Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File:                     qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier:          cxSFVwZdd9eyYq8WqtjvE5KAzNbB6t0bYu+bwyacY3U=
Subject key identifier:   4E:77:B7:84:26:72:4E:90:FA:8F:4D:C4:67:D7:B5:9A:CF:B2:A1:78
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer:       /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial:       019D28F3280338E8902E8B5F9D415053648F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number:          0913
Signing time:             Thu 26 Mar 2026 07:01:57 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:57 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:57 +0000
Files and hashes:         1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=)
                          2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: 2uuIHkknyY1HSO6Q0IyWJ3uj2vkYqAM5NlYhwfUtUiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:28:03:38:e8:90:2e:8b:5f:9d:41:50:53:64:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
        Validity
            Not Before: Mar 26 07:01:57 2026 GMT
            Not After : Mar 27 07:01:57 2026 GMT
        Subject: CN=4e77b78426724e90fa8f4dc467d7b59acfb2a178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b6:fb:74:88:ed:27:f2:dc:d6:c6:9c:3c:be:
                    aa:69:79:b5:98:2a:2a:6e:72:20:ec:f1:ad:05:dd:
                    95:4b:2c:a5:4d:a9:97:45:6e:31:11:d9:75:b5:d2:
                    c5:45:7d:ff:c8:55:4d:8a:37:92:00:4b:2d:6d:2f:
                    9e:bf:98:3d:54:89:46:52:2d:1f:c9:a6:87:4e:31:
                    39:f6:46:e8:1a:6e:4f:51:35:72:1a:ab:1d:e3:7b:
                    ed:eb:fd:5b:4f:95:fd:92:e2:37:ec:35:48:27:7e:
                    d6:d0:cb:04:19:96:a1:a1:d1:67:e5:70:9c:3a:ee:
                    ae:1a:41:f4:27:e4:8d:1a:83:e6:c7:8c:77:79:95:
                    28:e0:df:43:3a:e5:d5:f6:69:c5:eb:20:93:39:e8:
                    bd:c4:b6:cf:c1:45:a0:84:b7:85:80:08:b6:b7:2a:
                    42:2f:bd:6e:4a:74:17:ce:12:ae:fb:3e:c2:7a:9d:
                    ff:7f:25:93:5a:b2:6e:f9:bd:1c:62:66:5d:32:89:
                    b1:d7:5b:31:81:69:2d:1d:2b:66:fb:88:ad:93:16:
                    ec:be:8e:88:52:24:57:3c:d4:41:2e:41:66:4b:a8:
                    93:60:13:0b:4a:ed:70:f5:d6:a9:30:f6:be:4e:5c:
                    34:d3:f3:10:e8:e6:16:2a:99:57:c9:0f:04:2b:ce:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:77:B7:84:26:72:4E:90:FA:8F:4D:C4:67:D7:B5:9A:CF:B2:A1:78
            X509v3 Authority Key Identifier:
                keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:be:14:40:31:37:94:cb:29:ba:6b:a7:b1:3a:0f:f6:27:
         1c:4e:98:1c:82:db:c1:d7:18:8a:1e:31:f3:28:34:16:20:0b:
         fb:60:18:f8:f1:db:f6:bc:ab:4c:d6:7d:b7:01:d9:6e:f3:e5:
         c6:1a:3e:a9:6c:35:97:5a:aa:b7:d7:0b:aa:36:bc:3c:af:eb:
         2e:4f:a8:31:4d:e5:8d:78:83:c2:34:29:34:8c:e8:46:87:56:
         8e:a3:af:8b:a8:1b:13:91:52:9e:7e:b6:5c:b2:fc:80:b5:a5:
         46:40:aa:ea:3e:5e:59:b4:63:b0:c9:6f:95:d2:6e:c7:52:e6:
         9f:3d:19:c7:31:04:64:e3:8c:18:ff:56:4d:1e:d1:d5:26:21:
         7f:f5:53:f9:ed:f8:f2:e2:39:0d:90:66:15:d6:b5:3f:78:a8:
         37:85:cc:d7:d7:7a:65:53:e8:a5:3d:47:df:89:89:7c:9a:84:
         55:7a:e4:93:c8:0d:f2:d8:55:ee:d3:49:fd:7e:6b:d8:2b:e3:
         74:a7:a8:ef:1a:53:ee:a0:b1:b7:bf:64:ce:c2:4a:a5:c8:ab:
         0d:dd:07:de:6b:d3:92:cb:ec:cc:e9:96:48:2e:84:7d:bf:9b:
         b8:28:41:18:01:bf:6b:ff:63:ef:12:67:55:20:0d:49:e1:33:
         76:9b:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:39 2026 by rpki-client