Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File:                     qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier:          Q1RnGnw8p4ok/u94kAfdkfgv2Yo0T9xAfePQtn3/Ru4=
Subject key identifier:   2C:8C:1D:76:CA:7E:3A:A2:30:76:79:84:E3:9E:35:EC:03:3F:FD:E1
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer:       /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial:       019D265F159CAD79128045502CE0D758727C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number:          1518
Signing time:             Wed 25 Mar 2026 19:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:58 +0000
Files and hashes:         1: 21Yf12X5Xts3sbdn2jGlU_TfEv4.roa (hash: Uc+vkMAdsrzPjHQ3cBJ8s1GbQwnyrG3dngRrn0NPypc=)
                          2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: 03WYirLMq/Zqi5wM7Nk04Ew3p9/qBaE5rRN9Yny5GiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:15:9c:ad:79:12:80:45:50:2c:e0:d7:58:72:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
        Validity
            Not Before: Mar 25 19:00:58 2026 GMT
            Not After : Mar 26 19:00:58 2026 GMT
        Subject: CN=2c8c1d76ca7e3aa230767984e39e35ec033ffde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:0a:34:ac:97:4e:5c:57:51:10:99:86:92:
                    b4:1b:5a:36:1c:1e:b0:3c:7c:90:e4:cc:53:05:12:
                    f7:f2:00:88:d9:08:28:95:cc:04:c4:f1:f4:e3:2a:
                    c4:41:62:4a:7d:1f:2b:23:e0:15:cb:d1:ab:75:35:
                    94:f2:ca:da:67:f4:66:cb:73:93:2b:91:3e:bb:03:
                    76:e3:3f:05:ad:2f:a7:4d:57:27:5d:1b:97:0a:62:
                    f5:f2:26:9b:1f:6b:6e:62:92:84:62:a7:61:a3:33:
                    88:e0:bd:83:34:cd:7a:e1:40:f2:28:74:57:a3:9d:
                    7a:bb:b4:ca:93:3b:ac:4a:12:40:e3:f7:e4:ad:f4:
                    02:44:64:48:dd:98:58:6b:18:19:98:70:fd:dc:a1:
                    3d:25:c6:91:cb:f8:e2:cd:7e:f4:06:41:1c:fc:6b:
                    03:4f:dc:e6:f5:46:20:ae:d9:e6:42:23:80:c0:29:
                    53:82:6e:93:77:e0:06:79:ae:9d:64:1a:ee:b2:5e:
                    69:f3:a5:fa:fb:4f:b0:92:10:f8:8f:ed:b3:d7:30:
                    cf:f2:2c:11:9e:2f:d9:0a:66:e3:85:ef:d7:34:2b:
                    a5:a7:47:e4:6c:e7:ef:a4:c6:b1:82:9d:76:e6:73:
                    82:9d:c8:16:ce:83:44:2e:4f:80:88:c7:f4:e4:00:
                    38:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:1D:76:CA:7E:3A:A2:30:76:79:84:E3:9E:35:EC:03:3F:FD:E1
            X509v3 Authority Key Identifier:
                keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e4:b4:23:15:0f:d9:7f:3b:c7:4b:b5:82:51:51:81:c0:39:
         48:cc:16:d6:e2:68:d9:40:18:14:5d:63:58:8c:9d:83:bd:18:
         88:58:62:18:98:28:95:27:cc:54:bc:fc:5d:49:38:99:b1:3b:
         86:39:4d:d9:4a:27:b2:ac:b1:ca:fc:c9:31:01:10:d3:52:ad:
         d4:db:76:7d:2f:af:a8:63:b1:40:13:d6:37:da:1c:98:8d:bb:
         01:e7:46:1e:e2:5e:e8:a3:76:bf:ca:09:36:6e:e8:bf:ba:d8:
         9d:67:c7:b9:8b:7f:d1:ea:08:c2:27:8a:7d:85:1a:97:7f:50:
         6f:ad:43:47:89:ea:cd:f3:7f:17:1f:19:23:bd:8d:0b:ca:ae:
         fe:49:46:a8:f4:78:1f:49:bb:d2:6f:b1:0a:8f:e6:b5:8e:b1:
         4f:73:8d:53:26:90:73:ba:50:3a:b9:7c:e1:9c:e3:ac:a6:ff:
         5e:37:41:ac:51:a1:1a:b5:9d:05:fe:78:6f:e1:e3:59:58:54:
         0f:b3:57:aa:3a:5b:31:80:6d:b7:7d:eb:f6:88:f2:ce:af:7d:
         2e:85:ae:b3:32:2e:30:d7:b7:ec:c5:2e:44:1a:53:6e:e9:0d:
         d7:80:c0:14:91:40:40:cb:ea:16:b8:54:86:73:27:3c:31:16:
         11:ea:4a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxWcrXkSgEVQLODXWHJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YTI1MTE0MDExNGM4ZmQ4YWQ1ZmI0NWI3MTg5YWJhN2Jj
NTA0OGYwHhcNMjYwMzI1MTkwMDU4WhcNMjYwMzI2MTkwMDU4WjAzMTEwLwYDVQQD
EygyYzhjMWQ3NmNhN2UzYWEyMzA3Njc5ODRlMzllMzVlYzAzM2ZmZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX8KNKyXTlxXURCZhpK0G1o2HB6w
PHyQ5MxTBRL38gCI2QgolcwExPH04yrEQWJKfR8rI+AVy9GrdTWU8sraZ/Rmy3OT
K5E+uwN24z8FrS+nTVcnXRuXCmL18iabH2tuYpKEYqdhozOI4L2DNM164UDyKHRX
o516u7TKkzusShJA4/fkrfQCRGRI3ZhYaxgZmHD93KE9JcaRy/jizX70BkEc/GsD
T9zm9UYgrtnmQiOAwClTgm6Td+AGea6dZBrusl5p86X6+0+wkhD4j+2z1zDP8iwR
ni/ZCmbjhe/XNCulp0fkbOfvpMaxgp125nOCncgWzoNELk+AiMf05AA49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyMHXbKfjqiMHZ5hOOeNewDP/3hMB8GA1UdIwQY
MBaAFKiiURQBFMj9itX7RbcYmrp7xQSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEt
ZjA5NDYyYzEyZGE0LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEtZjA5NDYyYzEyZGE0
LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceS0IxUP
2X87x0u1glFRgcA5SMwW1uJo2UAYFF1jWIydg70YiFhiGJgolSfMVLz8XUk4mbE7
hjlN2UonsqyxyvzJMQEQ01Kt1Nt2fS+vqGOxQBPWN9ocmI27AedGHuJe6KN2v8oJ
Nm7ov7rYnWfHuYt/0eoIwieKfYUal39Qb61DR4nqzfN/Fx8ZI72NC8qu/klGqPR4
H0m70m+xCo/mtY6xT3ONUyaQc7pQOrl84ZzjrKb/XjdBrFGhGrWdBf54b+HjWVhU
D7NXqjpbMYBtt33r9ojyzq99LoWuszIuMNe37MUuRBpTbukN14DAFJFAQMvqFrhU
hnMnPDEWEepKCA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:35 2026 by rpki-client