Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          X/Zj9oUDHzrzkC478c1e6AILwNs9c8sDh8Pl6/0vsok=
Subject key identifier:   D4:D2:BF:3D:11:A9:FD:5C:ED:45:C1:EB:8D:79:12:AE:D5:8A:78:1B
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       019D2C2A202AAAE7A41F3D6417931FBA3A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          0484
Signing time:             Thu 26 Mar 2026 22:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 22:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 22:00:51 +0000
Files and hashes:         1: 52DLcP5QY9pi7vojxO_II_zfgcQ.roa (hash: RzKzGr4Ea3LAud+NmUq6w6faNUNWCiigM9sI+gxiGqs=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: R2Qivjq6RSqpvHag6j8sPgMOxHDx/ilw9cP+4Hr+YmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:2a:20:2a:aa:e7:a4:1f:3d:64:17:93:1f:ba:3a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Mar 26 22:00:51 2026 GMT
            Not After : Mar 27 22:00:51 2026 GMT
        Subject: CN=d4d2bf3d11a9fd5ced45c1eb8d7912aed58a781b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:e5:f8:ee:4f:9a:a8:92:16:9a:9a:56:5d:
                    e9:06:40:0c:05:a7:5a:7b:1b:85:1a:e7:b8:14:da:
                    1c:c7:bb:61:1d:11:ab:92:19:ec:c4:50:68:2b:1f:
                    52:e9:6a:44:90:3b:c2:71:3d:8f:8e:c7:a1:f1:1a:
                    24:99:bf:e6:82:b3:d9:df:bf:f2:cb:5c:05:ff:f2:
                    19:52:cf:2e:2e:22:38:b3:7c:91:97:e8:59:28:4d:
                    31:a2:8b:c4:8d:b8:b5:d9:a6:43:35:65:b5:af:d2:
                    82:ed:c1:ce:96:88:2c:a5:00:69:67:45:b1:6b:bb:
                    1e:3e:d6:b0:85:f4:b2:cd:39:41:b7:99:f6:26:3b:
                    59:0c:77:1a:37:77:8f:f8:bb:c9:71:da:05:1b:e7:
                    10:a1:07:17:40:3a:b5:85:bd:63:73:2f:4f:46:19:
                    9b:48:fe:b0:a1:ed:3f:f6:f3:09:8b:bb:07:12:32:
                    3c:95:d2:a3:5e:2b:03:40:c5:ce:23:93:31:bc:27:
                    71:dc:76:cb:c1:fd:ce:68:50:54:13:2b:a4:9b:32:
                    14:2b:2d:02:9b:74:d6:9d:63:6b:ad:51:45:f7:bf:
                    cc:76:67:cd:a4:2e:c3:b7:c3:aa:fd:82:43:05:7c:
                    a4:46:bb:8d:a6:96:36:e1:ed:f4:44:4e:18:86:76:
                    2d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D2:BF:3D:11:A9:FD:5C:ED:45:C1:EB:8D:79:12:AE:D5:8A:78:1B
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d8:72:fb:ea:cd:18:e2:7f:e8:52:44:32:0e:17:7e:88:27:
         49:79:b0:6d:a1:26:a8:88:df:00:1e:88:86:57:d6:b4:46:ba:
         f7:c3:db:09:a1:2d:34:3a:23:24:d1:41:74:b3:73:a8:cd:f8:
         26:6f:bc:ad:48:9d:a0:12:39:1d:ef:df:21:7b:c0:03:48:35:
         cc:a0:53:46:b6:d1:05:60:07:eb:0b:4e:ae:5f:1f:52:51:3e:
         a3:fd:4c:d7:25:6b:38:5f:77:ef:3c:b4:65:8b:b8:25:e1:af:
         9b:49:16:95:79:28:ed:b6:82:6d:27:b0:10:b5:24:cc:78:f8:
         bb:47:f9:f1:38:22:dd:d9:28:a3:3e:91:c2:65:35:bf:5f:91:
         7b:ba:3e:01:52:df:74:12:6d:b1:2e:26:59:8d:cd:3a:7f:8d:
         64:ad:7a:26:f2:2b:f7:81:eb:03:de:f9:8e:55:0d:f2:62:b1:
         17:c0:96:0e:98:3c:67:25:f5:98:10:76:fc:96:b6:ae:75:12:
         1c:6c:a6:c7:36:dc:51:5f:5d:96:02:61:2f:2a:33:72:88:86:
         4e:7d:5c:bc:b7:39:19:6e:2e:8c:66:29:f0:18:72:a4:cc:76:
         4d:60:b8:46:37:bd:9a:87:9b:87:a5:e0:14:54:36:5d:04:b4:
         d3:54:dd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:50 2026 by rpki-client