Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
File:                     qMbudsTo2UYU4IJQX_6MmRokr4o.mft (raw, json)
Hash identifier:          X5SCFZZiMZc6NwDdmJSQWqm+uL05d9jxLzEtOi8adFo=
Subject key identifier:   67:98:67:E3:CC:79:70:0B:C5:D0:5D:95:11:E6:70:D0:BE:5C:26:6B
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Certificate issuer:       /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial:       019D299723DC8DF6F9FD598CDBD56E897859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
Manifest number:          14ED
Signing time:             Thu 26 Mar 2026 10:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:03 +0000
Files and hashes:         1: Ig5_iQWFva6wEaZIrvBQREaV2rM.roa (hash: FNZtMMnZ+tjsd2FzsKX3m62nR2nsdipfzhoI6BMqglg=)
                          2: qMbudsTo2UYU4IJQX_6MmRokr4o.crl (hash: Ndnmbbgjkr8JgSMCaZf6bziuXNuauU/89fVwCXkXp2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:23:dc:8d:f6:f9:fd:59:8c:db:d5:6e:89:78:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
        Validity
            Not Before: Mar 26 10:01:03 2026 GMT
            Not After : Mar 27 10:01:03 2026 GMT
        Subject: CN=679867e3cc79700bc5d05d9511e670d0be5c266b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:13:0a:24:48:2c:87:e2:74:ea:85:df:c9:
                    d1:25:aa:a1:a1:ee:e7:4d:97:8b:bc:4d:47:66:89:
                    ae:e7:bb:ca:c4:a9:3f:73:d9:52:34:b7:1d:41:67:
                    2e:67:1d:04:8b:21:76:9b:c1:65:c6:fd:0e:7f:73:
                    9e:74:3a:6a:22:a0:77:ab:e5:93:2a:c7:5f:8a:9b:
                    78:52:d1:88:71:90:5e:d9:61:d5:e8:4c:3d:64:92:
                    0e:d9:d4:29:f2:98:99:26:2c:51:39:de:65:1c:32:
                    f3:77:79:2b:37:02:66:73:bd:2b:88:96:2e:86:a8:
                    af:80:d5:04:88:77:29:3a:36:19:e9:6a:a6:02:55:
                    2d:1e:7f:57:a6:82:20:4e:e5:c2:dd:33:45:c6:f2:
                    1b:81:41:b5:77:d6:5b:d5:2c:52:b6:27:37:b5:19:
                    fa:f0:97:ca:8d:e1:0c:65:13:dd:29:72:d5:37:eb:
                    a3:93:e9:39:28:0b:d4:6b:d6:8c:36:1f:b0:bb:6c:
                    78:1c:58:db:ec:39:ce:36:93:eb:27:59:a4:70:e1:
                    6f:ac:32:7c:ca:b5:d7:6c:77:17:30:38:32:5e:61:
                    71:8c:14:76:ff:98:a1:b0:d1:e1:da:2a:4a:2c:cd:
                    27:9a:53:9d:1f:09:b3:df:21:81:d4:13:d4:fd:6c:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:98:67:E3:CC:79:70:0B:C5:D0:5D:95:11:E6:70:D0:BE:5C:26:6B
            X509v3 Authority Key Identifier:
                keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1c:2d:b1:8f:ec:f8:44:1b:a1:ba:43:be:67:26:09:6d:41:
         8b:40:e4:c8:fd:2d:a4:58:dd:26:f1:81:33:45:16:0f:47:9e:
         ad:23:80:f2:cf:60:d9:45:12:f5:25:e7:1c:65:79:4b:a5:d3:
         e4:1a:15:3b:f2:f1:0f:0f:1c:8a:2f:80:92:3b:48:9c:74:67:
         93:b1:69:6f:f2:a0:bb:a4:db:19:c4:a9:30:11:cc:aa:5d:4b:
         78:8a:99:b4:d3:73:0d:50:0e:1b:4d:32:ab:98:c7:33:15:c8:
         cf:ca:23:2f:84:78:17:9b:ab:96:f4:f0:36:1e:45:af:19:68:
         8b:3d:3f:7d:6e:33:86:96:e1:7c:ea:75:06:80:e1:dc:e4:2b:
         11:b2:ff:6c:97:84:6d:27:b3:87:50:94:d2:18:54:de:a5:85:
         c7:a3:7e:ec:73:35:9d:13:43:b9:b5:40:c9:c8:7d:d6:6e:58:
         1c:48:82:80:be:d2:ee:13:6a:9f:e9:bc:1e:c2:6d:33:aa:b3:
         b7:8c:a4:19:2f:5a:4d:91:86:54:5a:96:ad:01:6e:ad:17:63:
         c5:79:3d:b4:5f:4b:cf:be:9f:07:9a:a5:1d:fa:8e:d6:71:c3:
         c5:0f:af:9a:b9:b6:29:cd:aa:08:03:d2:84:4a:97:0c:4a:84:
         c3:5c:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:10 2026 by rpki-client