Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          DPPbcHuQN3e5SfqN2ZPLpjh/UJtedDjE3259XLDiO8E=
Subject key identifier:   24:00:35:9E:CF:EE:6D:CE:BB:CC:42:85:CD:E6:2A:23:16:2E:81:21
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       019D2628199F318F3CC3449AD786C72EF1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          1465
Signing time:             Wed 25 Mar 2026 18:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:55 +0000
Files and hashes:         1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
                          2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
                          3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
                          4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: jkBbAsHgaXdCIqbX0Tr/UIUALvBGYlGvQlSNrO/AzEg=)
                          5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
                          6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
                          7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
                          8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
                          9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
                          10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:19:9f:31:8f:3c:c3:44:9a:d7:86:c7:2e:f1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Mar 25 18:00:55 2026 GMT
            Not After : Mar 26 18:00:55 2026 GMT
        Subject: CN=2400359ecfee6dcebbcc4285cde62a23162e8121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:a6:9c:43:e6:51:8b:ce:4f:2f:c5:4d:8c:
                    f4:6d:5a:9e:7a:87:14:0d:0f:b5:6a:b9:24:c3:6d:
                    df:a1:b9:9f:30:b8:92:46:d2:ba:19:9a:a5:e0:9f:
                    ba:89:5c:fa:4a:20:cf:c3:ca:21:4a:8d:92:3d:79:
                    9d:09:32:0d:74:1a:b1:b2:d1:1f:b8:92:4d:7e:9d:
                    e9:31:27:29:43:fc:4e:0e:08:d6:9e:f4:ca:28:c7:
                    5f:16:8d:c2:58:75:57:90:00:19:c0:01:91:3a:57:
                    06:19:79:01:24:b4:07:96:aa:56:46:0f:e5:c8:74:
                    67:ce:d4:d1:bd:33:f8:3d:19:bf:17:b0:04:3b:8e:
                    ff:ec:cd:01:fb:42:ed:46:15:33:02:58:e4:b2:e3:
                    f5:6f:34:e6:db:26:ed:4d:c8:17:9c:a1:55:f7:80:
                    22:c1:26:10:6f:8c:22:5c:11:8b:d1:87:6c:7f:e8:
                    26:a9:56:88:ac:bd:b9:fc:eb:84:cc:46:bc:1d:e5:
                    33:25:d1:a9:f8:f6:e8:04:ec:a0:5a:a0:d9:0b:e4:
                    f3:47:5b:19:94:dd:ba:ca:6f:a1:3c:74:d0:a9:e8:
                    cf:50:a0:03:2d:58:49:2e:e2:e0:36:ac:82:3f:58:
                    83:5e:af:8d:5b:df:3d:18:a3:4b:2f:6a:17:2b:5d:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:35:9E:CF:EE:6D:CE:BB:CC:42:85:CD:E6:2A:23:16:2E:81:21
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:53:f9:87:ba:54:11:f3:8e:8a:89:31:0e:a1:d3:de:01:dd:
         58:6b:d3:e4:51:df:f1:aa:cc:fa:ad:32:fb:5d:46:f3:a9:e3:
         7a:35:79:f6:a0:47:66:94:e6:28:a5:2d:ea:8e:db:2c:48:96:
         39:1b:79:80:7d:38:5c:d0:84:87:13:32:b6:32:97:65:62:5f:
         f3:96:0c:8e:8f:9e:d2:65:e2:79:de:68:6c:7e:3b:1f:1d:6e:
         b6:83:b2:4d:92:55:34:66:7f:70:eb:6b:d7:b5:aa:77:c6:69:
         4d:bd:fa:14:86:58:34:00:65:66:e9:e4:cb:18:cc:01:09:ba:
         a9:ca:76:63:ba:63:b7:b4:28:61:8f:1d:56:7b:2c:31:57:35:
         ea:ac:88:8b:79:56:dd:10:c4:4a:ca:b0:ab:a2:09:92:c5:8e:
         6a:87:08:8e:79:f3:76:43:64:d8:0e:df:f0:f6:19:a2:5d:f1:
         97:c2:13:06:2f:23:bc:b6:e0:69:a4:e6:16:d9:8c:41:4e:d2:
         96:17:f3:ad:ab:91:47:84:79:8b:0b:fe:85:29:cc:df:72:4d:
         a0:89:67:74:1e:bd:a9:12:4b:5a:f0:69:cb:ae:04:27:99:2a:
         dc:12:8a:91:d3:8c:38:a6:5e:eb:b9:ec:3e:1d:32:6f:a9:be:
         bd:d6:c3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:54 2026 by rpki-client