Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
File:                     qqthEeAEwqBE8Wi40oJzz2dE86g.mft (raw, json)
Hash identifier:          uzdELENxLjCE/QOAOjWxtSpc87DvIWQ8GiFEW5d3TYU=
Subject key identifier:   D4:1E:EC:97:3D:C0:E6:0E:40:BD:21:1A:FF:E1:6D:0A:82:79:F9:BE
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Certificate issuer:       /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial:       019D26CD613CF250F0A1F6982700AAC02908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 21:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:27 +0000
Files and hashes:         1: 8AxYPUz9pvHelVo8wz2I9i9BNIA.roa (hash: utEz7HUdFnE3+cBxmQiomb42lkLTImzDLbYZMEDfv3U=)
                          2: 9aLc8spuhknepdIuXl9_G-7lgCo.roa (hash: c9hPYKhcAXRzZ0I45eLxMe1++ngSF8swg1cOGJyVE0A=)
                          3: B9Wd9EbM_iKJ8YfmPHlKXfnX71Y.roa (hash: IOwv2q5Yeh5JDUzx2NO+HAB/8+fTRVQ8TgVVOngqzZ4=)
                          4: LKXy-UiiwJTm9i-RPVj4M4X3jaQ.roa (hash: 4COeScrO5G+pH7nKA4NnbTjope4Fy5I6kyVaqtY/stg=)
                          5: i_OPbLZjNGN-ng4eZFgq10xKI3A.roa (hash: 2cnUyItzsSqni18M5wS3dShPIxCduQXQO/+heYm5xcI=)
                          6: qqthEeAEwqBE8Wi40oJzz2dE86g.crl (hash: DMJf1x45HTx7W8Se6vjcEWf6mlM166JaR7tVPsexkKs=)
                          7: t4ElfnENcIC_okPPyJa4ZzN81yQ.roa (hash: PzQD5S/AHK7SK7ouVXpLNAicfo5T5PWIFC9Ztw/en60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:61:3c:f2:50:f0:a1:f6:98:27:00:aa:c0:29:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
        Validity
            Not Before: Mar 25 21:01:27 2026 GMT
            Not After : Mar 26 21:01:27 2026 GMT
        Subject: CN=d41eec973dc0e60e40bd211affe16d0a8279f9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:34:e0:13:62:85:ec:1c:b9:53:4e:ba:98:
                    0c:5d:10:de:ea:48:76:d1:b0:e4:cd:6e:07:b0:2d:
                    a1:90:d0:50:c8:8b:59:15:3e:30:f4:72:79:50:1c:
                    96:8b:dc:07:14:07:f3:38:2b:31:4b:72:d9:57:40:
                    d5:2e:bc:7a:20:7b:fd:96:d1:8e:16:47:82:56:23:
                    af:cf:7f:01:32:44:07:e7:7e:32:3e:58:9f:9c:b3:
                    69:2d:af:89:35:54:15:25:46:2a:01:d8:b4:09:4a:
                    55:84:a6:44:54:8b:36:c9:c0:21:77:78:9e:77:bc:
                    75:4f:df:89:01:5a:b6:91:e4:50:ad:bb:bf:c2:06:
                    f7:af:95:86:e5:0d:10:34:13:30:6e:e5:34:d4:9e:
                    b7:50:31:59:a2:17:cb:a2:d2:77:db:8e:b7:88:a3:
                    bb:e3:cf:40:dc:b4:30:48:87:78:27:38:7b:d8:4c:
                    40:03:1f:72:62:10:08:f8:1c:cf:fb:73:72:79:c6:
                    7b:60:97:6d:6e:10:91:43:c4:b8:57:e5:b9:8c:67:
                    d5:a2:2b:f6:42:41:f1:70:a3:f0:d4:a2:4a:3d:b1:
                    e5:92:75:3d:5e:83:2f:16:50:ed:60:b7:31:fe:bd:
                    99:a6:bd:b3:e1:4b:b6:bb:fb:83:32:77:99:9b:df:
                    34:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1E:EC:97:3D:C0:E6:0E:40:BD:21:1A:FF:E1:6D:0A:82:79:F9:BE
            X509v3 Authority Key Identifier:
                keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:11:50:6e:61:f4:b8:0b:d6:64:c3:30:38:97:e1:24:a1:
         09:c0:64:d4:28:63:ab:db:68:c3:50:dd:d3:56:15:5c:80:c5:
         83:19:b7:98:e4:a3:b3:0b:78:8d:a9:b3:e9:51:59:2f:c0:2a:
         00:53:50:d3:9c:c7:9c:c2:58:19:cf:be:8c:c7:cd:1d:af:e1:
         86:11:bf:8c:9a:26:ed:57:a0:e2:e5:5c:39:1b:38:eb:b0:39:
         b8:57:8f:9d:45:b7:44:4e:ea:cd:c3:62:02:cf:65:27:89:fe:
         7b:0b:52:f0:50:96:fb:cf:48:80:88:85:88:e1:69:24:e6:2d:
         17:6a:ce:d1:51:90:98:53:8b:a7:25:f6:9f:2f:2b:53:d6:c9:
         d9:1f:24:e9:d2:9f:82:0f:a1:1f:8b:66:59:6a:86:12:17:e6:
         70:b2:bd:2c:99:19:be:f4:5e:b0:c9:c5:a7:bd:5f:1e:3c:d7:
         56:c8:4b:78:97:ac:31:8e:fd:5e:27:cc:4a:6b:bb:46:a2:57:
         f6:0e:d6:3d:4e:86:14:f0:0d:95:84:09:b0:04:37:af:29:25:
         75:13:b4:8f:d3:1e:af:69:ef:08:9c:25:3c:7d:33:3e:e4:53:
         ae:c5:5f:64:0c:f2:e0:e7:37:39:e7:db:d0:a2:2b:4a:3d:7d:
         18:c3:51:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:46 2026 by rpki-client