Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File:                     QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier:          m8RKLY1d04zT7VFG/Gh0/FnnIUKEiI9VFjdDSBrG3zc=
Subject key identifier:   E4:E0:D4:DB:86:21:86:33:94:7C:15:61:50:61:F0:04:BA:AB:9E:2A
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer:       /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial:       019D284D2C9939725A00663FCAA1874557E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number:          0465
Signing time:             Thu 26 Mar 2026 04:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:39 +0000
Files and hashes:         1: Is0EtUEGPtj5iPMrI__B634d_Gg.roa (hash: UcnAE32bQjXyoFuSdzK7Ox1KjdWOO+CqE8BXmt6ncsQ=)
                          2: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: iXXFHlgMAXUPqLSu6ZUyuPaLSDIYO1sJBOOULiLQZQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:2c:99:39:72:5a:00:66:3f:ca:a1:87:45:57:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
        Validity
            Not Before: Mar 26 04:00:39 2026 GMT
            Not After : Mar 27 04:00:39 2026 GMT
        Subject: CN=e4e0d4db86218633947c15615061f004baab9e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:a2:b9:4d:73:d1:cd:04:bf:be:62:d3:cb:
                    03:c7:f7:8a:64:77:ef:38:be:d6:d7:c7:36:ea:7b:
                    2f:0d:1e:4a:5d:37:ae:79:8a:ed:99:de:f9:f0:1d:
                    18:6a:29:d0:3d:77:9b:17:2f:cf:6b:98:b6:49:f7:
                    23:69:98:8a:44:66:56:66:03:2b:37:b1:db:81:c8:
                    cf:69:e8:25:f2:a6:34:33:f7:e5:f4:e4:e6:8d:68:
                    97:11:25:02:45:5c:42:13:fe:31:54:91:4b:94:24:
                    16:75:a7:8f:a8:85:35:11:48:c1:23:8d:1b:13:8a:
                    ea:57:8a:83:eb:e6:0c:51:62:15:27:f0:c9:35:5b:
                    dd:61:3d:33:f8:44:88:0c:7a:6d:2e:ce:08:d9:e2:
                    ee:ce:65:18:0e:aa:ed:b0:84:6f:09:e0:fc:8a:08:
                    a0:9c:f5:71:dd:cf:9c:c2:c9:2c:e6:47:1c:38:02:
                    12:aa:38:4a:86:17:07:0e:61:a5:f2:95:a1:82:db:
                    da:a0:93:a9:01:d5:7e:86:3f:f5:83:a5:ce:23:36:
                    d3:ad:1d:27:20:0d:77:12:72:38:a1:b5:f7:45:d9:
                    43:3c:3b:52:d7:19:f5:d6:4d:3b:50:09:75:2d:31:
                    81:a9:6c:43:ea:36:f8:e0:3d:99:f9:23:e3:52:a0:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E0:D4:DB:86:21:86:33:94:7C:15:61:50:61:F0:04:BA:AB:9E:2A
            X509v3 Authority Key Identifier:
                keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:d2:e7:be:10:c0:2f:87:5c:43:86:2e:57:b1:78:c8:52:09:
         eb:1e:f4:85:fe:bf:05:1d:48:ae:fc:48:2c:d3:bd:d4:f8:d5:
         1e:eb:08:a3:87:12:69:f9:82:78:c4:3a:d4:65:f0:09:e9:8b:
         94:d0:59:f0:28:bd:72:07:3a:51:65:66:e8:59:63:76:d7:a2:
         c9:9f:a3:16:a4:c1:47:fd:22:a4:36:85:ca:f0:f9:51:82:33:
         72:48:3a:eb:d3:18:6a:a7:0e:b4:be:ad:0e:cb:dd:7f:b5:ae:
         89:02:f0:26:00:98:53:c8:da:e4:7c:34:05:fc:af:58:64:ad:
         4c:83:33:e1:54:b7:1b:1f:54:df:9e:cf:ae:7a:b4:57:ef:19:
         56:55:2b:49:7a:31:40:cb:6f:90:fe:b9:3a:54:e7:a0:d4:1f:
         71:55:e9:23:83:ef:a2:ae:38:6e:b7:a2:4a:c8:2d:7a:22:6b:
         33:d1:67:6c:89:c0:6d:86:26:f4:56:9d:55:6f:ce:f6:08:5c:
         22:df:fc:62:f9:cf:6a:f3:a1:17:12:93:ec:56:e2:95:8d:a0:
         ea:4a:c4:68:84:6e:3e:49:c8:be:86:b4:4e:bf:4e:08:c6:24:
         15:29:0e:11:83:af:ff:21:54:97:c8:74:97:9b:18:84:9f:ec:
         c9:a0:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:10 2026 by rpki-client