Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
File:                     q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft (raw, json)
Hash identifier:          8xbePuZu7TVc4fnj4yUjgIOklh7/wEXNicghrGlsC+I=
Subject key identifier:   85:6E:D2:12:0F:84:76:CA:90:87:DF:42:78:8F:AC:63:BC:6E:C9:1F
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Certificate issuer:       /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial:       019D2A0507060571A5D038DF709A710DAC0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 12:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 12:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 12:01:05 +0000
Files and hashes:         1: 4HGQ2m_tsGQ8bwCnPSXfEpO9HVQ.roa (hash: Q57pytqlVJrw0ni19UPnInhK5SASLjHDFcZbHb2XGnE=)
                          2: Dtb5L2i3F4bloLJfx5uawZqIkls.roa (hash: gjTGNWMLVvyGT9SUilWAhMd6bQfNZN+VjF9bv+zIY+Q=)
                          3: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl (hash: /RIRUTZTsSSJ9ecOp2VYZ5S4kwvKrmkSbU3s4WCbiOY=)
                          4: wCs9k6Mf4iHjjidVUpH6jUD59BE.roa (hash: 7sOLGSFd18txziMvutD89np8EpQNTpEhmRbFbF2gz54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:05:07:06:05:71:a5:d0:38:df:70:9a:71:0d:ac:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
        Validity
            Not Before: Mar 26 12:01:05 2026 GMT
            Not After : Mar 27 12:01:05 2026 GMT
        Subject: CN=856ed2120f8476ca9087df42788fac63bc6ec91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:94:46:22:cb:e0:98:b0:ba:de:60:c5:66:
                    f8:aa:cf:d2:bc:9c:4b:b8:3c:2e:a5:37:27:a4:ca:
                    bb:80:49:93:9d:57:4b:80:94:3a:08:06:da:84:c1:
                    9f:0a:a2:89:7d:a6:17:86:ae:af:c9:a5:f8:b4:7f:
                    63:6f:45:76:25:b2:9f:82:d1:ad:2a:f9:be:fd:90:
                    b8:db:d4:c1:43:1a:58:29:49:75:1a:35:91:9a:4a:
                    9e:92:56:45:8c:4d:a4:48:57:b3:2e:89:a5:ed:ad:
                    46:c7:e1:d3:9d:4e:ab:6e:05:a0:bd:de:30:51:55:
                    5b:aa:11:f6:db:64:72:08:c6:0d:8b:78:42:64:44:
                    ff:24:e5:ca:c8:98:60:95:05:2d:8a:26:ee:25:85:
                    3b:43:27:90:90:c5:7f:25:a6:e4:ec:be:89:51:6f:
                    5b:a6:9d:fa:07:e4:59:7e:6b:f0:b5:06:c1:b6:34:
                    1c:bf:fa:78:9c:9a:81:9a:57:bf:84:4b:46:2d:6c:
                    b3:05:7c:f6:b5:07:b2:64:52:25:e4:b3:b4:07:f9:
                    91:ae:e8:0e:b5:d1:7f:7e:cd:23:07:a8:53:7e:72:
                    25:f7:02:00:b9:03:c3:bc:2d:b4:7f:e3:c2:ec:ee:
                    77:40:e1:fe:1c:62:f9:78:b0:8b:e6:92:d8:b9:1f:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6E:D2:12:0F:84:76:CA:90:87:DF:42:78:8F:AC:63:BC:6E:C9:1F
            X509v3 Authority Key Identifier:
                keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a3:2d:a5:f3:0a:45:f7:9c:0d:a0:f2:2e:c6:7b:dc:bb:a8:
         c2:ab:59:9d:d0:cc:e6:8b:23:34:f5:a3:9b:2c:b5:03:67:81:
         01:d8:51:cf:cb:ed:95:74:5a:bd:96:3e:3c:19:b8:d2:67:ee:
         47:8f:14:2e:af:82:8f:6a:43:f1:b2:e3:a9:02:3b:9d:04:1e:
         fe:d9:c0:3b:e7:47:de:59:53:bb:50:e1:9f:01:74:bd:9f:5e:
         31:4c:19:f7:3b:b6:ff:69:88:66:8e:e8:ba:43:2c:05:e4:3b:
         73:8c:cd:60:fe:98:c9:24:09:50:8b:dc:72:12:f1:af:04:bc:
         63:ab:86:9d:59:83:48:f1:1d:8f:cb:04:be:fc:ca:14:38:a4:
         cb:77:4d:0b:47:22:63:b3:2f:1c:77:f7:dc:f5:62:a1:64:63:
         75:aa:be:a7:ec:fc:3f:63:9d:72:ae:57:6f:2b:8d:9e:a4:27:
         c3:eb:3f:44:f0:d9:c3:c6:21:22:98:d0:e2:18:92:22:30:1d:
         84:29:25:92:d1:3a:a5:0e:aa:d8:57:b6:40:34:18:c1:32:e4:
         6c:14:e5:f6:e3:98:76:5f:6e:0f:72:19:95:4c:04:e5:b5:49:
         b3:0e:a3:7e:5c:03:7e:8f:11:26:40:6b:40:04:e0:86:62:79:
         8c:31:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:39 2026 by rpki-client