Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
File:                     qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft (raw, json)
Hash identifier:          BIBNsiRZMRycIxgCiwaSafVAoIo3gfwSSa0iGkcc1y0=
Subject key identifier:   4A:6D:B4:91:85:20:B5:47:FF:71:E9:8D:21:7F:8E:A0:A0:E4:59:D7
Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A
Certificate issuer:       /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
Certificate serial:       019D2B4EA2E7FAF6B3BE8744BFED954CC18B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
Manifest number:          10E4
Signing time:             Thu 26 Mar 2026 18:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:06 +0000
Files and hashes:         1: RraYMVrCuJixNGbRQ0z9NDKek1E.roa (hash: AsevObrrGX9qqWXcQtZtj+F6pyw1NJ4ndfCznJ1rbmc=)
                          2: qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl (hash: 248lcXewXGJvdRa4AJHucsJNq0B3kZ+aD1O5frKR2ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:a2:e7:fa:f6:b3:be:87:44:bf:ed:95:4c:c1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
        Validity
            Not Before: Mar 26 18:01:06 2026 GMT
            Not After : Mar 27 18:01:06 2026 GMT
        Subject: CN=4a6db4918520b547ff71e98d217f8ea0a0e459d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fa:3e:75:51:72:60:61:31:b1:25:af:e6:70:
                    77:9a:30:9a:31:d5:b0:74:d0:27:f2:ad:5e:78:fb:
                    f0:c3:27:fe:f8:af:12:12:49:f8:8c:9e:9d:72:3d:
                    72:06:5e:08:a9:3e:26:a9:a6:35:6d:ae:ad:30:84:
                    9e:d5:33:ce:e0:dd:48:aa:88:f7:5d:2e:19:f9:fe:
                    5c:d1:40:61:15:ad:f6:66:47:82:db:ac:30:40:e8:
                    d0:b1:6a:0e:37:4c:fe:01:88:a4:db:ff:f6:d4:64:
                    c0:46:6a:6c:67:34:8f:c2:64:6f:9c:33:1a:08:c9:
                    0f:ef:82:ba:2d:74:03:4a:85:81:62:48:77:2a:0d:
                    95:c8:9f:99:df:65:c7:15:ec:85:e9:02:66:2b:e9:
                    6d:3d:20:14:17:f1:05:32:60:2e:33:ff:2b:e4:60:
                    f3:d7:a9:82:06:14:20:04:aa:53:72:e9:d1:e3:b7:
                    de:6f:72:1e:8b:bf:e9:6b:d9:38:5c:70:32:89:4d:
                    bc:8b:72:16:f0:aa:24:8f:9c:ee:a3:2a:4a:0e:55:
                    de:80:ec:54:fb:8b:d5:54:27:71:8f:36:19:1f:79:
                    fe:89:e4:4b:50:89:f2:3a:ca:5d:82:2a:d2:4f:c4:
                    b8:65:27:dd:7d:b0:e5:b1:a1:62:6e:c1:19:d2:79:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6D:B4:91:85:20:B5:47:FF:71:E9:8D:21:7F:8E:A0:A0:E4:59:D7
            X509v3 Authority Key Identifier:
                keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:44:b8:40:fa:67:c2:c2:57:97:52:3e:37:bc:a5:df:3a:52:
         f3:21:40:26:29:2b:76:e1:7c:76:dd:b2:7f:4c:cd:59:e4:39:
         1a:54:ba:c3:86:e1:99:45:04:72:4d:58:08:07:da:34:f1:4a:
         c7:b2:f3:0d:3d:70:16:db:f8:8c:ef:14:1c:cc:03:ff:b7:43:
         e2:97:c4:ec:ed:5d:14:c6:f7:2c:0c:ad:a9:bc:1c:27:8e:50:
         39:31:62:38:e1:9c:54:4f:8e:57:e7:b6:cd:2f:8d:df:96:ea:
         db:1f:1b:e2:2d:6e:76:ea:92:22:1e:da:ce:27:ac:5b:ac:46:
         38:22:d5:0c:10:61:8a:ce:4d:d8:eb:de:39:99:64:47:69:52:
         c3:b1:a9:58:0b:08:66:52:79:8a:a3:cf:ab:5f:40:dc:81:01:
         bf:6b:e7:8b:6d:bc:ec:d9:1b:07:12:0d:95:57:51:8b:c6:ce:
         04:10:a4:fd:5d:4d:1f:fd:ea:7f:5d:08:ca:f6:f1:5d:24:20:
         bb:ba:73:e5:f2:7b:d5:99:9d:12:0a:cf:ac:ab:aa:83:26:2c:
         32:36:c2:b5:2b:a7:91:a5:6d:33:61:35:33:54:84:16:33:49:
         cf:8f:88:32:9b:a2:c2:fb:80:d2:ef:e4:77:47:91:c1:e7:b2:
         84:7b:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:07:00 2026 by rpki-client