Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File:                     QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier:          MM+QTFvLMkezaJsLF6Mo7vB0MZ8PI/uVgHriU15e1tI=
Subject key identifier:   46:9F:FE:37:D1:5C:0A:8E:66:84:CD:C9:BD:5D:9F:20:6F:F4:5F:CA
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer:       /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial:       019D28F2BD410772C99E0652F047BEC8DF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number:          0C73
Signing time:             Thu 26 Mar 2026 07:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:29 +0000
Files and hashes:         1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: uHFG0XllBaLqxsHSVwZ29GhGNwrc0fSpAMDFOhYPRYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:bd:41:07:72:c9:9e:06:52:f0:47:be:c8:df:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
        Validity
            Not Before: Mar 26 07:01:29 2026 GMT
            Not After : Mar 27 07:01:29 2026 GMT
        Subject: CN=469ffe37d15c0a8e6684cdc9bd5d9f206ff45fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:a8:61:ba:16:a5:ac:98:aa:d9:c8:2d:e8:
                    a5:e4:ee:ab:0b:7f:c3:8c:cf:da:3f:44:5f:68:de:
                    a0:88:8b:4f:0a:ef:ad:7c:56:f1:91:a3:55:5d:69:
                    0b:8b:6c:68:c8:82:c5:c3:66:69:30:3e:99:73:69:
                    6d:76:e0:4d:9c:b6:23:56:9d:a8:f2:c8:9e:4c:d1:
                    0e:41:39:31:8e:e9:71:c0:64:8f:68:2b:74:07:11:
                    dc:e8:5b:dd:b0:1c:d2:18:1f:0a:06:5a:9b:44:85:
                    ab:6e:97:bf:68:5d:65:71:6e:01:f2:06:dd:d1:cc:
                    8f:63:32:ef:97:b0:08:40:18:c7:ef:9a:c0:e1:37:
                    ac:79:03:93:7d:88:bf:b2:d2:30:f5:36:9f:ff:61:
                    45:16:15:49:0a:fd:be:54:67:17:ba:68:0a:81:a4:
                    50:45:06:e8:8a:c7:b5:6d:74:67:0a:7e:66:ad:01:
                    68:78:4e:c8:46:3e:c6:95:2c:40:60:8c:2f:0c:62:
                    2c:78:bb:99:59:4a:76:a5:38:4f:63:73:bc:07:20:
                    95:f4:a2:97:5f:49:b4:5c:a5:14:63:fa:3c:fc:9e:
                    5f:81:73:fd:40:6f:51:78:f0:9c:97:d6:1a:c2:c5:
                    2e:8c:1c:ee:91:32:0c:e9:bf:af:bb:4a:ea:5a:78:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9F:FE:37:D1:5C:0A:8E:66:84:CD:C9:BD:5D:9F:20:6F:F4:5F:CA
            X509v3 Authority Key Identifier:
                keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ec:32:e9:c3:46:5d:a2:30:c9:62:59:d7:a3:b8:31:4b:7f:
         cf:7a:02:23:a7:3a:05:3f:7d:64:8a:f9:c5:9c:e5:83:c8:8f:
         ac:62:64:cf:e0:a1:6b:79:a6:25:f4:de:4e:bc:fa:99:e8:8b:
         1a:6d:8d:4a:3f:a4:21:13:42:30:46:71:b5:c3:90:85:a3:0d:
         23:5b:d6:12:49:c7:69:0f:6c:d4:a4:ea:10:96:09:7f:fd:c9:
         1e:7d:0e:94:c1:2a:87:b8:09:62:53:13:e8:f8:0e:9f:93:89:
         81:21:65:ae:ee:d5:91:58:a2:b8:a8:e3:f5:bf:ca:6b:48:3a:
         a5:3b:3f:90:84:ff:18:31:57:82:09:04:50:1c:27:f9:c5:2c:
         56:7d:fa:4b:3a:ea:d7:e2:23:ca:cf:55:d7:70:94:e4:ce:25:
         5a:6a:c8:cf:3a:d8:66:75:a9:cb:6a:bc:7b:e8:cc:7b:ea:ce:
         1a:90:95:e7:a1:83:93:54:2a:8d:4b:81:e6:dc:ad:20:ab:99:
         39:84:27:01:d9:dc:6f:56:98:25:db:d8:7e:8f:6d:f7:d5:71:
         8e:b0:15:2a:b1:36:2c:11:45:32:fd:3a:be:72:fa:c6:df:83:
         6d:ef:0f:b4:82:34:45:44:53:dc:86:80:d0:18:40:d0:4d:5a:
         ce:d0:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:39:40 2026 by rpki-client