Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File:                     q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier:          AfmE99QP0XexCefDNv793sKQ4PbL/tGLj5bWunKEDRE=
Subject key identifier:   F5:EF:55:CC:86:88:73:6F:7A:8D:3F:7E:5A:2F:B9:EC:E8:04:11:CC
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer:       /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial:       019D284DD55F0D019E56B8048A8A7FA1780D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number:          18C1
Signing time:             Thu 26 Mar 2026 04:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:22 +0000
Files and hashes:         1: 9AQTjaHWKJCXsC30oHllY8BTYu0.roa (hash: 7fmthrhoa3IJWK083wDCI4y5oXM7TE8HLdralxn1zCQ=)
                          2: D8zt2B-zZXXGmbmFyYrVgX5VlhE.roa (hash: 7mktpizMJp0UVGb90YuRIUsj5vrCk7DRcIeq+0Shwlw=)
                          3: FR0TMzudRUII0Fa6Jf04w_3WI20.roa (hash: AJPhPEVbqaILZMRzPtnEJF9G4HZjyUJiNfN1jrcINf4=)
                          4: buqYzFTyi7wPpzd9BAt1N0qAHXU.roa (hash: 7fssqNhBi5yImjk1Vr2WL9ol/xv6RFd9KhgAwqTB6Mg=)
                          5: cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa (hash: iFLFl7A8YTDlZs6b2ZtDXNK2nv2uM/FdHMVOEy9wgkc=)
                          6: ffozWOJhdYTlZsYd3LUTrpAH84g.roa (hash: LqRzq5DyTPzo0AG3Z9lInY0bhS/P0365y/30CPyVkNM=)
                          7: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: HQ4CKFgAa37fv3KJqKDoAcF2iCDbUMgtF08s4osmzq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:d5:5f:0d:01:9e:56:b8:04:8a:8a:7f:a1:78:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
        Validity
            Not Before: Mar 26 04:01:22 2026 GMT
            Not After : Mar 27 04:01:22 2026 GMT
        Subject: CN=f5ef55cc8688736f7a8d3f7e5a2fb9ece80411cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:3c:bd:02:b2:c9:14:4f:81:33:55:c7:de:
                    af:9f:89:21:a3:5c:2c:34:84:ba:df:31:bb:ca:15:
                    7b:75:8f:f2:76:87:1c:4f:3f:8a:67:38:01:41:4d:
                    58:65:07:0b:9a:16:34:6e:be:6d:34:bc:05:5c:aa:
                    ea:6b:d0:8f:3a:87:68:20:e4:74:08:f7:dc:01:5c:
                    d6:2d:13:b4:9c:e2:ed:bb:f1:f3:d0:d0:c9:3b:dd:
                    55:3e:ae:78:f6:96:03:58:a7:37:2c:02:90:b3:8f:
                    25:60:69:43:a9:e3:64:73:19:39:96:a8:e0:e1:ea:
                    d8:f9:fc:af:f4:3a:fd:c9:f8:29:6a:e0:97:60:52:
                    84:09:d4:78:2e:94:4e:b6:a4:c2:9a:6a:ef:be:e8:
                    56:0f:fb:0e:ba:0f:8f:1a:2e:8f:ed:b5:2b:40:7c:
                    a3:a9:98:e3:28:33:05:c3:b5:3f:91:ec:79:fb:19:
                    ee:93:9d:2c:f6:b7:f6:bf:5a:5c:57:5e:a7:dd:b1:
                    53:8d:cf:b5:5f:ea:7c:b1:08:ad:fb:b5:61:a3:bf:
