Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File:                     qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier:          brJouja/o1R4Pfxw6zG/rW6/OMS/kNlwoW1sa+TGpNw=
Subject key identifier:   2E:76:FA:87:5D:E5:F1:5C:4D:51:C8:75:00:B5:8B:81:03:77:30:76
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer:       /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial:       019D2B1715496B21E51CEC3CBC1A4083A3C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number:          0C83
Signing time:             Thu 26 Mar 2026 17:00:26 +0000
Manifest this update:     Thu 26 Mar 2026 17:00:26 +0000
Manifest next update:     Fri 27 Mar 2026 17:00:26 +0000
Files and hashes:         1: 3loz_wUg8iUnmUBOtpVHROxNJvk.roa (hash: J7VMYCaBbkzMjXRMgzvhwXQZ2f23okoS+RYz+uaW5gI=)
                          2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: Trb0/21hzxmiTDE3fglaNVmaiz9Y0+66XNFYhO8IRp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:17:15:49:6b:21:e5:1c:ec:3c:bc:1a:40:83:a3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
        Validity
            Not Before: Mar 26 17:00:26 2026 GMT
            Not After : Mar 27 17:00:26 2026 GMT
        Subject: CN=2e76fa875de5f15c4d51c87500b58b8103773076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:b2:31:7a:08:93:cc:92:d2:de:09:ee:a7:
                    c3:3c:64:50:26:fa:01:65:21:a6:cc:18:08:38:bc:
                    68:5a:3a:2b:88:4f:3d:be:33:23:2a:1f:7a:16:27:
                    0b:61:d4:59:b9:78:e6:c5:48:86:4e:68:0c:9d:62:
                    32:3f:ec:28:e0:23:a0:25:13:50:f8:0b:e9:44:65:
                    da:b1:46:68:20:7c:40:9c:a3:5f:8a:27:a9:ab:e3:
                    72:95:e6:66:42:4a:fc:bc:88:e4:6b:5a:99:aa:ab:
                    55:8a:02:8e:a0:50:52:fd:27:79:76:49:5b:af:a4:
                    22:59:96:f2:15:79:f9:da:6c:ad:ea:a6:df:14:55:
                    ba:b5:d8:41:1f:70:a2:63:c4:d6:79:33:68:1b:c2:
                    1a:ac:d1:e3:47:75:de:7e:ce:f0:53:1d:5b:0b:e7:
                    e3:65:e6:82:29:4b:ec:83:a4:d2:90:3e:4e:13:51:
                    a3:32:c0:0b:ad:90:d5:2b:3a:13:2e:6d:c5:80:37:
                    d9:58:ac:26:05:d6:06:b0:8b:f3:03:8a:83:cd:dd:
                    78:87:ea:d2:e7:c2:27:6d:2b:f2:9a:11:91:23:9d:
                    2b:40:81:8f:0c:67:b2:1e:c9:d6:4e:48:cb:5b:c6:
                    84:7b:ac:37:93:8a:7d:8f:a3:1d:32:91:9f:a8:7f:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:76:FA:87:5D:E5:F1:5C:4D:51:C8:75:00:B5:8B:81:03:77:30:76
            X509v3 Authority Key Identifier:
                keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:a2:6d:81:6f:b5:62:a6:d2:54:f3:cb:c3:58:3b:46:05:
         ab:05:9e:89:a5:fa:76:2f:3f:09:21:52:24:48:86:d5:09:67:
         3d:de:bf:96:b3:72:58:35:ae:f6:97:7d:6f:32:2f:8d:f3:03:
         58:96:cb:f8:f5:41:8a:f6:9a:f4:ac:11:e6:a1:f9:8a:f0:44:
         6a:9b:e2:77:d8:1c:8a:6c:61:01:2f:2e:bc:65:3f:a6:9e:f4:
         51:a8:66:33:41:74:2d:0f:de:af:a8:8c:40:a9:f1:c7:d8:9a:
         fe:0a:f3:c6:c4:b3:ae:a5:3d:e2:a3:ff:b6:4f:45:74:81:67:
         38:ab:91:c2:3d:7d:be:31:67:d1:19:73:06:04:ba:08:4c:13:
         93:f4:e4:a3:e5:02:2a:cb:8b:bd:26:4a:2d:33:6d:c1:88:12:
         25:5b:56:2a:ab:97:2f:c5:43:8d:49:4d:03:9c:f6:1d:b2:13:
         bf:1e:3d:90:6a:b2:02:2a:b2:c5:38:de:1a:3d:85:c1:6e:1c:
         5b:07:41:70:9c:ea:74:62:25:7f:bb:99:18:f3:5a:d4:bd:cd:
         04:34:88:67:9b:f6:91:f3:74:b0:5b:55:90:fe:8c:7b:aa:d1:
         2f:d9:6e:35:f9:29:2c:b9:66:7d:79:10:dc:2a:56:6f:a1:fa:
         6f:51:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:15 2026 by rpki-client