Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File:                     QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier:          J27oSJjtdyoEqDDdYgOFEm7oNqlnMmECKsNdohxqL7c=
Subject key identifier:   8A:B1:93:69:24:BD:46:A6:33:F7:F8:C1:A1:05:32:A3:61:6C:56:5B
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer:       /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial:       019D2B858B760555854EEEC21C7AE8643F71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number:          135E
Signing time:             Thu 26 Mar 2026 19:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 19:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 19:01:05 +0000
Files and hashes:         1: LaPWaYnRdzPOHVggeMAoRuWpL4k.roa (hash: CbyTkBWUaIRYJheYloFSm5P53K+AiwdJChkgXRTNeqo=)
                          2: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: DC+oq3NsjDiYf5v545z2BnEYq6Mk5PBU6N6EvSSgUO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:85:8b:76:05:55:85:4e:ee:c2:1c:7a:e8:64:3f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Validity
            Not Before: Mar 26 19:01:05 2026 GMT
            Not After : Mar 27 19:01:05 2026 GMT
        Subject: CN=8ab1936924bd46a633f7f8c1a10532a3616c565b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:c4:ec:8b:7b:28:fb:38:66:84:85:c4:f1:
                    60:75:28:48:ba:d4:41:24:cf:26:14:bb:eb:52:39:
                    d6:04:cb:59:ab:f3:a7:0c:31:5d:85:f6:53:c9:cf:
                    0f:c0:9b:3a:09:27:21:5a:b7:f4:50:25:af:d7:be:
                    5e:44:0f:a0:52:aa:b3:ba:16:b2:33:69:da:fd:dd:
                    da:84:7a:6e:11:5f:b2:66:f2:ed:d7:d7:2c:98:d5:
                    75:ca:8e:ec:95:f5:5a:8e:22:93:35:6f:3e:2d:c8:
                    8d:98:87:55:f4:61:6b:86:d7:64:6e:fc:a9:f0:f1:
                    c1:6c:a9:58:d6:d6:aa:10:c2:50:81:9a:05:86:dc:
                    23:cb:b4:cf:41:21:1d:1c:aa:5a:b9:22:9e:90:4b:
                    04:0a:87:e5:60:03:fe:c7:d7:05:3a:46:3f:f2:d2:
                    82:6d:30:ba:28:64:ba:98:f1:77:d9:64:c5:53:24:
                    5c:7c:66:ec:3f:14:03:d9:16:f0:9b:04:60:c4:44:
                    8f:0f:07:62:e9:3b:99:17:89:7c:c4:6e:1c:dd:23:
                    86:ee:7a:bb:6f:f4:52:2c:d8:6c:14:4d:87:75:60:
                    a2:99:16:3e:95:59:29:55:d2:58:61:bb:38:4a:19:
                    8f:47:bf:f5:85:4d:2f:6b:3c:de:3f:7b:2e:54:ac:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B1:93:69:24:BD:46:A6:33:F7:F8:C1:A1:05:32:A3:61:6C:56:5B
            X509v3 Authority Key Identifier:
                keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4a:92:bb:85:fa:51:b9:e8:78:c7:db:58:8c:9e:23:3c:12:
         bc:78:fa:25:ee:c6:b1:18:ce:49:09:4b:a0:39:8c:7f:67:cb:
         81:34:7a:f1:f3:79:2d:42:f7:7c:da:ee:3a:e8:c5:25:59:22:
         63:3c:f3:8c:f8:0b:07:a9:6e:5f:ae:ae:c2:ce:bb:9b:1c:58:
         2b:3b:fb:b6:c0:0c:d5:a4:fa:ce:c6:17:22:dc:f1:7d:6c:14:
         dc:1b:57:72:ec:92:7f:cd:d3:9b:5e:2b:5c:b4:74:bd:47:e2:
         11:61:29:09:78:f0:53:c3:54:c1:9d:74:51:57:3f:d9:5e:60:
         e3:51:75:fa:e3:33:9b:b5:c5:67:39:50:59:4b:fe:7e:3e:a5:
         fc:b7:fb:61:78:a4:c9:7e:e0:9f:c0:2f:9a:cd:4d:74:93:02:
         11:b8:47:b6:48:d2:fc:b0:9d:41:4a:fa:2c:ca:41:b5:55:1b:
         8e:31:a4:83:ef:b5:4c:7f:8d:03:f9:ce:f2:38:57:78:14:70:
         92:32:a9:7d:0b:7c:2d:03:48:71:e6:85:9a:87:1b:79:b4:14:
         2e:c9:5a:48:20:3e:06:4f:5c:ff:a4:dc:05:4f:15:30:1b:02:
         c2:d8:8f:33:14:5d:ea:4d:ed:fe:bb:83:16:38:d2:90:9d:76:
         5c:7d:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:05:57 2026 by rpki-client