Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
File:                     qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft (raw, json)
Hash identifier:          6P/q8/ULJ4X/ahstX+PaYgtLy2nuwfhGduFEgSiaNX4=
Subject key identifier:   D5:BF:2D:2A:26:A6:F9:94:E0:91:B6:B9:B4:CB:24:9C:4A:E8:4A:32
Authority key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3
Certificate issuer:       /CN=aa358cc061e36be03a4ed92ad671780f06589be3
Certificate serial:       019D2695F3F3FE5752276D65F25C40853CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
Manifest number:          012C
Signing time:             Wed 25 Mar 2026 20:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:54 +0000
Files and hashes:         1: qhkhDbPLjPfZGzwb2pQpWhREyBA.roa (hash: ClIQH06bbp+6RP85PzycOSnYtQQfejT/0AH06HLWtZo=)
                          2: qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl (hash: c2uCy6rYzf03f2MNs0XdQr1Ru7k0F7qRVhGpRpMU2pU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:f3:f3:fe:57:52:27:6d:65:f2:5c:40:85:3c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa358cc061e36be03a4ed92ad671780f06589be3
        Validity
            Not Before: Mar 25 20:00:54 2026 GMT
            Not After : Mar 26 20:00:54 2026 GMT
        Subject: CN=d5bf2d2a26a6f994e091b6b9b4cb249c4ae84a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:2a:2f:70:4e:d9:fe:4e:78:98:12:55:37:
                    97:1b:e2:5a:60:d4:ef:b1:3c:fb:a5:61:f4:e1:db:
                    6b:15:ed:30:84:a2:c6:73:e7:b2:6f:e2:21:63:83:
                    d5:33:86:76:93:ff:e6:a6:d7:7e:93:82:14:10:ad:
                    9c:a5:76:11:b6:51:3b:7e:82:65:c1:85:72:f0:2c:
                    b6:b3:e9:4b:95:48:e9:a6:d0:98:d2:35:c0:48:ce:
                    58:4a:9c:cb:80:79:11:89:af:b0:3b:60:19:65:96:
                    31:a1:70:fa:93:77:47:f2:4c:a1:d5:d4:af:3d:13:
                    a8:9d:70:22:53:ff:64:60:c5:f8:4a:d6:90:c9:0e:
                    64:fd:58:0c:f4:0b:0b:fa:25:68:85:e2:45:85:5e:
                    45:31:85:30:01:e2:2a:da:af:52:87:02:18:8e:ef:
                    e2:f0:40:d8:84:ea:e6:1b:b5:f1:35:f1:12:52:af:
                    71:77:57:f5:29:20:71:be:b8:21:fd:ab:54:bd:ce:
                    59:89:8b:44:3b:db:7a:6f:e2:34:4d:9b:94:2f:27:
                    79:04:88:70:f3:6c:6e:8a:81:f5:0d:ac:d9:02:76:
                    cf:f0:54:82:2e:d5:e5:31:0a:e4:40:78:66:aa:bb:
                    75:43:ca:ab:bd:20:6e:5d:92:23:2b:0b:c8:79:d3:
                    18:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BF:2D:2A:26:A6:F9:94:E0:91:B6:B9:B4:CB:24:9C:4A:E8:4A:32
            X509v3 Authority Key Identifier:
                keyid:AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:bb:92:56:97:94:54:ef:d7:25:95:e7:b3:3c:d9:42:8a:
         14:f7:71:d7:f0:32:74:11:1f:d2:69:0e:f9:62:a6:91:7e:11:
         80:20:f9:05:25:37:f6:e6:fa:a9:dc:9c:5f:11:75:de:d1:de:
         c7:ab:dd:ea:f1:c5:da:d8:1f:74:0b:df:27:83:60:c9:e3:32:
         14:57:1c:cb:a3:55:5f:05:67:19:10:7a:eb:d6:c5:8c:10:c0:
         6b:d2:92:4e:58:0c:2a:21:fd:9f:1b:25:54:6e:82:ed:01:1a:
         5e:8c:14:9c:75:77:42:4c:83:7c:fb:b3:ab:4e:0d:9f:f4:22:
         49:61:e6:c8:7b:27:9e:de:9a:3f:37:11:fe:1e:17:c9:71:ef:
         e7:cd:82:04:dd:6d:4d:89:82:4d:bf:18:d1:0f:b2:4a:d1:2c:
         93:df:7d:fe:07:2e:db:9d:e7:6c:2b:d3:b6:81:7d:42:09:d4:
         48:5c:fc:2e:13:25:55:fd:ce:a6:c3:bc:fe:f0:6c:71:45:b7:
         5f:b5:42:b5:1b:6e:17:50:5f:a8:57:50:89:60:60:af:50:46:
         c5:0e:e8:d4:3c:e5:1f:cc:b0:d5:94:6a:87:05:36:a2:2a:92:
         c3:3b:ce:df:9f:06:f4:70:9f:e0:b1:79:63:83:cb:3f:e8:ff:
         c3:62:d2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:24 2026 by rpki-client