Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
File:                     qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json)
Hash identifier:          RbAh0OJsQpSY2Tlmdm8v+wr1wRZwgdFCgHbppv+dVSo=
Subject key identifier:   ED:9C:55:EE:35:F4:EB:4E:44:57:38:3B:61:40:1A:31:24:C0:2F:EB
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Certificate issuer:       /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial:       019D265F4580E54D53BDBD378E2E702C1E3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
Manifest number:          0DE1
Signing time:             Wed 25 Mar 2026 19:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:11 +0000
Files and hashes:         1: okBlAs2MxKegFun8jqPmx6S71TI.roa (hash: ROgvc03TJnSVXqJkAtutWAdPihx/iJeoNeNlOaYR9fo=)
                          2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: WOaK55SrO3q1TEscqBVXyfpbKMbfnFQmTGHrZXCmrAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:45:80:e5:4d:53:bd:bd:37:8e:2e:70:2c:1e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
        Validity
            Not Before: Mar 25 19:01:11 2026 GMT
            Not After : Mar 26 19:01:11 2026 GMT
        Subject: CN=ed9c55ee35f4eb4e4457383b61401a3124c02feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:82:f2:0e:6a:2e:a5:a2:1a:fa:03:5e:0f:
                    46:13:7a:9c:c3:56:ce:17:9d:ff:7b:71:78:23:ef:
                    27:00:4c:28:81:0e:a4:fc:43:2b:6f:2c:33:d4:fd:
                    39:06:f8:14:b5:99:b1:81:2f:ac:48:9a:cc:06:fd:
                    9c:a2:1e:53:84:d5:db:33:c9:e8:14:63:1e:81:dc:
                    71:1f:da:da:5d:f6:0b:d9:8e:6b:c4:63:90:82:56:
                    6f:c8:d7:8b:f0:13:6c:05:28:a0:47:24:23:2b:ca:
                    85:b7:20:17:a9:22:22:60:2f:8b:51:48:6f:4d:27:
                    4d:43:0e:e7:6f:4a:2e:39:3d:f9:cf:6e:41:15:67:
                    d0:7a:d3:b2:aa:41:72:e3:3b:41:4f:7c:99:03:d2:
                    11:b6:eb:d7:6a:e3:0d:10:cf:cd:59:d6:5e:9f:fd:
                    f7:84:94:0f:1e:26:e8:15:ac:88:34:d2:9e:8a:43:
                    51:f5:23:0a:c0:77:38:fa:6d:0c:91:36:00:10:0c:
                    4e:c1:cd:c7:4e:04:c2:c1:92:a5:58:2e:00:99:83:
                    31:82:43:92:08:b9:a7:0b:0b:8e:22:6a:b9:9d:bb:
                    6b:ed:0b:13:b6:42:db:33:b1:46:c2:b6:16:56:a7:
                    2b:55:80:24:84:13:ee:42:52:bd:32:67:d3:b7:fa:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9C:55:EE:35:F4:EB:4E:44:57:38:3B:61:40:1A:31:24:C0:2F:EB
            X509v3 Authority Key Identifier:
                keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:02:18:ca:3c:3c:49:95:04:98:81:c1:51:37:10:8f:cc:ac:
         11:29:08:b8:71:1b:51:fe:2b:ea:55:a8:51:ee:e2:20:61:6a:
         01:2a:8f:de:3c:40:9d:95:23:62:b0:9d:1c:68:42:40:c0:6f:
         84:1e:ae:8f:f7:9e:4b:4d:f9:32:df:e3:db:0f:17:12:9f:f5:
         bd:23:54:27:6c:fc:ff:d1:38:d1:62:8d:72:c3:a1:4e:b9:14:
         e4:8e:cf:31:ab:a2:5d:dc:84:7b:6c:23:35:0f:52:c1:9f:67:
         35:aa:38:1a:52:19:0a:c4:f6:0b:e9:d0:f4:00:be:6c:70:64:
         bc:6d:68:63:a4:fe:8e:a2:3a:3d:a6:56:2c:db:0f:09:9a:9c:
         dd:8f:86:a1:32:b8:03:75:59:02:06:5b:5d:ac:4a:f4:ea:54:
         ba:29:ba:ef:d1:ea:20:a8:a9:f1:40:5a:e7:4d:a6:9d:cc:ef:
         10:e6:fd:04:62:b1:54:32:78:8c:5e:94:68:c9:8d:98:41:dc:
         bb:29:17:d9:db:b8:14:5d:40:88:e0:d9:d2:25:16:ca:5e:bb:
         ba:f1:39:4a:6f:e3:ed:bc:98:25:82:1f:39:d9:0c:67:c1:06:
         c0:74:93:f4:3a:f3:f6:c3:51:e7:60:01:36:a3:f5:7f:c8:47:
         21:21:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:40 2026 by rpki-client