Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          00lUj+u5IK7tbEygl9gIkpioK2ERVKm9qA0tZb/q/Kg=
Subject key identifier:   96:37:98:5A:57:A1:11:8C:C8:26:28:56:08:7E:A1:4F:D9:9D:1A:75
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       019D27DFCC6ACA67C155826853B4F9AE8A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 02:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:11 +0000
Files and hashes:         1: 3ZiFvY-Cgcsn1T3DHXJhNHlrMbM.roa (hash: QMUQaheEQkA0MuEkm4MPIvv4qbnyv2b8MIRuQ/sS3qA=)
                          2: 7o1SWwCM_cXOFE762glcqqrc0g8.roa (hash: sE4Y/ceaKQXMuGNY66ML+K4wpI2dw3LerD1iYOVm02w=)
                          3: B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa (hash: xAVVZn3+u5SiYc0g3K3z0LHTfUSG0q/VqxbfyLSsAU0=)
                          4: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: avrvVXr6orZiud18yHdBtt9DfyYpwOhUXeLCClwUXUs=)
                          5: hE8C31w_RpAXSBqCw_OOMk-JFm8.roa (hash: HNil33scanjIhVtVF2DLJ+3VEH2NbJtgfLv8Zd42M2M=)
                          6: rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa (hash: k3IT1blcLOwKvPoRomK4b+Py9VtjJ31MfrlWEqMTSvE=)
                          7: ysOgSedTzNHk11K4jKIf8bjTvJY.roa (hash: sn0AlxCtP5/CYV/E85JBe+P2cnutzVIoTcXj+Kz8kMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:cc:6a:ca:67:c1:55:82:68:53:b4:f9:ae:8a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Mar 26 02:01:11 2026 GMT
            Not After : Mar 27 02:01:11 2026 GMT
        Subject: CN=9637985a57a1118cc8262856087ea14fd99d1a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:ab:b1:22:e8:c9:66:6d:46:77:8b:4f:f0:
                    8a:79:ae:73:f8:ca:32:b1:ba:c7:7e:02:4b:6b:7b:
                    f0:90:be:32:f9:ce:ba:e6:ff:3d:8d:5d:7d:fc:56:
                    af:97:3e:4e:2a:69:26:bf:b7:2e:b5:0b:4e:ff:cb:
                    0d:a8:24:74:9c:c5:c1:7b:88:e9:66:8a:0f:0b:bc:
                    45:5c:e5:96:38:cf:83:40:55:f9:67:8f:f3:aa:c4:
                    9b:28:b4:7b:09:39:9f:7f:68:95:c0:8d:e5:d6:8a:
                    5a:ff:7c:5d:d1:ff:e8:0f:b5:59:69:14:a7:df:69:
                    d9:e0:b2:c3:85:d0:07:c0:d7:a6:47:9e:0e:1b:c8:
                    83:66:94:0a:ee:9e:f7:be:c9:1e:4d:47:a6:30:be:
                    1d:64:f7:81:8b:1e:70:69:ba:b2:de:14:1d:6e:74:
                    5e:7f:3e:c6:b4:b6:f6:72:3b:f1:68:ea:61:55:08:
                    c2:3b:1e:0c:30:24:4e:77:0b:ae:bf:ac:56:65:c8:
                    de:d9:78:b2:f1:36:49:78:21:c5:81:bb:01:8c:38:
                    e3:7b:25:58:2a:76:b0:ac:cb:f1:4e:0b:3f:d4:dd:
                    31:8f:ec:f9:0c:12:1f:84:13:0d:70:cf:a4:86:dd:
                    31:82:af:c2:ab:ca:b0:ea:74:05:2d:c9:97:3c:6b:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:37:98:5A:57:A1:11:8C:C8:26:28:56:08:7E:A1:4F:D9:9D:1A:75
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1d:1b:73:31:28:6b:37:c1:9b:6c:58:99:0d:85:f4:71:1f:
         29:ec:f0:26:54:af:2c:f0:14:0a:5a:80:18:90:5e:ac:5b:67:
         af:8d:a3:c3:b1:42:03:40:35:55:6e:1c:d8:4c:a8:79:78:3c:
         77:f8:5b:e4:d9:c7:d9:27:c4:1c:b3:09:b8:4d:29:30:85:af:
         c6:a2:45:83:30:be:ec:00:06:0f:16:82:e9:bf:d8:ba:ee:bc:
         60:8a:ec:57:bd:0a:d6:61:90:e4:97:1b:1f:07:04:2a:b8:56:
         cc:4d:56:6a:0a:ef:03:1a:1d:d9:13:b4:f0:eb:e9:82:03:85:
         e3:f2:0d:47:98:62:26:76:0e:f8:37:11:fa:9b:aa:62:12:10:
         05:2d:db:e9:7c:65:ae:9f:38:67:93:28:d6:e3:e9:e1:65:83:
         c3:4c:f7:30:ab:6d:dd:f3:f7:42:21:5a:2e:b3:d7:3a:07:18:
         30:41:54:81:45:05:7a:b6:a7:ce:81:b5:be:57:b3:be:fa:38:
         45:29:38:17:f7:b9:e7:b5:ca:c3:ad:b9:ff:20:8b:68:28:c4:
         a9:27:bf:fc:0a:a0:d3:b1:a1:d6:f2:ca:79:dd:69:e4:87:c1:
         8f:28:65:cf:84:9e:84:b6:51:64:52:07:10:e9:21:d9:84:23:
         99:bc:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:39 2026 by rpki-client