Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File:                     sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier:          MgEohPSmz3LriZmiSSEn5drIHwAPEYGDjHW4UUZpsMU=
Subject key identifier:   4B:2A:CC:36:B1:CE:64:41:DA:B2:FD:A5:5F:39:D5:E4:22:28:02:05
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer:       /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial:       019D265FE14467B3505498D37F5F736A28BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number:          0439
Signing time:             Wed 25 Mar 2026 19:01:50 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:50 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:50 +0000
Files and hashes:         1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: Bh3xWXENk7WXEARWrxsNmD+AG2ig7Mfhe3/ZPlcaMXE=)
                          2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:e1:44:67:b3:50:54:98:d3:7f:5f:73:6a:28:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
        Validity
            Not Before: Mar 25 19:01:50 2026 GMT
            Not After : Mar 26 19:01:50 2026 GMT
        Subject: CN=4b2acc36b1ce6441dab2fda55f39d5e422280205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:b8:ce:01:fb:e8:f0:64:70:a3:4e:c4:c0:
                    e6:53:b2:61:5e:37:81:46:dc:45:a4:a7:12:59:2a:
                    b1:d0:de:58:03:4e:0b:1a:d5:b4:5c:a3:45:7a:64:
                    39:68:b4:85:6c:5b:3e:fa:4f:53:80:3d:27:d2:df:
                    78:d6:21:1f:da:13:b8:88:94:cb:24:a7:1e:f3:f5:
                    0b:b4:65:d5:78:7c:32:46:b2:ec:a9:d4:ec:e7:7e:
                    7b:e8:a1:d0:86:ea:36:fa:6e:8c:08:6d:65:d3:e0:
                    34:25:3d:0f:04:70:9b:74:04:da:00:ca:e4:74:18:
                    f5:88:4e:cb:9b:bb:58:91:75:3e:b3:3c:f2:4d:00:
                    69:d9:fd:38:94:b6:99:98:77:c4:5c:f3:bb:53:39:
                    ce:d2:5b:34:8b:aa:bb:ff:bd:ed:31:62:91:b4:b9:
                    dc:a9:7a:4e:26:cd:ee:bb:bf:2f:68:0b:83:33:e0:
                    9a:df:c2:34:78:03:e4:f7:4e:70:f7:7b:2e:95:70:
                    a3:1d:e8:d0:a1:91:93:b5:02:df:76:43:ee:6c:89:
                    b9:94:12:5e:f8:bd:ed:8e:f6:9e:4e:81:55:31:c5:
                    5e:94:4b:d7:93:97:9b:3f:23:ea:98:2f:19:0f:ce:
                    3b:99:54:c8:d1:47:1e:b1:34:ac:e4:cd:54:0b:01:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2A:CC:36:B1:CE:64:41:DA:B2:FD:A5:5F:39:D5:E4:22:28:02:05
            X509v3 Authority Key Identifier:
                keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:01:06:da:9d:34:5f:c2:4e:37:83:36:6c:0b:25:e0:c2:
         51:74:19:13:03:9b:bd:51:47:01:7f:10:5b:45:50:de:ad:01:
         e6:08:3b:43:c7:2c:fe:12:b6:c5:7c:1c:7c:a0:71:72:3e:8e:
         1a:d9:8b:a8:a3:cf:55:a0:b1:29:8a:be:93:26:a0:f4:43:9d:
         ce:4e:2e:32:40:89:92:da:0e:90:0c:91:5d:38:73:84:2d:67:
         eb:3c:32:ff:f4:11:27:5e:32:63:8b:60:07:12:bf:61:c9:c3:
         8e:9b:27:13:34:00:6c:d5:57:22:5a:ba:f4:c2:19:71:0b:fb:
         ba:63:55:b0:b4:69:1f:b0:61:dd:e5:2c:57:a4:36:9f:52:e5:
         67:c5:b3:be:ee:a6:d3:a5:e1:c6:ff:a7:0a:8f:b7:2a:c1:dd:
         7f:e1:df:a0:53:8e:5e:1d:f7:81:fd:23:6e:86:e1:27:91:7e:
         e8:f6:51:43:01:89:63:f0:17:ad:0f:5c:10:b5:5b:86:7d:a8:
         75:d4:33:06:fc:7b:38:1f:e2:7f:83:1d:08:3c:d3:c5:ad:4b:
         52:1a:a8:02:c7:1b:c9:b7:1e:6c:9a:c1:cf:8e:8e:ee:e0:40:
         5f:e8:2e:bc:40:21:59:42:11:0a:4f:8d:cd:b9:99:39:5a:74:
         1f:ec:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:42 2026 by rpki-client