Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File:                     qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier:          oghfCE0x2p773dlv9Zij91CKqRhMCZx2P6G6etiEu1Y=
Subject key identifier:   A3:9B:DC:B9:91:E9:FE:1E:23:C1:73:38:1B:FF:CC:C6:69:F4:61:1F
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer:       /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial:       019D3307BCF42C7B0B47D166478E000A7CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number:          110E
Signing time:             Sat 28 Mar 2026 06:00:38 +0000
Manifest this update:     Sat 28 Mar 2026 06:00:38 +0000
Manifest next update:     Sun 29 Mar 2026 06:00:38 +0000
Files and hashes:         1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: BDiIB7aQTfc8hsayLDpFGJ1idrIZtmV+5iXc2GSpcDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:07:bc:f4:2c:7b:0b:47:d1:66:47:8e:00:0a:7c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
        Validity
            Not Before: Mar 28 06:00:38 2026 GMT
            Not After : Mar 29 06:00:38 2026 GMT
        Subject: CN=a39bdcb991e9fe1e23c173381bffccc669f4611f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:fa:bd:a0:54:0d:aa:22:17:4a:10:a9:08:
                    4e:e7:55:b6:fb:41:16:03:4a:69:54:e3:e1:ed:b3:
                    b7:ca:f5:ad:b9:cb:dc:a7:53:29:f4:da:e1:a0:39:
                    76:9e:43:15:f6:6d:21:aa:fd:13:68:0a:d0:83:46:
                    c4:e8:e7:4f:ed:82:63:6e:f0:b8:ed:17:64:49:80:
                    64:fb:cb:4a:87:b5:ab:d5:d3:07:bc:2d:4e:a6:04:
                    4c:38:4a:15:6c:b1:08:6a:20:90:ab:f5:46:90:49:
                    c4:cb:37:c8:a2:33:c8:28:7f:1f:09:81:71:6d:2a:
                    f6:7d:cd:c8:f0:4d:15:7c:5c:4c:84:d8:6d:4a:c1:
                    0e:06:a9:54:2c:b2:a7:d7:d5:73:30:4a:cd:d3:c6:
                    64:94:44:a1:e7:63:6f:e3:21:7f:0b:7b:68:13:8f:
                    b8:af:ab:54:48:d0:b8:e4:0e:14:42:64:91:d2:cd:
                    4d:d2:10:2f:97:81:32:7e:6f:ec:be:43:7c:a3:63:
                    4a:82:64:04:48:eb:e7:67:2f:ce:22:26:f3:bb:be:
                    29:4d:71:5f:e2:6a:ff:72:eb:ca:de:59:04:7c:00:
                    51:7e:b5:92:42:6c:9d:eb:15:83:60:09:7f:ba:06:
                    c6:a4:49:d5:b7:03:7f:50:e4:ea:1d:b8:4d:67:bf:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9B:DC:B9:91:E9:FE:1E:23:C1:73:38:1B:FF:CC:C6:69:F4:61:1F
            X509v3 Authority Key Identifier:
                keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:44:e9:a3:b8:1d:c7:7d:8f:1f:72:84:d1:cc:25:c7:55:fa:
         0a:f7:1a:57:b0:7b:8f:21:a6:a9:30:8a:57:57:39:d1:31:5f:
         dc:45:f4:9e:19:1c:32:ea:17:c4:f7:f6:c8:8d:0b:2b:12:d1:
         f2:04:e4:ba:50:03:7e:44:a1:00:1c:6a:77:d0:f5:6d:e1:f2:
         28:6e:52:5f:b0:f9:88:50:42:0a:21:3f:8a:1a:ae:e6:d6:18:
         04:c7:d9:d9:3f:98:9b:50:bf:87:7f:0b:0c:46:75:21:31:3e:
         0a:65:4a:36:98:56:20:09:43:f5:2f:7c:f0:90:1a:b3:63:7e:
         a3:44:63:0c:14:79:a4:9e:4d:30:a3:02:39:83:eb:07:f4:1e:
         30:cf:7a:8f:46:97:fe:ad:10:13:5d:fc:6f:91:6b:bd:07:0d:
         dc:f9:a4:8c:42:99:b9:7e:5f:ac:a6:f3:e9:49:f2:e4:6a:ad:
         b5:6b:8b:0e:c8:c9:91:b5:a0:e1:d8:77:e3:0d:a1:ac:eb:c4:
         cd:7b:34:c9:10:f8:a5:df:c4:a2:42:36:e1:bd:92:e1:e0:dc:
         bc:df:e1:09:f1:aa:ec:65:7e:63:4f:35:26:2c:3b:88:f1:d3:
         18:cd:b7:20:07:0d:85:7d:33:75:02:56:56:5f:7d:06:f0:3f:
         8c:3e:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:31 2026 by rpki-client