Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          ut5Q0pXFZMTyzNvM+UAHnOM/2XJma4QmmEyXeMrbkzo=
Subject key identifier:   64:0A:F0:D3:00:F2:EC:6A:88:56:DD:01:90:49:0F:29:15:60:FE:4D
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       019D25F106CEF508608FFCB795C621DC5D5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          18B7
Signing time:             Wed 25 Mar 2026 17:00:46 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:46 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:46 +0000
Files and hashes:         1: A7_y22PIg0hPAMpCsH_sCKGtyg8.roa (hash: jYk6V/JIFZujPYouL6dTCjVEwQr4OkGYQk0D5ScRZVo=)
                          2: Ksd3OiB_AIxcmUtGOKUPQuXbBbs.roa (hash: mbt2rFbow8jwUY5FOtfvQrtCibBO+H5M+VNJrWE5hUY=)
                          3: bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa (hash: BubMw86WqvaBOSfoNUBrIVcL+fL5Ns64cLxY/APuJ7E=)
                          4: f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa (hash: PDGWp7iUzyz4cXF2Z4OAk/knVLv4u1kvbR76Ezmz3vs=)
                          5: j4Ert-J3RYXgEKpLcLx5_T9dxS8.roa (hash: keE/Qns0D+PUwgQtZ9LOIqamoxuah8ZLWQxn+5RiOWw=)
                          6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: rzKtjiPoE1GIc/It1YqAxawfHUcx4u2T37/Wa18GtG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:06:ce:f5:08:60:8f:fc:b7:95:c6:21:dc:5d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Mar 25 17:00:46 2026 GMT
            Not After : Mar 26 17:00:46 2026 GMT
        Subject: CN=640af0d300f2ec6a8856dd0190490f291560fe4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:41:6c:92:3f:04:ed:79:b2:b1:46:27:63:
                    32:ff:ef:a2:c5:80:86:95:78:f0:1a:5b:87:a3:98:
                    34:f9:0f:68:2f:b5:d7:ec:f5:e3:be:4f:e0:73:b7:
                    6b:20:63:d6:4c:14:4a:59:2a:f6:d3:46:0a:7a:f6:
                    24:ee:a8:bb:00:5a:3a:d8:c8:2f:ac:ff:3c:6e:f6:
                    77:4d:cb:27:3b:b4:76:de:be:af:15:a7:47:eb:3b:
                    b9:38:d6:5e:ed:e0:8e:b5:6e:bc:ab:a6:f6:42:55:
                    d7:0f:2a:59:f5:c9:9f:91:33:14:bb:03:95:e4:0c:
                    3d:be:0c:04:24:49:6b:2d:33:bf:0d:04:05:26:da:
                    e9:f5:31:2d:c4:3d:48:de:4a:0e:74:18:ba:85:f8:
                    63:8f:46:be:c4:4a:4d:a3:05:97:aa:b9:fd:a1:65:
                    d9:23:43:b2:27:8f:82:8f:ed:72:20:ac:5c:c3:48:
                    ff:70:8f:3f:90:85:20:ac:50:ee:50:98:94:df:9d:
                    60:5a:ef:b3:79:49:51:b8:41:f5:fa:f0:4e:7f:76:
                    5c:8a:fc:f8:4a:2a:d7:13:1a:d9:cf:60:8f:4a:f5:
                    32:8a:24:c8:82:7f:20:58:a5:22:7b:72:12:7d:e6:
                    26:65:70:23:73:7a:a5:c2:89:1d:a3:6e:66:10:c6:
                    2e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0A:F0:D3:00:F2:EC:6A:88:56:DD:01:90:49:0F:29:15:60:FE:4D
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d3:e0:0f:d2:6f:48:53:79:6f:d2:2b:ea:d7:7a:a3:b1:18:
         3d:f6:29:19:19:05:58:af:79:6b:2c:99:73:73:de:6c:5a:c1:
         e2:7b:11:d0:c0:a3:a7:4b:61:36:b4:44:8f:df:5f:07:df:55:
         00:3f:95:e0:df:08:e4:ce:35:2e:7f:3b:fa:f2:56:3b:b4:e2:
         a4:1c:db:ea:fc:28:60:18:be:ce:6d:52:8e:98:b6:51:8c:a8:
         e8:08:88:c3:0e:37:e1:46:8c:54:80:c8:c7:59:c2:ad:cd:1b:
         72:94:75:aa:73:ea:fd:6a:36:18:53:58:62:f5:b8:f6:4f:02:
         0c:e2:49:8f:ee:dc:38:0d:71:c0:14:87:d1:f1:7f:ea:90:a9:
         cc:a7:67:e2:42:ed:e7:4d:4f:dd:48:2a:f9:0f:81:64:f2:34:
         2a:7b:8a:de:ff:45:36:3d:e0:3a:8b:6f:bc:3a:b9:2c:cd:ae:
         db:87:11:7f:bb:bf:49:66:68:fb:84:ff:ce:8b:0e:67:ed:0a:
         51:6e:87:dc:6f:d6:a4:bf:7b:a5:3f:dd:ad:a1:3c:42:65:25:
         85:72:28:47:64:11:ae:72:15:56:cb:07:a7:41:af:30:c7:b4:
         6a:46:59:67:77:0e:ce:ae:70:71:2e:8f:73:d0:60:0f:63:27:
         b6:e4:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:09 2026 by rpki-client