Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File:                     qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier:          LmwT8nWWqRSei9DiMQC67E4Bw2cyXQBykIj5dHNVmJk=
Subject key identifier:   56:93:20:7E:23:8A:92:92:DB:11:13:11:48:56:D1:11:81:40:8A:81
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer:       /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial:       019D2696355ED2426047CD7DDF28A3463D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number:          0547
Signing time:             Wed 25 Mar 2026 20:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:11 +0000
Files and hashes:         1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: gkrl+hEvqfzOWFiZKwm4kNXiEyGzB5sJhCGlFJ1oA1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:35:5e:d2:42:60:47:cd:7d:df:28:a3:46:3d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
        Validity
            Not Before: Mar 25 20:01:11 2026 GMT
            Not After : Mar 26 20:01:11 2026 GMT
        Subject: CN=5693207e238a9292db1113114856d11181408a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:a1:c1:78:0c:83:d4:6d:53:0b:7b:c8:a9:
                    b3:68:3d:97:68:bb:51:3f:cb:48:ce:52:c5:23:65:
                    e4:18:3a:50:cb:ca:5f:d6:95:0e:38:6b:e9:f9:33:
                    33:78:1a:75:bb:70:c9:e2:be:c3:44:15:db:91:5a:
                    10:6c:4e:b7:25:19:2d:c7:aa:73:87:cd:e4:2e:c5:
                    5f:85:da:39:50:1c:81:2a:f8:2e:65:a4:11:54:56:
                    ae:43:9a:51:99:87:a8:85:64:8c:c7:3b:ae:d8:06:
                    72:91:1f:03:82:85:a0:66:9c:bb:38:c0:fc:20:21:
                    8c:de:ab:65:c4:42:9b:08:e5:09:bb:db:2b:fe:87:
                    89:ca:0a:d8:6d:21:d7:18:0a:f6:8a:e9:34:fe:42:
                    bf:82:45:d6:8a:26:f9:3b:35:18:0a:9f:c1:64:23:
                    21:71:b4:f8:fc:15:e2:50:8d:ff:a7:d8:46:6f:9d:
                    4b:0a:05:ef:c9:48:96:6d:da:18:9b:9e:2f:72:07:
                    13:09:80:86:98:29:b2:29:d8:8d:d9:a8:e7:81:d6:
                    9e:25:85:71:13:96:50:7e:2e:e5:ee:07:2e:13:46:
                    c7:8d:9a:9e:14:69:20:57:36:0b:af:b5:c8:4e:44:
                    1e:7b:3c:66:4d:c5:83:d2:18:87:42:68:c9:a1:a5:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:93:20:7E:23:8A:92:92:DB:11:13:11:48:56:D1:11:81:40:8A:81
            X509v3 Authority Key Identifier:
                keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:5b:3a:87:2c:eb:08:b2:53:5f:bf:78:36:b4:23:72:cc:ae:
         8e:54:f1:4a:46:db:54:af:26:d6:de:d6:83:d7:39:4a:e6:14:
         91:ac:0f:74:66:ad:61:98:4b:a5:e0:fa:ab:24:ff:f5:35:aa:
         e9:0e:18:65:d1:85:db:ea:1f:2f:67:c5:cf:c4:12:7e:45:3c:
         b7:e9:8a:04:e4:70:da:8e:08:ba:8d:89:09:b2:49:75:6c:a6:
         01:9e:3e:b7:6e:b9:ca:37:28:d4:f0:c6:28:4c:0a:d8:68:6c:
         8c:be:91:7a:d5:1f:ff:22:25:22:f2:52:16:5f:df:b4:6b:bd:
         cb:25:63:cf:fd:cb:ca:94:4f:73:b9:22:4d:04:b0:c9:2b:22:
         cd:ad:a2:95:c2:d5:ce:f6:5c:d9:82:e8:d1:8b:2c:b4:80:c6:
         f9:da:78:03:28:56:f2:bc:ba:e7:1d:98:24:2a:bd:78:39:4d:
         c6:0e:71:38:66:e7:90:f8:d5:a9:16:10:db:57:14:7f:74:d1:
         b1:83:eb:cb:41:81:5f:b9:28:df:9b:dd:40:90:45:5b:a1:67:
         a6:32:12:80:c9:0a:17:6c:df:15:d5:07:8c:53:95:9e:99:14:
         a8:a8:2f:a1:1a:ee:d8:60:44:24:71:65:ab:13:1a:e5:0a:a7:
         56:5a:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:50 2026 by rpki-client