Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          VPgE9oQrnPuvSPDR+fdPVh0obo7caSidY5dsNRoAPOs=
Subject key identifier:   85:19:F8:31:06:91:A3:52:F5:A3:19:79:AF:BE:5F:B3:ED:38:6E:53
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       019D28BB99D774C03282AFD331EAF68FC16F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          1891
Signing time:             Thu 26 Mar 2026 06:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:16 +0000
Files and hashes:         1: 6HLmOIlw0JJlLfNpuVhkS5VevII.roa (hash: duraaLF3+tphpAPz7hcD0W+ai9uSm22QFtqEemAzlOs=)
                          2: cgiCnDdXt2ZfV4gQ6f64Txzv9UI.roa (hash: Epq0AQtf5gLEvFkohacS+3j5hF97hS/AEpHSVuOJB9w=)
                          3: nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa (hash: KTNFAJc/6ueKlLn/0ANsYJWuRw0+1gFif+avYpTFJp4=)
                          4: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: o9C7MfXoUPSIILyHdUPwbLZKNbC0wIgWbVpkLvqNbJk=)
                          5: qfWUaAQNlV9wKmB2U3853Bl8uNA.roa (hash: rOp4emJoeO5JknR894vKgNsr/vggi5P0L+PXDJf8JnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:99:d7:74:c0:32:82:af:d3:31:ea:f6:8f:c1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Mar 26 06:01:16 2026 GMT
            Not After : Mar 27 06:01:16 2026 GMT
        Subject: CN=8519f8310691a352f5a31979afbe5fb3ed386e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:b1:37:49:f4:90:f6:05:e3:7d:b9:78:f8:
                    55:6f:01:ff:58:41:c2:9a:a4:5a:b3:81:8a:c7:a7:
                    a5:58:13:c7:26:04:4a:a5:65:17:36:a1:33:14:61:
                    4e:32:35:ef:ba:ae:62:a6:c0:9c:e6:da:10:be:c8:
                    1d:32:5c:5a:63:61:64:42:ae:5b:8e:13:b6:8a:96:
                    56:8f:01:36:7e:d7:f1:c0:f2:ca:a6:6b:1a:86:42:
                    fb:4e:8f:51:dc:79:05:47:69:0e:3a:cb:3d:b7:8d:
                    d7:e9:a9:9e:84:4a:bc:40:81:44:04:8c:43:47:f1:
                    2c:02:61:99:d0:c0:39:19:62:a3:cd:43:69:31:97:
                    3a:09:52:5f:c9:96:7b:b6:d9:d1:c9:f1:5a:af:ea:
                    d1:5d:ec:a6:7a:16:e4:05:e6:54:d7:69:68:5e:73:
                    fa:92:1e:9f:0e:2f:ca:ee:83:88:56:a2:e2:0d:d2:
                    0b:cc:b2:2e:b8:e4:c5:c9:15:bb:ce:5d:4a:0a:8a:
                    c9:61:55:58:55:46:0c:06:eb:b6:9d:47:09:9d:b5:
                    95:ac:9e:32:6c:ce:77:c7:ea:bc:db:c4:83:13:db:
                    4e:fb:40:24:01:26:c3:8c:07:5c:02:c6:fa:e2:9b:
                    22:b0:12:e9:8e:ec:9c:73:f0:65:10:44:aa:da:80:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:19:F8:31:06:91:A3:52:F5:A3:19:79:AF:BE:5F:B3:ED:38:6E:53
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:54:48:e4:65:ef:fd:64:d2:11:e4:ea:2f:6f:00:27:56:
         34:7e:e8:ed:8c:15:85:24:31:88:04:bb:ff:ca:0b:e8:9a:c8:
         38:b9:fb:ab:38:55:31:89:ad:ef:b9:db:91:3b:c0:fc:69:e0:
         3f:d6:16:d6:df:b0:fc:73:88:1b:5a:be:c9:73:f2:ba:da:d9:
         30:8e:97:14:b3:ef:b1:e7:d5:77:a3:29:8e:3d:fe:08:ba:97:
         84:e7:ee:8a:9d:9f:7b:f2:43:03:97:ad:c3:b5:5e:fe:e4:b3:
         f4:6f:51:fc:40:97:03:a4:56:39:86:d6:52:f2:c5:98:c6:ad:
         2b:2a:fb:6d:a6:0d:44:06:6b:05:52:b3:f1:39:1f:91:88:b6:
         11:35:f4:9c:d7:d2:0e:80:bd:ac:41:eb:1e:f6:ce:f1:99:f1:
         57:d9:2e:d3:a7:58:e0:e5:6f:4c:f7:f2:74:76:19:d6:57:7a:
         54:10:10:e4:52:2a:38:8e:1d:ea:00:49:27:7b:63:54:fc:80:
         95:91:c9:ce:20:a4:6b:07:67:40:14:98:bb:75:aa:63:7d:3e:
         73:56:b4:d0:d5:2a:a3:5b:c3:c7:37:a2:e6:b2:8c:5b:e8:b7:
         1b:f4:61:6d:91:57:22:b2:26:23:24:ff:f8:99:ad:8d:8d:b6:
         00:6c:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:13 2026 by rpki-client