Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File:                     q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier:          RikvzMWClYMnD4OxTn2h8xNGoQ9iHrU918v4PBJN5K4=
Subject key identifier:   AB:6C:09:1D:4A:12:A6:06:66:8B:B7:6A:E6:89:BC:E3:D9:AF:DA:38
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer:       /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial:       019D2AA98BD4754A79AE4FC64B36EB2C6A56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number:          075E
Signing time:             Thu 26 Mar 2026 15:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:47 +0000
Files and hashes:         1: bin4sOPD5OKGfACXCfj3DQEIKBY.roa (hash: VnhSf12ZJGOlUh0T6+7Mdxo6I0H2lB8E2bDRpPDL8BU=)
                          2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: IN+hiNGktGwinP7wKe5iAVmyIXqu4EiOnfkcVcyQDq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:8b:d4:75:4a:79:ae:4f:c6:4b:36:eb:2c:6a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
        Validity
            Not Before: Mar 26 15:00:47 2026 GMT
            Not After : Mar 27 15:00:47 2026 GMT
        Subject: CN=ab6c091d4a12a606668bb76ae689bce3d9afda38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:1f:78:57:e5:c2:3c:9c:10:f2:e8:51:2f:
                    e7:ab:34:d8:bd:f0:a0:c8:da:86:70:ac:50:8a:1e:
                    34:15:7f:04:a0:f2:8a:34:a0:55:97:1f:c2:55:18:
                    aa:24:88:b2:ac:b8:9f:75:7e:61:54:e9:a9:2f:b2:
                    5e:32:52:30:50:bf:90:7d:de:d5:ac:17:64:17:f2:
                    da:72:d7:c3:a3:c9:03:99:41:b4:48:8e:be:1e:cf:
                    30:66:25:d7:9d:c1:3a:0b:bd:0c:42:28:0c:99:33:
                    5e:08:7f:cb:02:71:e6:1d:94:4f:b1:f0:bd:a9:e9:
                    25:b6:c3:26:f3:fa:d9:15:7d:c1:87:2b:6e:92:d0:
                    4e:3c:19:a5:c7:cf:81:c4:82:3a:1c:7a:04:f4:f6:
                    57:b5:4f:74:75:63:17:91:ee:fb:7f:08:b1:0d:19:
                    4a:61:60:d2:06:7c:10:31:b3:ed:e1:36:24:60:27:
                    f6:19:f3:03:27:29:7b:4c:3f:f2:e9:d6:c5:72:64:
                    8f:c7:ef:3c:2f:2d:81:91:49:7f:c1:14:26:00:2f:
                    95:1f:82:a0:45:63:9c:15:56:55:cb:4e:e5:10:cb:
                    3b:9d:42:24:a7:7f:02:81:49:26:08:8a:32:5e:82:
                    3f:e1:0b:65:ca:ec:b1:e2:23:2b:4d:42:f0:3d:45:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6C:09:1D:4A:12:A6:06:66:8B:B7:6A:E6:89:BC:E3:D9:AF:DA:38
            X509v3 Authority Key Identifier:
                keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cb:18:3c:05:43:e4:97:ba:6e:06:52:ba:57:7a:60:36:43:
         3b:e4:47:36:0a:8e:c2:20:30:3e:37:08:9f:bf:a3:55:b8:f4:
         43:d3:b8:fd:5a:76:0f:ce:ba:c9:13:16:f0:ce:de:b9:4a:79:
         6e:8e:e2:54:37:95:52:6e:c4:55:10:cf:12:0a:ab:10:ea:b6:
         df:b5:ef:10:80:b8:de:2a:97:80:40:41:2c:4a:88:f1:72:fa:
         97:bc:ea:35:b8:75:bd:cd:1c:0a:f5:21:6b:29:e2:cd:90:10:
         87:1d:82:de:ef:23:e2:bd:03:a4:8f:cb:5e:e5:3e:20:43:2c:
         f3:fe:11:26:39:59:eb:bf:c4:46:0d:74:50:7a:fb:60:20:f7:
         a4:7c:ea:ec:39:47:01:34:6e:cf:b5:bf:69:c9:17:77:5e:ad:
         36:9a:4f:fb:3c:e2:a0:ab:57:55:60:ce:a2:df:3f:d1:0a:cf:
         32:18:19:68:9d:b7:de:28:6f:b5:95:00:ce:1f:9b:c6:7d:b0:
         3a:22:5e:b6:91:db:93:2c:fb:f8:5d:d8:65:59:c6:3f:c9:53:
         ab:3e:ba:9e:09:2f:ff:d4:62:29:f9:92:ad:ab:51:6b:50:8e:
         18:ac:e7:a5:e7:63:92:96:df:4a:be:4e:cb:65:6c:a5:b1:27:
         6c:dd:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:31 2026 by rpki-client