Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          YIYDwpMTeAPMKL3Kc7dn6x7DCA6V9+zZoNm8i9MoDOg=
Subject key identifier:   10:CA:22:90:D7:D9:F4:A6:46:C2:DD:12:09:7E:65:49:B9:F4:AA:50
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       019D265EDF5393C87CBF99B5E27F3A396CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:44 +0000
Files and hashes:         1: 4zqOo2SM12tzCSyJyEiRJDqyLeE.roa (hash: xhzylJcPJUd2ec6iCX/8IUuxbVDyJDMhXg/eaPmydQk=)
                          2: CpR7zdaWFgeP_a3JunXPR9g-kLM.roa (hash: +G+gW4DG9/VXzfDnCfnSWW4i5dWFOrWQai2m9hvQ4Jo=)
                          3: NcgEquPk4dqA6kZfv1d9WtImU1g.roa (hash: dJAF+c5UKrR5ihGU6h+RnFVtoMxdremp4iO/MCSr3CI=)
                          4: OghForkImI0Jo0zBq3XHOESQXuc.roa (hash: jMJmmzeuAO8dk90vNQKpGRRQiIdwuWD8TX9EqhW2Bbc=)
                          5: _W2M19fEeYWYsJYF-LdRGnP5HT4.roa (hash: Pmvi6OlA3CER/RWwL2L21FShj4gRY6R+MGZg5vLD+/o=)
                          6: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: ohd0Gjn4eZQmy77gAG8Fbe2IKEIWfmMYXRGroUh70H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:df:53:93:c8:7c:bf:99:b5:e2:7f:3a:39:6c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Mar 25 19:00:44 2026 GMT
            Not After : Mar 26 19:00:44 2026 GMT
        Subject: CN=10ca2290d7d9f4a646c2dd12097e6549b9f4aa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:49:03:30:c1:74:a9:92:36:c9:65:5b:21:
                    48:78:ef:d4:22:7d:27:20:24:d0:49:7f:65:d0:38:
                    6b:ea:17:c4:3d:0b:ab:ab:c6:64:3a:ee:0e:2d:a2:
                    af:67:eb:24:96:62:c5:84:06:41:92:7a:40:ce:ac:
                    5a:f5:95:a4:bf:31:8f:98:23:f7:d1:ed:99:70:23:
                    4f:8b:e9:39:da:29:08:f4:e4:13:e4:4d:40:da:54:
                    bd:b3:8b:a4:7d:b5:64:35:e9:83:91:bb:e4:c3:09:
                    51:b6:f4:4e:a9:c7:a6:26:5c:19:5d:88:09:25:12:
                    da:dc:1c:c4:0c:76:6c:ae:14:23:52:d6:fd:63:d2:
                    95:93:4c:b3:61:09:54:75:a2:8f:e1:fa:9d:c6:f9:
                    8c:c3:11:3f:e0:ee:b6:a8:27:c8:e9:1e:d0:97:ff:
                    18:d6:8f:21:e3:12:53:91:89:f3:b8:da:bf:df:a3:
                    fa:7d:29:35:26:45:4c:d6:3a:43:45:b9:0a:98:2b:
                    36:76:7f:f4:3e:56:52:e4:28:a2:da:d4:94:46:79:
                    d8:1f:56:c6:da:d7:87:fa:d1:8c:42:07:7d:e6:27:
                    95:7a:49:7b:f4:24:41:a4:a2:43:f9:ca:39:ff:27:
                    a3:28:01:ad:3e:56:d5:56:5c:c2:18:32:7a:95:b5:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CA:22:90:D7:D9:F4:A6:46:C2:DD:12:09:7E:65:49:B9:F4:AA:50
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:75:57:e2:5e:de:b7:d9:6b:3c:75:d5:f7:5e:95:0e:e3:b4:
         6e:b8:f7:ef:cc:a8:6f:07:ed:ca:0f:02:b5:74:4c:3f:95:ca:
         77:ea:e6:fc:60:06:80:a2:76:2b:7a:d3:04:a7:9d:63:20:65:
         26:52:12:49:e4:11:1a:48:f8:c8:2f:e7:3c:e5:b3:bc:33:1e:
         b0:23:97:11:8d:b5:83:aa:c7:79:44:cb:d2:20:2d:c3:34:b5:
         e0:94:5e:41:45:47:04:ab:c5:51:3a:01:25:7d:0b:b3:87:86:
         65:0c:79:f1:99:02:50:a7:ab:50:31:89:e4:86:42:39:f3:66:
         38:9b:ef:fc:7e:2d:8a:61:c5:80:d8:d1:f8:1b:8c:cf:56:d5:
         6d:d1:79:79:ca:4a:d9:c4:88:a9:da:b0:52:f9:55:b8:80:4a:
         2a:f4:9a:8c:bc:57:79:22:99:a9:81:4f:ea:96:11:06:1a:ca:
         ed:3d:2e:92:16:50:70:59:c4:5f:2f:38:73:70:53:29:dc:5c:
         b6:d8:3e:38:87:ec:14:08:02:cf:83:c2:86:2c:34:9f:61:82:
         fa:fe:e2:96:a5:54:b2:2e:74:72:3c:56:c4:1b:a5:e6:c9:ae:
         23:f3:17:36:15:9e:86:cc:62:05:58:a4:3d:fb:d7:d4:bf:62:
         c1:31:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:13 2026 by rpki-client