Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          jzq4HjwsHeya1la8FlsQCn/FFrnOINKcUGKi5uyxVQ8=
Subject key identifier:   96:54:A4:8C:55:96:B5:C5:71:30:D4:41:4D:65:3B:DC:A9:BA:2C:BA
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       019D25F1FBA0DBD88B6CCA56076FD8A3BEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 17:01:48 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:48 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:48 +0000
Files and hashes:         1: 3oYuOEcw1b9v0ouS6gA5UBDk4tQ.asa (hash: nrqhWNV+Xc5NkmygiKViAPbV5PLyvcfSxXDvQeMjjJs=)
                          2: UYOEbjPyLAeXDjmWXka43xNSBrc.roa (hash: Ea7vb/KbqpdCWL5Nsui+X7+vrHZiuSMLp+d9Fc0ie4Y=)
                          3: W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa (hash: ftW/H5OGOvc73tGHyq9jUHDKeB+UWHSYf4rvMWEvpmQ=)
                          4: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: JPhGweKz+Lm3vB52lYX+orIJ5jo3dUV9QlvBr4Pu6Dc=)
                          5: w_LZxwyOUgD4IGBy1szvQwuznT8.roa (hash: YO+GhiXP/lIUMsu3S7EDreywlrg58HTztRPtniTveWM=)
                          6: x7TD4pUm1hOHrZRLC3TJ-5O5zTI.roa (hash: L8tddTG9LQKbBaTsHjpHN79P5a7dlI7sXDT4x985xho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:fb:a0:db:d8:8b:6c:ca:56:07:6f:d8:a3:be:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Mar 25 17:01:48 2026 GMT
            Not After : Mar 26 17:01:48 2026 GMT
        Subject: CN=9654a48c5596b5c57130d4414d653bdca9ba2cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:57:45:c4:bb:97:70:ba:08:8f:04:85:da:
                    29:98:1a:49:b7:08:63:47:47:0d:24:eb:37:74:b6:
                    d1:03:77:d7:2d:2f:d8:75:34:d4:10:38:d4:05:c2:
                    8d:74:49:c3:a0:94:5c:50:fd:f7:b7:08:03:37:31:
                    f4:20:e7:b2:d8:bc:af:63:39:ab:0d:b9:e8:94:42:
                    e6:89:51:cf:47:07:57:55:ac:d9:59:32:8c:46:48:
                    d2:d0:46:55:38:07:bb:21:a1:ab:f7:01:23:ac:62:
                    23:50:e9:b0:51:8f:ac:56:f8:63:b1:b9:16:06:93:
                    e8:e3:75:50:62:e9:f8:08:2b:d1:f8:af:29:90:bc:
                    08:b2:84:48:0b:f0:9f:e4:68:70:27:a1:c1:ab:a3:
                    2c:83:ab:d1:09:d4:0e:2f:6e:79:1d:f9:fe:98:ea:
                    d3:21:23:52:79:2b:6e:5e:50:b9:57:ed:ba:61:61:
                    fe:61:d3:01:cc:a3:81:b2:6c:83:62:f3:b8:dc:98:
                    da:f4:33:d0:44:56:5c:7e:a0:4b:a1:5a:21:9e:72:
                    ba:7f:a2:70:6e:e9:74:2c:8d:42:9a:66:70:06:83:
                    ae:cf:a0:3f:63:8b:ca:f7:48:10:c3:ed:5c:e4:35:
                    ac:ad:2b:13:5d:ca:ca:95:b3:00:4a:8d:13:ab:ef:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:A4:8C:55:96:B5:C5:71:30:D4:41:4D:65:3B:DC:A9:BA:2C:BA
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1b:1f:0c:26:59:bf:2d:be:d9:5f:78:9f:2f:f5:14:99:74:
         90:60:9f:02:d1:8c:5b:be:92:44:6b:26:83:2a:f1:22:a4:86:
         9f:fa:33:79:66:d0:01:1f:85:78:df:a7:73:12:20:e7:47:f2:
         8a:c5:6a:2a:50:72:bf:fd:32:82:5c:df:92:b6:14:af:f0:24:
         85:7e:6b:a1:92:e0:d6:9b:b4:b1:fb:7a:18:69:92:02:10:6c:
         e6:77:47:06:0e:e1:b8:44:6f:af:b2:8d:34:bf:76:4f:b1:3d:
         61:74:56:17:8d:72:5f:ef:69:68:7a:bb:c4:cd:f1:19:88:08:
         d4:ee:93:19:10:39:e3:ba:68:65:2f:7c:a9:9e:49:62:a4:a7:
         d8:06:e9:32:f4:f4:95:3e:3e:08:39:76:b5:d4:b8:c8:9b:c9:
         78:46:88:b6:82:22:72:ca:ca:e5:35:7c:ef:9f:55:44:5c:cf:
         31:cc:c0:97:45:bc:9a:d1:a1:29:d2:94:7a:2c:2d:e4:be:5c:
         19:da:48:8d:3e:bc:d6:8d:da:e3:f4:a2:7c:e3:f5:df:e0:f2:
         9b:df:c8:1e:ad:6b:3c:ea:c8:7e:8e:f2:41:01:79:cd:08:ea:
         85:9d:5e:ad:d6:1e:9e:46:64:4b:82:e7:27:10:e6:a0:fb:5d:
         88:4f:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:42 2026 by rpki-client