Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
File:                     SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json)
Hash identifier:          xN0ucGej4QKFzmohkXATDnE49hmQl1xJCUSPl1fLElc=
Subject key identifier:   E0:A1:C2:1E:B2:A5:68:AB:F9:45:46:C0:61:67:43:AA:4F:B2:98:3F
Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Certificate issuer:       /CN=4aa6dc84f46b690721485a4405bfc939da254969
Certificate serial:       019D2A7249BA8C955E526456842AE13C0F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
Manifest number:          03DE
Signing time:             Thu 26 Mar 2026 14:00:26 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:26 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:26 +0000
Files and hashes:         1: 1kPwWdchsNxn-Bc9d2kic34pLHM.roa (hash: Pw0uzLsLdRPJc3mWei6tAgpkvqXkdwbkwjXBKfc2x8E=)
                          2: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: MA23dOXiSf8+XDzgq8CmTVZ2Hly3Mk404o1kHp2pmS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:49:ba:8c:95:5e:52:64:56:84:2a:e1:3c:0f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969
        Validity
            Not Before: Mar 26 14:00:26 2026 GMT
            Not After : Mar 27 14:00:26 2026 GMT
        Subject: CN=e0a1c21eb2a568abf94546c0616743aa4fb2983f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:10:ba:2c:89:d4:eb:9d:b5:82:cc:bf:ff:
                    c3:83:78:0c:67:39:ed:d4:21:e7:0c:a5:92:91:dc:
                    9a:14:d1:2e:75:9c:3a:7d:ee:43:9b:04:01:67:ee:
                    16:e7:ca:4d:41:56:9d:76:08:5e:f0:8e:1f:40:95:
                    e2:6f:7e:4e:e2:8a:16:49:ea:70:bb:d3:b1:da:bc:
                    c9:b3:2d:08:b3:a7:b8:fd:4b:53:c7:3a:68:c7:c0:
                    dd:97:9d:e3:74:95:cf:b4:97:4c:89:5c:fa:91:9f:
                    15:b3:ab:d4:1a:75:c1:bf:00:23:d9:8c:5f:10:6d:
                    9c:39:d4:19:af:73:6d:96:16:b3:81:14:46:c6:bf:
                    2c:33:8d:b5:11:da:73:a9:13:ac:eb:79:47:12:d0:
                    e2:2e:c8:56:2d:49:28:1e:a0:7a:37:b9:fd:78:fe:
                    5a:24:96:76:3a:6c:0e:12:3c:c3:68:4d:9d:4d:6b:
                    fc:8e:1d:04:51:96:4c:a7:9f:12:ab:d0:cf:f5:ac:
                    4b:b1:fe:24:0b:d6:01:fa:c5:6d:e5:c6:30:19:01:
                    5a:e1:92:fc:e8:95:45:75:7f:de:7e:39:ae:66:ec:
                    26:38:da:39:b5:ed:d5:ec:d7:76:03:85:a1:05:68:
                    de:31:a2:b8:f6:f2:b3:ca:31:02:d4:97:b7:f5:a8:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A1:C2:1E:B2:A5:68:AB:F9:45:46:C0:61:67:43:AA:4F:B2:98:3F
            X509v3 Authority Key Identifier:
                keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f2:6f:89:3b:55:3c:90:64:62:ae:24:c0:ed:62:5c:80:e5:
         6a:b7:0a:16:04:16:26:ea:60:9d:5a:f2:98:8a:1b:97:f4:8e:
         17:8e:67:31:e2:88:34:b8:5a:07:16:93:e6:6d:26:ef:c0:41:
         e1:e1:6d:5f:0a:50:9b:1c:f9:80:3b:12:c7:d2:7e:f3:15:28:
         ff:53:11:e8:99:d4:59:28:13:d1:9b:b2:b7:1e:2b:35:eb:7d:
         77:2f:44:92:82:20:0a:59:98:cf:42:39:22:93:c0:b9:28:a5:
         ce:13:bf:70:4f:ef:41:04:4f:e6:b6:a2:ee:67:8f:2e:74:c2:
         e2:a1:48:5c:29:de:a8:62:dd:bb:08:fe:d0:7e:c1:52:df:4a:
         ff:af:b7:6a:13:68:10:7d:ab:45:e9:4a:41:74:7c:08:20:73:
         31:e5:5e:2a:a2:40:77:a4:e9:2a:0b:a0:23:17:dd:72:33:05:
         3f:ee:a8:35:f7:22:95:27:ab:d8:dd:1b:80:97:9c:e7:c0:ae:
         5c:c9:f0:a8:88:c0:f1:ea:82:9d:a9:71:f9:55:2a:89:88:ca:
         3a:95:a5:44:24:b1:96:cb:af:67:d0:e0:10:a8:17:3c:4c:e0:
         3d:2d:53:fc:a2:cf:67:4f:81:04:d5:50:e0:f3:83:6d:a4:97:
         4f:70:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:28:55 2026 by rpki-client