Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
File:                     R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json)
Hash identifier:          kryYoS/W4D1yn5C3NOSvMHZ3u022mdhlCh6BW7KCxWw=
Subject key identifier:   41:28:5C:E7:17:85:2A:7B:C0:DE:D2:B0:D6:74:B2:CF:AF:FE:80:4C
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Certificate issuer:       /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial:       019D28166C9829B54A5653CE98F07F605FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 03:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:51 +0000
Files and hashes:         1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: DtRyfgvKfacyfIXAluyOqrEhOkhSmT2yf+nBP1Q5WWw=)
                          2: elreK20YpaSo7u9v55jxGF5rHO4.roa (hash: lrIYGG9SdGCcfazBvX7lzn+XdBdxuXWCr/oHZ+PyxD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:6c:98:29:b5:4a:56:53:ce:98:f0:7f:60:5f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
        Validity
            Not Before: Mar 26 03:00:51 2026 GMT
            Not After : Mar 27 03:00:51 2026 GMT
        Subject: CN=41285ce717852a7bc0ded2b0d674b2cfaffe804c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:31:1b:5b:88:f9:52:43:ff:39:6e:e1:99:
                    65:67:09:7e:2b:3e:d5:08:24:2a:52:00:51:66:fc:
                    8d:a2:ca:00:f8:27:0d:d0:8d:dc:82:0f:5e:b0:4d:
                    92:15:89:84:1e:f2:1e:36:67:c4:6c:c8:19:65:81:
                    52:74:52:c1:55:3d:ae:67:fd:3a:7a:a7:f9:27:8a:
                    1d:b2:b2:a2:12:c2:3d:5c:ae:cb:b6:09:8b:c5:61:
                    b2:13:0e:c1:a9:d5:ba:20:1f:52:16:6e:da:53:e1:
                    93:08:d2:bb:4e:eb:17:f8:c8:00:51:09:d1:b3:30:
                    03:56:1d:6f:8e:18:53:8e:43:b5:01:03:51:c0:35:
                    07:ad:87:89:aa:ea:79:37:04:35:98:67:11:31:88:
                    00:50:a7:3d:93:5d:c4:28:d1:f6:a2:08:66:11:8f:
                    67:59:86:99:b4:a3:96:a2:d3:13:71:60:db:e7:df:
                    5f:5f:47:83:39:0e:b3:6f:da:84:d8:bc:d8:55:a9:
                    b9:fa:d4:a1:18:f9:a6:b9:1b:97:14:e9:9c:31:16:
                    e2:8d:90:d4:80:1f:5a:b0:7d:75:16:8c:e1:33:09:
                    8b:47:03:2e:92:12:98:58:7d:27:7c:b6:8a:2f:6c:
                    bb:5e:6e:dd:0f:d1:f7:52:73:28:28:ea:67:b7:7f:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:28:5C:E7:17:85:2A:7B:C0:DE:D2:B0:D6:74:B2:CF:AF:FE:80:4C
            X509v3 Authority Key Identifier:
                keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9c:ea:95:4f:dc:09:f4:df:15:a6:41:01:64:67:13:33:03:
         87:36:62:b6:0d:56:4b:b0:4e:2c:51:52:b7:77:91:3c:03:96:
         d1:e0:a2:ac:f2:40:d2:00:9b:da:0e:94:9e:d2:70:37:fd:1a:
         9a:2a:58:c1:2e:f5:84:6d:5d:93:17:f5:dd:c4:1b:fb:50:ee:
         cc:81:1a:17:bc:26:2b:f3:42:e0:62:19:0d:38:0a:e5:94:6e:
         bd:8d:bd:10:a7:a8:20:fd:2e:74:4e:aa:52:8b:b3:06:45:27:
         67:48:d2:3b:37:bf:55:4f:f4:e3:b3:09:b8:0b:5e:bb:26:62:
         fa:51:dd:b0:8f:93:98:16:f1:d7:a0:fe:ca:dc:96:ae:ee:a5:
         a8:cb:6d:03:e4:d1:cb:f5:e8:fb:3c:b4:1c:ab:3a:0e:57:dc:
         bb:3d:67:cc:a1:9f:42:de:98:e7:29:33:a9:12:bf:be:5a:d6:
         3a:ed:9c:40:eb:6c:5d:4f:a0:0e:83:f0:cc:19:1c:83:80:bf:
         77:5f:79:9e:ec:f0:a3:fc:80:17:2a:95:45:27:76:15:87:50:
         24:8e:11:8f:92:73:82:fd:7b:02:cb:b6:94:b2:3c:0d:56:17:
         46:51:73:e7:7b:26:27:bd:59:cf:58:18:67:44:f2:0e:f1:da:
         2b:25:dc:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFmyYKbVKVlPOmPB/YF/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTQyMjMzZWQ2MzBiMGI4OWY1MmMwNzdmZjBkNWMyYjM3
ZDRkZmEwHhcNMjYwMzI2MDMwMDUxWhcNMjYwMzI3MDMwMDUxWjAzMTEwLwYDVQQD
Eyg0MTI4NWNlNzE3ODUyYTdiYzBkZWQyYjBkNjc0YjJjZmFmZmU4MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPAxG1uI+VJD/zlu4ZllZwl+Kz7V
CCQqUgBRZvyNosoA+CcN0I3cgg9esE2SFYmEHvIeNmfEbMgZZYFSdFLBVT2uZ/06
eqf5J4odsrKiEsI9XK7LtgmLxWGyEw7BqdW6IB9SFm7aU+GTCNK7TusX+MgAUQnR
szADVh1vjhhTjkO1AQNRwDUHrYeJqup5NwQ1mGcRMYgAUKc9k13EKNH2oghmEY9n
WYaZtKOWotMTcWDb599fX0eDOQ6zb9qE2LzYVam5+tShGPmmuRuXFOmcMRbijZDU
gB9asH11FozhMwmLRwMukhKYWH0nfLaKL2y7Xm7dD9H3UnMoKOpnt3/0QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEoXOcXhSp7wN7SsNZ0ss+v/oBMMB8GA1UdIwQY
MBaAFEfkIjPtYwsLifUsB3/w1cKzfU36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMt
N2ViOTVjYzBmNzQ5LzEvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMtN2ViOTVjYzBmNzQ5
LzEvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5zqlU/c
CfTfFaZBAWRnEzMDhzZitg1WS7BOLFFSt3eRPAOW0eCirPJA0gCb2g6UntJwN/0a
mipYwS71hG1dkxf13cQb+1DuzIEaF7wmK/NC4GIZDTgK5ZRuvY29EKeoIP0udE6q
UouzBkUnZ0jSOze/VU/047MJuAteuyZi+lHdsI+TmBbx16D+ytyWru6lqMttA+TR
y/Xo+zy0HKs6Dlfcuz1nzKGfQt6Y5ykzqRK/vlrWOu2cQOtsXU+gDoPwzBkcg4C/
d195nuzwo/yAFyqVRSd2FYdQJI4Rj5Jzgv17Asu2lLI8DVYXRlFz53smJ71Zz1gY
Z0TyDvHaKyXcGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:42 2026 by rpki-client