Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          Kud++7vrEprHoKOjRmwqlWpBMhogzKWObeCs5LL/H4w=
Subject key identifier:   39:D6:61:E0:C3:C6:DB:EB:DB:E2:11:64:B9:CB:C9:66:34:96:52:55
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       019D29293901FAC89642C8999386B0DE309E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0F5E
Signing time:             Thu 26 Mar 2026 08:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:00 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: 56Nmu+ixB2hL9SGT8W9ei803ZZMwd0Kf0EzHsVCP6Ck=)
                          2: X9p1dpq5cNTg4oaZ6x30uyHelQI.roa (hash: D5fNoAic1Tp57BY17A3hU+C+OdDJaGcq/k7ZyehvTB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:39:01:fa:c8:96:42:c8:99:93:86:b0:de:30:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Mar 26 08:01:00 2026 GMT
            Not After : Mar 27 08:01:00 2026 GMT
        Subject: CN=39d661e0c3c6dbebdbe21164b9cbc96634965255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:02:ee:50:e7:e3:20:f2:90:e8:ec:38:56:
                    1f:c1:4d:f8:dc:8c:1b:c1:bb:2b:0b:37:6e:a1:c3:
                    7c:99:3b:5e:5b:0d:07:f6:f4:5b:6b:a8:35:90:81:
                    a2:b3:a8:db:a2:a3:91:5f:41:d3:a2:84:68:a8:74:
                    cc:6d:9a:4d:e9:f3:50:17:4d:71:d2:5d:f7:89:26:
                    cd:c3:d7:7e:55:56:3f:f2:f9:91:3f:42:00:73:65:
                    b7:2d:fe:82:e4:be:8a:b5:f0:4f:1a:b3:fd:14:02:
                    05:d9:87:2a:f1:dd:43:57:00:f8:8a:4e:c3:02:46:
                    ca:3e:7b:5f:d5:88:fa:9e:62:25:c8:6b:dc:c4:ae:
                    86:e3:6c:a3:db:13:1d:41:a6:c1:46:8f:db:1c:47:
                    8e:33:e5:91:45:79:6e:da:f3:fb:a6:1e:25:5e:68:
                    68:3a:5d:9f:46:f1:21:01:47:62:c5:7c:36:91:0c:
                    79:a7:32:cf:58:4b:26:3b:50:72:fc:cd:6c:db:5e:
                    cf:9e:4b:87:a6:29:84:a7:b0:e5:fe:ca:db:a4:cd:
                    fa:25:00:34:63:8d:de:e6:46:b8:df:e1:a7:b8:66:
                    27:ad:76:ef:31:9e:f9:91:cc:c9:9a:09:bf:b4:f4:
                    86:67:0a:d5:de:20:1c:6c:f5:13:bf:4a:37:3f:f4:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D6:61:E0:C3:C6:DB:EB:DB:E2:11:64:B9:CB:C9:66:34:96:52:55
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:45:9c:0d:18:9c:4f:17:ac:e6:f5:1c:5e:4d:b4:89:d8:26:
         ea:c0:05:87:3b:76:77:92:da:7e:33:97:2e:c1:1e:65:7f:5b:
         38:70:e3:d0:6b:b3:99:54:6a:6f:b3:fc:53:52:bd:b7:15:20:
         e3:bb:d4:0b:cf:f5:45:dd:75:aa:82:5e:40:b5:a1:5b:c5:eb:
         c4:51:d9:01:ec:76:e9:da:40:83:05:74:74:a3:98:6c:de:24:
         92:54:01:17:e9:40:0a:c4:96:89:25:ba:ed:a8:c6:5d:06:b4:
         be:bd:fe:8e:67:f5:9f:23:38:53:38:a6:91:c3:f7:2c:5f:c3:
         c3:0f:76:1f:de:38:f0:6d:19:0f:6b:47:69:cc:07:3d:b7:da:
         ea:d4:3f:15:6d:2d:1f:3f:00:2f:83:fc:b5:80:4a:b5:d9:2f:
         38:84:66:71:21:ba:1e:0b:d5:43:b8:cf:cb:c8:fa:47:13:95:
         3a:d2:34:83:d5:cc:a7:5c:49:0e:0d:80:9e:e3:22:03:c8:91:
         29:a0:81:00:82:05:ad:69:7c:b2:3d:6b:32:9c:d0:07:0a:44:
         f0:f5:95:53:1e:bf:ec:27:c8:8b:f3:1a:e2:01:54:16:9a:03:
         17:dc:8c:de:f5:a0:4a:da:62:08:0a:ef:4e:3a:92:cc:de:30:
         6a:61:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:38 2026 by rpki-client