                    b1:b1:6f:7b:61:28:ac:cd:f9:59:05:43:88:82:8f:
                    b8:ac:f4:50:82:91:9e:42:b6:9c:85:9d:9d:a5:31:
                    36:80:1a:36:2e:09:52:22:0f:0c:2b:43:ca:02:c2:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EF:55:CC:86:88:73:6F:7A:8D:3F:7E:5A:2F:B9:EC:E8:04:11:CC
            X509v3 Authority Key Identifier:
                keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:fc:c6:27:98:f1:75:a3:a8:0d:d9:6b:d6:5f:36:10:06:cc:
         b7:a3:94:6a:9f:07:e2:d1:d9:64:34:00:10:41:50:1d:7c:77:
         e6:1f:a1:ff:03:58:39:cf:98:5e:3a:30:e6:f5:c2:d3:d8:08:
         29:63:8a:1f:90:82:e1:2f:14:3b:4c:a0:32:93:37:27:e4:fe:
         e9:41:5b:68:fa:d4:10:9a:8b:52:0f:cb:be:2e:56:43:16:01:
         58:be:65:45:6c:24:1c:c3:2a:f2:43:c7:35:5f:ae:5c:e6:92:
         29:fd:86:67:95:c6:19:93:14:ab:d4:b4:eb:47:37:a1:16:46:
         99:19:db:a6:89:d9:64:ef:a7:65:1f:7c:6a:97:6b:7a:4d:6d:
         31:1d:bc:d4:35:04:1e:5f:7b:12:dd:4d:2a:12:3c:c0:9f:69:
         0b:af:15:8e:3b:0f:36:18:d6:74:af:ad:92:b7:ab:dd:5e:00:
         f4:e6:03:df:39:61:c3:e6:da:02:cb:3b:8f:cb:11:26:76:d6:
         b4:8f:f9:f3:e8:19:29:84:50:d6:27:00:d9:74:06:af:88:c8:
         44:6e:2e:c2:48:f2:c1:a7:ec:d4:85:e5:cd:ef:0e:2b:99:66:
         ac:50:24:c6:36:cb:c1:47:82:19:b0:f6:62:c6:32:70:f0:d4:
         e6:fe:b5:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTdVfDQGeVrgEiop/oXgNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl
NzYxZmIwHhcNMjYwMzI2MDQwMTIyWhcNMjYwMzI3MDQwMTIyWjAzMTEwLwYDVQQD
EyhmNWVmNTVjYzg2ODg3MzZmN2E4ZDNmN2U1YTJmYjllY2U4MDQxMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHQ8vQKyyRRPgTNVx96vn4kho1ws
NIS63zG7yhV7dY/ydoccTz+KZzgBQU1YZQcLmhY0br5tNLwFXKrqa9CPOodoIOR0
CPfcAVzWLRO0nOLtu/Hz0NDJO91VPq549pYDWKc3LAKQs48lYGlDqeNkcxk5lqjg
4erY+fyv9Dr9yfgpauCXYFKECdR4LpROtqTCmmrvvuhWD/sOug+PGi6P7bUrQHyj
qZjjKDMFw7U/kex5+xnuk50s9rf2v1pcV16n3bFTjc+1X+p8sQit+7Vho7+xsW97
YSiszflZBUOIgo+4rPRQgpGeQrachZ2dpTE2gBo2LglSIg8MK0PKAsLgnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXvVcyGiHNveo0/flovuezoBBHMMB8GA1UdIwQY
MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt
NmZkOTc4OTIwNWJhLzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh
LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvzGJ5jx
daOoDdlr1l82EAbMt6OUap8H4tHZZDQAEEFQHXx35h+h/wNYOc+YXjow5vXC09gI
KWOKH5CC4S8UO0ygMpM3J+T+6UFbaPrUEJqLUg/Lvi5WQxYBWL5lRWwkHMMq8kPH
NV+uXOaSKf2GZ5XGGZMUq9S060c3oRZGmRnbponZZO+nZR98apdrek1tMR281DUE
Hl97Et1NKhI8wJ9pC68VjjsPNhjWdK+tkrer3V4A9OYD3zlhw+baAss7j8sRJnbW
tI/58+gZKYRQ1icA2XQGr4jIRG4uwkjywafs1IXlze8OK5lmrFAkxjbLwUeCGbD2
YsYycPDU5v61WA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:28 2026 by rpki-client