Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
File:                     pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft (raw, json)
Hash identifier:          he4lNWC99hxICw3Ylwd0Y0jW54amO0CqrZuRGT1jvj8=
Subject key identifier:   A9:1D:DF:25:E6:08:C2:47:22:74:A9:0E:A9:F3:A2:5E:E8:D6:9A:27
Authority key identifier: A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD
Certificate issuer:       /CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
Certificate serial:       019D265FA5082BC459B8CE8F181A34EF6D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
Manifest number:          08C7
Signing time:             Wed 25 Mar 2026 19:01:35 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:35 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:35 +0000
Files and hashes:         1: pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl (hash: VgEFmXDM66fktwZp972Cy08iTbTgOx3s5UIGI4aKF8g=)
                          2: zHx4SptI2tUU_j8Mkd8Tk06BII0.roa (hash: tWNlo8QgxYZ/7AKQgcvdlNsW8RQC+Ct2O3NbmFTyQSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:a5:08:2b:c4:59:b8:ce:8f:18:1a:34:ef:6d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
        Validity
            Not Before: Mar 25 19:01:35 2026 GMT
            Not After : Mar 26 19:01:35 2026 GMT
        Subject: CN=a91ddf25e608c2472274a90ea9f3a25ee8d69a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:15:fd:5f:f4:e8:b8:50:97:b8:bd:b8:4b:0f:
                    79:68:55:41:92:cd:08:a7:cd:57:78:15:bd:c3:05:
                    68:7e:6c:00:71:af:04:cb:b1:30:e1:19:5d:43:c7:
                    4c:9f:4b:9e:3c:7a:19:34:5a:38:55:46:71:7a:5d:
                    29:ee:3b:6a:5e:e6:0f:e7:ee:75:13:2d:a9:c6:90:
                    c9:37:6e:67:29:17:c0:61:f5:f0:b9:17:e9:6c:89:
                    e6:72:e9:81:e8:bc:e9:42:44:73:51:4f:94:d2:a7:
                    a0:ce:a1:f3:02:96:e2:30:a4:53:61:55:34:e7:d4:
                    96:f1:ae:1c:cf:27:ca:f3:49:e2:8c:1b:cd:a0:c7:
                    9c:42:6a:70:b8:8a:7a:3d:05:3d:ca:37:24:9a:83:
                    6f:3b:2e:4e:3c:9f:48:a7:2b:39:76:73:fb:d1:dc:
                    d0:9b:35:df:2f:36:a0:74:be:22:fd:51:79:3d:2e:
                    74:a8:3f:fe:2e:75:b7:f4:c5:cb:77:8e:b5:62:25:
                    3f:e9:8e:ba:94:77:18:ad:d7:72:58:14:f7:85:1f:
                    ea:c2:24:2e:b1:c4:e6:78:a1:ed:2f:1d:fd:e6:0a:
                    7c:66:ad:11:f7:2e:ac:23:0a:03:f8:95:20:ad:fc:
                    d2:2f:e0:0c:cd:b6:ee:1d:b7:ab:fd:4f:02:db:09:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1D:DF:25:E6:08:C2:47:22:74:A9:0E:A9:F3:A2:5E:E8:D6:9A:27
            X509v3 Authority Key Identifier:
                keyid:A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:33:19:ef:a3:ab:5c:b2:9f:85:ca:f6:97:7f:3e:20:f5:e6:
         35:66:26:6e:13:64:b4:e8:5c:bf:3f:c1:54:e7:8b:cb:45:cf:
         4e:ca:ec:5f:c7:3a:7e:e0:26:9b:04:d4:f8:49:47:56:77:41:
         d2:c5:39:64:92:ac:14:87:14:2a:55:1d:e3:0c:d6:d4:0b:14:
         15:98:c1:21:9e:d6:11:d7:28:5b:4e:c1:74:87:cc:df:59:c0:
         72:4b:47:bd:a2:32:9e:7d:6c:79:ca:8d:79:78:d1:78:0d:8d:
         67:5d:a4:ad:d0:e7:7e:06:f4:63:c2:74:86:67:68:42:6d:6a:
         fb:5a:0b:6b:f1:f8:2b:68:62:e4:8e:e5:62:73:c0:78:f5:50:
         dc:74:39:60:12:63:2d:6c:2e:85:51:96:ed:8e:f9:db:2d:76:
         43:cb:8f:02:d9:37:10:49:53:eb:9c:13:25:bd:64:22:67:f8:
         c8:99:f4:57:03:03:2c:67:11:de:d8:dc:41:e2:43:6e:96:d7:
         4a:f4:1e:5f:e6:b5:dd:b9:ba:44:08:83:03:67:33:e7:ac:99:
         81:a0:d0:98:fb:11:c4:1c:a4:73:74:4f:3f:ff:45:a9:b2:d2:
         19:37:d6:82:00:39:a9:06:65:35:b7:80:bd:66:6b:cf:ec:80:
         05:3d:73:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX6UIK8RZuM6PGBo0721mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTg4YjA4ODdjMzJkZTU5NjZmODFmZjkxNWQ2YjVmZjMx
NTMyZGQwHhcNMjYwMzI1MTkwMTM1WhcNMjYwMzI2MTkwMTM1WjAzMTEwLwYDVQQD
EyhhOTFkZGYyNWU2MDhjMjQ3MjI3NGE5MGVhOWYzYTI1ZWU4ZDY5YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BX9X/TouFCXuL24Sw95aFVBks0I
p81XeBW9wwVofmwAca8Ey7Ew4RldQ8dMn0uePHoZNFo4VUZxel0p7jtqXuYP5+51
Ey2pxpDJN25nKRfAYfXwuRfpbInmcumB6LzpQkRzUU+U0qegzqHzApbiMKRTYVU0
59SW8a4czyfK80nijBvNoMecQmpwuIp6PQU9yjckmoNvOy5OPJ9Ipys5dnP70dzQ
mzXfLzagdL4i/VF5PS50qD/+LnW39MXLd461YiU/6Y66lHcYrddyWBT3hR/qwiQu
scTmeKHtLx395gp8Zq0R9y6sIwoD+JUgrfzSL+AMzbbuHber/U8C2wl9iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkd3yXmCMJHInSpDqnzol7o1ponMB8GA1UdIwQY
MBaAFKaoiwiHwy3llm+B/5Fda1/zFTLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85OGM2MDktMDdmYS00ZTJiLWI0NzYt
NmEyOWJjOWY4YTc4LzEvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85OGM2MDktMDdmYS00ZTJiLWI0NzYtNmEyOWJjOWY4YTc4
LzEvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDMZ76Or
XLKfhcr2l38+IPXmNWYmbhNktOhcvz/BVOeLy0XPTsrsX8c6fuAmmwTU+ElHVndB
0sU5ZJKsFIcUKlUd4wzW1AsUFZjBIZ7WEdcoW07BdIfM31nAcktHvaIynn1secqN
eXjReA2NZ12krdDnfgb0Y8J0hmdoQm1q+1oLa/H4K2hi5I7lYnPAePVQ3HQ5YBJj
LWwuhVGW7Y752y12Q8uPAtk3EElT65wTJb1kImf4yJn0VwMDLGcR3tjcQeJDbpbX
SvQeX+a13bm6RAiDA2cz56yZgaDQmPsRxBykc3RPP/9FqbLSGTfWggA5qQZlNbeA
vWZrz+yABT1zNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:09 2026 by rpki-client