Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File:                     QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier:          NqPtf7xPEnkYa3IlGbFAam33V7Ln+45cq7l6SEIUdFs=
Subject key identifier:   6A:CC:77:E3:ED:20:2F:74:6A:B2:71:13:2E:AA:A6:8E:70:23:75:15
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer:       /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial:       019D2BBBE5612153C7F642E956B5370CFD4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number:          0E1E
Signing time:             Thu 26 Mar 2026 20:00:27 +0000
Manifest this update:     Thu 26 Mar 2026 20:00:27 +0000
Manifest next update:     Fri 27 Mar 2026 20:00:27 +0000
Files and hashes:         1: 2gL5kS5knkNfeejSTgCsY7lVOJg.roa (hash: M7tZEiNHhGn+2BXSnDrAoQUr1eF6UodCnHxeC7Oeok4=)
                          2: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: hrGjVlkD3sucbzy8JI916CGlc5oeZjTuAdTn6gc4BHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:bb:e5:61:21:53:c7:f6:42:e9:56:b5:37:0c:fd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
        Validity
            Not Before: Mar 26 20:00:27 2026 GMT
            Not After : Mar 27 20:00:27 2026 GMT
        Subject: CN=6acc77e3ed202f746ab271132eaaa68e70237515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:01:68:05:6f:85:2e:b5:6f:d1:38:74:89:
                    66:f3:8d:80:7f:de:3f:a1:19:df:99:65:e3:e2:8e:
                    6e:cf:75:57:7e:19:0f:75:d5:19:f0:94:2b:4f:8f:
                    1b:c2:3c:32:32:98:73:73:cd:03:7f:ad:d7:97:f2:
                    01:fe:05:93:36:73:1f:f2:96:4a:1b:5e:01:b1:be:
                    26:f5:21:90:20:6d:fc:44:d6:9b:2a:f3:1b:af:54:
                    d6:1f:53:33:6a:6c:d6:79:05:24:78:12:f1:19:8e:
                    f5:22:3c:c2:a4:28:bb:9c:0c:47:f5:d4:ed:64:d1:
                    89:60:f4:10:9a:13:10:ab:f3:9e:04:7d:fb:ff:1d:
                    cd:1b:a1:30:62:e7:43:0b:30:fd:19:85:7d:89:e5:
                    0d:a4:94:b7:ed:16:3c:e1:ef:3d:2c:51:f8:17:77:
                    0b:08:1d:b6:0c:15:42:01:90:0b:79:a4:9a:ae:01:
                    ce:f8:e2:55:ba:45:f1:32:45:0e:5d:5c:b8:72:54:
                    7f:79:ab:17:b5:7b:d7:97:30:5c:8b:6c:05:56:c1:
                    2f:01:f0:f7:a8:c0:9f:a0:1b:24:bf:af:f1:74:b2:
                    5c:60:b9:3c:2c:45:20:6e:f0:35:20:2a:ab:58:7b:
                    d0:15:4f:f1:84:11:7c:29:0b:57:5d:d8:eb:c1:79:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CC:77:E3:ED:20:2F:74:6A:B2:71:13:2E:AA:A6:8E:70:23:75:15
            X509v3 Authority Key Identifier:
                keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:01:c3:d5:3b:a1:ce:ad:26:12:73:a6:63:ac:6d:fe:6d:
         3c:00:10:25:7a:cc:8b:55:cb:e1:59:0c:59:5d:7c:24:0b:39:
         31:b7:17:d0:44:47:a3:74:48:8d:85:22:af:88:68:d3:44:8d:
         63:e5:9a:d0:e4:0b:2a:23:ee:16:fa:8e:35:96:1d:bf:5d:a2:
         54:56:aa:67:05:0a:52:7a:4c:56:63:4f:3a:30:18:1a:49:30:
         db:c4:b4:77:fa:a5:a3:48:41:83:e8:31:19:68:5f:d7:4a:47:
         95:d7:b2:db:4a:44:1a:00:bb:3d:af:1e:6d:5f:33:75:fa:48:
         79:bb:80:15:6a:d7:be:4a:54:60:01:70:79:57:9c:07:8a:d9:
         e5:5c:20:7b:ad:64:46:c2:09:b5:09:52:94:a6:ac:75:c7:41:
         6c:8b:b6:4f:84:36:3d:24:43:27:eb:e7:ef:d6:cb:fd:f0:30:
         61:e4:22:14:84:68:8b:82:e5:e1:ed:70:71:2f:08:58:55:de:
         0c:ea:73:23:e1:b9:9e:4e:1f:c3:8f:89:1b:8d:49:4f:51:88:
         3d:8b:de:8e:12:33:e4:7a:7f:18:95:95:6f:fc:d4:a9:60:8a:
         b2:cd:79:ae:d7:0b:79:e7:3a:62:37:bd:ab:f8:e7:3c:73:0f:
         be:82:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:19 2026 by rpki-client