Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft
File:                     q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft (raw, json)
Hash identifier:          mq2zTgS18tM0H12HwtJb44ySVKxJeHUAwWlZiyblx20=
Subject key identifier:   B0:79:76:00:01:06:76:E3:BD:AE:C1:2C:14:43:F7:16:32:83:82:11
Authority key identifier: AB:F7:9A:B7:E7:C9:A7:53:EF:F1:2E:91:44:84:BA:AC:5E:42:3E:10
Certificate issuer:       /CN=abf79ab7e7c9a753eff12e914484baac5e423e10
Certificate serial:       019D254C664E52FC0C92802EA4B7377D10AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q_eat-fJp1Pv8S6RRIS6rF5CPhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft
Manifest number:          5C
Signing time:             Wed 25 Mar 2026 14:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 14:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 14:00:56 +0000
Files and hashes:         1: q_eat-fJp1Pv8S6RRIS6rF5CPhA.crl (hash: ZgSe+b3pKQKSM17D0FYv0sazBo/0rVWDeLBkKRlyBsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q_eat-fJp1Pv8S6RRIS6rF5CPhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:66:4e:52:fc:0c:92:80:2e:a4:b7:37:7d:10:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf79ab7e7c9a753eff12e914484baac5e423e10
        Validity
            Not Before: Mar 25 14:00:56 2026 GMT
            Not After : Mar 26 14:00:56 2026 GMT
        Subject: CN=b0797600010676e3bdaec12c1443f71632838211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:74:23:1e:44:c5:31:03:f0:77:27:32:e2:
                    1d:a5:5d:f0:3c:43:7a:21:88:f7:f7:dc:c7:14:b3:
                    5b:0f:83:dc:12:b7:57:d8:09:54:2b:8a:74:95:f6:
                    0a:8a:e2:99:57:5e:2f:c0:d8:90:59:18:e9:92:0d:
                    16:85:cd:5c:7c:95:e0:54:0d:c1:19:af:06:35:ef:
                    73:ed:f2:b5:be:bb:58:5b:b7:c4:4e:34:71:3a:60:
                    69:7e:46:5c:f3:53:3e:fe:82:04:84:6f:8e:02:4c:
                    e9:dc:42:15:8d:b0:a3:7f:ee:0b:27:cd:4a:d6:01:
                    7b:bb:71:09:e0:d2:40:80:bb:1e:62:b9:6b:60:76:
                    b7:40:49:40:58:0a:84:c2:e6:0b:63:f4:a2:10:56:
                    aa:d6:77:81:03:17:6a:8e:62:8c:f7:ef:8f:1b:7e:
                    e3:d9:8d:25:5b:96:16:3e:50:5c:96:ad:78:6b:6d:
                    cc:3c:59:71:4e:87:fc:d0:71:b8:83:e9:c8:8b:1c:
                    f7:fd:47:8d:b3:f0:e0:49:1a:06:b8:0e:2e:84:79:
                    37:9e:51:f0:2b:08:f6:ad:10:8d:d9:fd:9b:e6:3a:
                    18:91:a2:b4:9d:8b:97:98:cf:9c:1f:57:f1:ee:0d:
                    dd:98:3c:ef:54:75:e3:03:2b:ed:11:2f:da:32:60:
                    9e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:76:00:01:06:76:E3:BD:AE:C1:2C:14:43:F7:16:32:83:82:11
            X509v3 Authority Key Identifier:
                keyid:AB:F7:9A:B7:E7:C9:A7:53:EF:F1:2E:91:44:84:BA:AC:5E:42:3E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_eat-fJp1Pv8S6RRIS6rF5CPhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:42:75:b4:c0:66:72:52:25:59:d6:d8:6a:df:a2:65:94:dc:
         a1:d7:23:90:de:6b:5f:41:e1:1e:3e:0e:14:d9:74:64:ac:f3:
         80:23:b6:f8:10:b5:cf:a4:8a:ff:c0:41:e8:78:7c:3d:a1:c7:
         5f:92:e9:28:ac:1a:07:3d:d2:d1:d3:89:64:6c:d9:59:4c:af:
         71:27:f5:29:70:58:87:b1:1d:31:af:55:c8:2f:10:89:f4:b3:
         9e:d4:b4:e0:4e:75:eb:cd:31:e9:6b:41:d3:f0:9a:ba:4f:71:
         3d:6a:3c:da:83:fa:ac:8e:f1:e8:9d:a9:64:bc:10:1c:c4:de:
         65:32:05:06:8d:2c:cf:dc:91:2a:7f:f3:e9:03:db:ad:8b:36:
         8f:aa:a7:db:05:2a:59:3e:ee:7e:c7:d5:f6:7e:e4:a0:bd:42:
         05:0c:44:99:5e:aa:f5:71:bd:f4:ff:c1:0a:df:bc:21:e5:bb:
         cd:d2:84:4f:1a:10:90:2a:00:9b:06:8c:f6:25:db:da:0b:f6:
         a2:23:ce:c2:d0:ea:a1:7b:be:aa:ab:09:ba:d7:9f:8d:5b:9a:
         43:a4:37:8e:bf:4f:ae:c7:29:fa:00:9a:03:48:90:bc:8d:0e:
         cc:6c:41:65:69:17:b4:c6:4a:f0:19:65:08:9c:da:1a:c4:57:
         f8:0a:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:17 2026 by rpki-client