Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File:                     qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier:          QKy5xFpQHE0G5Ei7bBddMocKRCql/N654xza+/uXnjQ=
Subject key identifier:   CA:DE:6A:37:D3:3A:5D:FE:75:E8:4E:31:80:4A:F8:F5:24:32:9C:19
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer:       /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial:       019D28F22853CE9F05A3725BC565FDA8DF2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number:          0773
Signing time:             Thu 26 Mar 2026 07:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:51 +0000
Files and hashes:         1: ibn8bNQQz7BgdWQGJtHjkoVEvpE.roa (hash: BoHl0eq6h4PEPopUgDa/zkXPmdyvWksghSbqXzV9YdE=)
                          2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: usnrxDGGb2yInbQ2wJeHZd7keegTtThjytOSP8Ata2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:28:53:ce:9f:05:a3:72:5b:c5:65:fd:a8:df:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
        Validity
            Not Before: Mar 26 07:00:51 2026 GMT
            Not After : Mar 27 07:00:51 2026 GMT
        Subject: CN=cade6a37d33a5dfe75e84e31804af8f524329c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:b3:e1:10:09:5f:de:41:f1:80:03:64:68:
                    09:84:54:92:b9:1f:5b:bb:82:78:3f:2c:db:4f:81:
                    ba:e5:29:73:30:e4:a8:eb:2c:f7:fe:6a:a6:67:5f:
                    ac:2a:48:9c:97:1f:a3:d8:b9:3e:28:f8:a5:f7:7f:
                    6d:79:a8:3b:e7:b0:ea:64:a8:59:3e:37:bf:01:c5:
                    9a:7b:e5:21:13:c9:3a:f4:c4:2c:92:e9:7a:63:5b:
                    43:4c:2b:f1:f5:43:db:4b:c9:28:a6:a7:1f:c7:73:
                    b3:6a:53:e0:1f:1e:42:77:6e:8a:24:43:9f:3d:4d:
                    35:28:58:f1:96:4f:48:86:34:24:8e:6c:af:ca:89:
                    fd:3f:9f:46:f0:b5:d4:b6:ab:88:e5:1c:cf:51:6b:
                    c6:57:46:f3:a7:cc:e7:87:16:37:28:b2:0e:ee:76:
                    16:67:d9:6f:56:76:2c:76:f2:67:43:08:da:5c:55:
                    1b:a7:c9:fa:72:2a:09:ca:73:75:00:5b:e5:72:4c:
                    40:f0:12:3a:92:66:7f:c5:f7:b4:dd:fa:03:9b:b3:
                    84:8b:99:4e:46:0c:cb:0c:73:59:2c:53:dd:2d:88:
                    a1:64:7e:a0:76:b3:9d:23:80:81:14:bb:01:ea:21:
                    d9:5b:bd:78:26:41:78:41:ec:2d:c4:7b:a1:89:dc:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:6A:37:D3:3A:5D:FE:75:E8:4E:31:80:4A:F8:F5:24:32:9C:19
            X509v3 Authority Key Identifier:
                keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c7:62:09:85:bb:a7:42:35:15:09:ec:9a:ea:ae:19:6a:03:
         75:87:d0:61:63:bd:43:e6:da:a4:e0:83:b5:24:b5:47:a5:9c:
         c6:43:d8:90:85:14:a9:2e:99:0d:5d:b7:60:99:fa:e5:81:a3:
         4d:2e:19:3b:29:e5:c8:7a:e9:ed:87:63:31:f9:ce:64:bc:c8:
         32:e5:e0:3b:9b:8c:0f:ee:98:9e:5f:7f:8e:8b:6e:f2:63:01:
         85:e6:5c:59:f3:e7:d8:30:52:d4:3b:a3:85:82:c2:54:5b:61:
         ef:e3:0d:e7:06:c3:6c:39:97:e8:71:30:5b:26:fc:fc:83:0b:
         17:10:1d:86:f6:54:03:d2:2e:f7:f4:99:09:0c:56:ce:39:fc:
         da:e3:a5:c4:cb:0f:20:62:4b:0d:a5:e6:64:9f:ed:b8:ff:1c:
         2b:f8:14:91:fd:e0:e3:f5:a7:2c:70:47:c4:38:0d:08:5d:80:
         91:e0:36:75:c2:de:30:6a:6f:ca:c5:5e:55:23:4b:8b:ab:29:
         1f:ee:25:4e:08:9b:29:ac:d7:bc:fc:50:80:fd:de:09:ea:ae:
         fb:ed:6b:93:54:3e:d8:3b:3d:30:ed:eb:b9:88:dc:32:8f:6f:
         96:7e:15:44:9b:09:01:ac:a0:42:4b:9b:18:f5:8b:3c:70:13:
         7c:86:19:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:05 2026 by rpki-client