Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          k4w6WAQ1oBAK9lPFwARy4L5kAa86436QAvd9WE2h0l4=
Subject key identifier:   76:1E:8B:4A:BB:0E:10:EB:B7:7F:9F:1C:62:26:5B:5A:3C:74:75:4E
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       019D2627FEA4E1676D785A1B5E22A6CF04AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0F41
Signing time:             Wed 25 Mar 2026 18:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:48 +0000
Files and hashes:         1: Nl-NwJXgg_mKvSjTnftPWLYBToY.roa (hash: UM5uAdr1m30XVEMiULWnarxQCPhDPuMKS+lBMXBG4Ls=)
                          2: Rohs0EQIAoIUkwGS6XtjnDouO8g.roa (hash: EcZk5ZFiNKSus0TYnUyIuUuGvRBAlAnVxdbmm6ttv7A=)
                          3: ihu7RSF9d_o474O74_XHNiBLq8Y.roa (hash: zWFbywvFotfCwUcEIQ2DvsebZNFghPy/L/dQzBScQnk=)
                          4: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: wwM/Fjtnyie1fwCCBmYseFZAjHBDZBM0fpsv7YSxr48=)
                          5: yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa (hash: bp0xhjE5IUPvG68ZkNNK1uC8wEizknIYbPwTcDbU+cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:27:fe:a4:e1:67:6d:78:5a:1b:5e:22:a6:cf:04:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Mar 25 18:00:48 2026 GMT
            Not After : Mar 26 18:00:48 2026 GMT
        Subject: CN=761e8b4abb0e10ebb77f9f1c62265b5a3c74754e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:41:cf:7c:b2:88:3b:c6:2d:16:7c:8f:7d:
                    2c:fe:27:f2:5c:b7:d7:45:14:8a:55:8e:1f:36:f0:
                    36:15:5d:96:2b:4d:a2:f2:47:30:0d:46:22:43:4f:
                    03:f0:cd:f3:5f:bd:85:73:65:fb:32:9f:dd:9a:e6:
                    5c:38:28:cc:1e:3e:bb:56:98:24:77:4e:81:5d:ce:
                    5a:dc:a4:63:b5:6c:12:a1:5c:c1:38:07:3f:5d:80:
                    2f:21:20:2b:5f:2a:98:67:ca:43:33:df:a5:71:13:
                    ef:5e:8d:1a:c8:6c:2b:b7:9f:06:24:58:f7:7c:5b:
                    08:68:a8:18:37:be:4e:03:1b:8d:74:2e:d9:b8:f2:
                    54:f1:24:8d:37:c8:82:76:82:8b:c4:df:b1:53:96:
                    58:67:b8:d8:46:2b:c5:7b:af:49:27:3a:05:50:8a:
                    49:36:f2:ed:c8:f6:0c:88:63:99:54:20:73:86:6f:
                    f8:a4:80:db:72:51:f5:25:11:a8:99:e5:b5:88:c9:
                    d1:23:ed:d4:4b:69:18:e6:86:05:ee:8d:eb:f0:76:
                    a8:15:c9:2b:0c:c9:9b:ee:69:58:6a:58:a8:dd:97:
                    d0:0c:50:1c:28:8e:c1:38:92:9b:79:23:f2:33:10:
                    b6:ac:3e:f4:34:b0:4b:cc:13:45:c9:9e:7e:68:4d:
                    4c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1E:8B:4A:BB:0E:10:EB:B7:7F:9F:1C:62:26:5B:5A:3C:74:75:4E
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:0f:33:17:0b:e7:8f:7f:da:02:1c:05:56:9c:2d:7c:4e:
         62:4e:b3:54:7a:f4:22:64:1c:de:47:18:54:db:d1:58:85:da:
         67:5f:53:de:7b:7a:4f:58:3d:6b:bb:ba:ba:a1:dd:e5:3d:dd:
         7b:1f:c0:cb:53:34:5c:dd:39:5b:a2:97:b2:2f:2a:86:b5:62:
         de:c0:28:4c:47:2f:55:67:89:95:b6:f3:ee:97:f1:95:fd:4e:
         55:39:b7:ae:a8:4f:4a:5d:67:6c:5e:47:85:9c:90:bd:22:da:
         87:65:a1:2a:c9:d7:94:2e:6d:9f:8f:1f:85:ea:5f:88:3b:b5:
         92:e8:16:aa:d3:b2:99:60:73:57:b4:59:8b:6b:a6:a9:5f:7f:
         6c:6e:cd:f8:fb:3d:ea:15:77:37:ab:d9:67:b0:68:98:1b:29:
         ca:54:74:b4:ed:40:cf:d2:6e:83:83:21:b2:a1:3f:e8:d5:de:
         6c:c4:73:ec:b8:8e:1a:96:7a:df:fa:a5:a8:1f:b4:e7:cb:25:
         1c:41:06:aa:36:56:d9:24:b8:1a:b6:41:81:1b:7e:39:76:82:
         4a:d6:ea:7e:b4:0e:a5:e2:24:d0:cb:c8:60:ea:34:0f:61:db:
         31:e2:1d:72:93:4a:b8:54:3f:35:32:14:fb:1c:1b:d0:15:10:
         0f:9c:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:44:47 2026 by rpki-client