Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File:                     qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier:          CvYp4D0bjeoxDrh2OF/wjcbTKT3GmOhFdbkLDQ/SIMI=
Subject key identifier:   06:0F:B0:45:47:49:E4:96:D6:F6:EC:02:43:AB:92:3D:EF:B7:A7:10
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer:       /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial:       019D262862A7CD85731FB1C0822F0CE040C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number:          13D8
Signing time:             Wed 25 Mar 2026 18:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:13 +0000
Files and hashes:         1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: 4egXg2swZyhpYObihUx6IjNL0nNylF6+cAeulrUo62s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:62:a7:cd:85:73:1f:b1:c0:82:2f:0c:e0:40:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
        Validity
            Not Before: Mar 25 18:01:13 2026 GMT
            Not After : Mar 26 18:01:13 2026 GMT
        Subject: CN=060fb0454749e496d6f6ec0243ab923defb7a710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ff:f4:12:00:3b:a1:f1:2c:8c:a1:0d:73:cb:
                    3f:4d:15:d3:4f:02:07:87:f3:c5:16:45:39:1d:65:
                    c1:b3:1e:88:9c:0e:30:bf:b0:85:1a:78:47:09:ff:
                    bf:e1:af:82:07:2a:45:9e:8c:de:e0:20:96:2e:91:
                    0c:05:2f:2d:54:b8:4a:f3:ba:9a:10:11:21:56:5c:
                    e0:1e:5d:14:57:dd:c0:a6:e5:a0:f8:0d:1e:cc:75:
                    0b:8c:f5:8f:85:18:b8:31:78:9e:0f:65:7d:e5:be:
                    31:ba:85:2b:9a:28:c5:64:34:5f:0a:b6:e4:29:55:
                    61:60:b7:48:21:14:b1:0f:e4:8e:1d:d6:ed:0f:8a:
                    0e:84:c2:dd:b1:76:b2:0e:20:c5:cf:29:3f:9d:cd:
                    f3:6b:5b:78:74:1a:55:57:0c:0f:e9:88:eb:74:15:
                    ae:0f:2c:71:7a:62:49:53:e3:72:b9:bf:ca:35:89:
                    83:94:20:3d:28:31:13:3d:5e:ae:ba:30:01:35:2a:
                    2e:70:45:7e:5d:1b:56:dd:53:e6:c9:b3:c5:ad:a1:
                    31:69:b3:f9:1e:35:d2:90:fc:b7:44:12:cd:ce:41:
                    ed:bf:8f:cf:34:13:ea:34:b4:12:18:57:0a:ba:16:
                    26:06:b3:38:88:37:38:ad:ee:db:8c:b1:08:66:ce:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:B0:45:47:49:E4:96:D6:F6:EC:02:43:AB:92:3D:EF:B7:A7:10
            X509v3 Authority Key Identifier:
                keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8c:16:50:36:24:7d:db:88:40:72:4f:ca:60:63:ab:12:40:
         d6:7f:a9:22:84:37:4c:ca:fb:6b:cb:5d:33:e5:b4:e0:4d:ab:
         5f:37:8d:8c:ac:02:2d:49:b2:e8:70:d8:d2:85:93:21:52:ad:
         ab:a4:22:de:ba:a9:81:6c:e3:0d:56:84:42:d2:27:41:1c:e7:
         a1:ee:fc:de:c2:e3:a9:f7:0a:ce:60:c5:8e:ec:29:2d:4c:98:
         b0:d8:3d:3e:d1:6e:a6:0e:ea:21:84:86:de:f8:5a:68:2b:12:
         db:8d:92:55:63:b3:49:1f:aa:dd:93:22:47:54:1d:9c:4a:63:
         b8:a5:c4:05:9e:2f:b3:e1:66:2e:77:fe:14:7d:f8:10:b6:31:
         ac:b8:68:0d:4c:a7:20:40:e0:c1:17:33:5c:40:d7:57:9f:97:
         a6:c6:e8:78:30:67:28:bd:d6:fe:5d:15:ad:ad:f6:b9:35:cf:
         35:46:2d:6a:a9:87:d9:c6:eb:cc:6f:c2:83:76:e9:a2:10:c7:
         4f:ce:5d:f1:60:c7:85:4e:25:4e:b4:b4:42:94:dd:7e:89:bb:
         1c:30:db:22:45:b9:4b:87:f2:18:f2:0e:f5:e8:7d:6f:9b:08:
         8b:be:25:4a:52:e5:46:21:06:0f:54:07:6e:f0:43:cb:a2:95:
         46:31:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:52 2026 by rpki-client