:23:06:1e:0d:d8:79:
                    97:23:16:7b:cd:d9:16:31:f8:3f:11:34:6c:6a:05:
                    24:75:98:35:67:9e:23:94:07:3e:e6:48:a7:d5:58:
                    0d:d5:db:b6:93:f9:91:17:c7:6e:f4:ae:b3:b6:3a:
                    f8:f9:4a:f9:04:45:fb:ed:f9:69:24:73:11:17:17:
                    12:df:b6:b6:7e:85:1d:95:b1:da:1b:ea:86:e4:e5:
                    a1:b9:34:c7:0c:1a:b9:c8:d7:ef:eb:f1:db:29:cc:
                    8c:36:f8:0f:67:18:0f:b3:e4:14:c1:57:4f:20:28:
                    1e:6d:19:ce:85:02:fd:a4:29:b1:d0:c2:47:26:33:
                    ba:ec:74:3f:a0:bd:6e:5f:e9:c2:18:43:20:59:60:
                    83:d4:e4:19:3b:a5:04:3e:b7:1d:2c:41:20:07:f6:
                    6e:1b:75:ce:4f:ab:29:da:6c:30:cc:1d:fd:47:a6:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:50:B6:53:82:48:9C:89:84:AB:9A:E3:44:35:58:46:C0:B4:15:F4
            X509v3 Authority Key Identifier:
                keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2d:dd:7a:0b:81:db:04:1f:7c:dc:2a:a9:da:c2:47:cc:63:
         ea:52:a3:4c:78:3f:c9:b2:7d:33:0b:65:ee:a6:50:62:f4:bf:
         ea:fb:3c:bc:05:b3:f6:1d:6a:1d:a1:12:8d:f6:87:4e:27:4f:
         ca:86:09:a9:81:50:8a:ea:8f:d3:c4:21:51:a6:78:86:87:4c:
         21:2c:64:fc:d3:9f:da:80:b3:ef:10:43:84:87:e5:a8:56:bb:
         10:fd:bb:42:fb:e9:a6:a8:ea:92:cf:14:28:05:0b:a2:26:27:
         5b:cf:99:3c:28:3c:af:69:93:9a:31:32:7c:43:e5:21:7a:fe:
         1d:ff:ad:04:5e:92:bb:f5:d3:99:71:c9:d7:9f:08:8c:c7:50:
         92:ec:70:9c:85:ef:1f:97:86:b7:b8:cb:80:d4:ce:c7:72:38:
         fe:2e:45:bd:38:ec:67:76:15:79:75:53:22:8c:22:06:9a:9c:
         36:2c:80:9b:bc:8c:f6:86:d2:c0:d3:12:aa:66:24:23:61:e9:
         4a:6d:fc:d9:ab:82:46:f8:ef:b0:a4:47:f8:17:d2:d1:f0:c4:
         d5:8a:f5:be:c9:4a:32:c6:5b:a6:6f:67:3c:58:04:04:95:11:
         8a:2e:c1:55:3c:db:aa:9b:a7:fe:5a:4e:cb:1b:7e:2d:da:90:
         0d:d0:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 17:40:16 2026 by rpki-client