Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File:                     QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier:          bpvl8Vb9aEgB/qIXbLlKIxiTcGC5MVmMAIcL6n5YJOk=
Subject key identifier:   22:2D:89:21:A3:E7:17:5D:51:E6:B0:39:1E:1E:4F:9F:C2:6D:54:39
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer:       /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial:       019D27723A9B0A86F5067ECD0A0606451144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number:          0FA8
Signing time:             Thu 26 Mar 2026 00:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:30 +0000
Files and hashes:         1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: JBt/XccPdB2KvplzhgHPZ7LE4l43CiRTXWGTe7L5SVk=)
                          2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:3a:9b:0a:86:f5:06:7e:cd:0a:06:06:45:11:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
        Validity
            Not Before: Mar 26 00:01:30 2026 GMT
            Not After : Mar 27 00:01:30 2026 GMT
        Subject: CN=222d8921a3e7175d51e6b0391e1e4f9fc26d5439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:3e:25:a1:08:5c:a5:10:e2:96:8f:c4:a1:
                    9b:f7:70:54:a4:5e:cc:21:ac:c8:88:c5:c7:10:22:
                    d4:32:60:b7:bb:3d:85:46:57:82:82:91:ef:49:03:
                    38:30:58:73:20:f1:b2:94:8d:51:10:66:63:0d:c0:
                    ac:48:7b:66:e4:cb:de:ef:d4:06:b3:69:8d:30:76:
                    fb:7b:7c:40:28:78:3c:7a:5c:af:8c:ba:64:d1:d2:
                    4b:d8:7e:8d:bf:b7:71:d8:7c:fc:c8:ed:b5:57:c5:
                    36:e5:83:4b:81:05:5a:05:9c:69:6e:0c:c5:ec:16:
                    6e:e6:dd:c8:2a:cf:3e:28:f2:bb:4e:4c:7e:c4:9e:
                    0f:a5:83:fd:85:43:81:d4:79:42:17:48:89:0c:a6:
                    ea:4a:aa:54:46:c4:10:08:8e:8b:cf:d2:97:57:eb:
                    74:5c:64:ec:ba:0e:41:01:a1:dc:36:bb:57:db:74:
                    ac:0d:19:50:f4:4e:32:ee:86:e7:3d:c3:c5:2f:c9:
                    ef:2b:63:48:3f:a4:6e:d2:1e:b3:ae:31:23:25:e8:
                    44:58:59:5e:90:89:0b:25:d3:52:43:4e:09:1f:18:
                    92:81:0e:10:df:49:5b:67:1b:82:39:2c:3c:23:6b:
                    40:43:03:07:f0:e9:a6:32:dd:5f:20:02:da:18:39:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2D:89:21:A3:E7:17:5D:51:E6:B0:39:1E:1E:4F:9F:C2:6D:54:39
            X509v3 Authority Key Identifier:
                keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6b:8c:c6:be:2f:1d:fb:af:02:b9:12:f1:e9:4b:66:d3:b1:
         95:97:33:dc:bc:34:a7:9f:7e:18:c2:d3:db:b5:24:67:6f:1d:
         17:94:e1:bf:e5:66:9d:7b:67:19:a0:0f:f8:d8:9b:ee:b1:25:
         73:21:aa:2b:84:16:49:8e:cc:79:01:0b:dd:3b:ed:20:44:a1:
         cb:5f:06:a7:e8:b5:5b:31:50:53:71:e9:2b:57:16:73:df:c8:
         a2:85:7b:0c:3f:ba:56:74:82:89:e8:10:5c:b6:b3:92:8e:2f:
         7f:92:e7:57:1c:7a:34:be:92:18:fe:b2:2d:ae:bc:e5:7c:33:
         4c:1c:b5:c4:ec:8a:d8:ea:a5:1a:e8:33:9c:3b:4c:fc:f7:f6:
         26:ea:97:4a:d5:c3:23:6b:69:e9:55:8d:7e:d6:5c:61:db:54:
         21:56:e3:45:d5:53:26:bd:79:c6:12:99:f8:0c:1b:3f:9a:30:
         a6:a6:0e:d1:24:db:d8:db:66:e8:22:b0:a1:cc:36:d5:18:49:
         53:90:00:b0:6b:e1:76:1e:45:af:60:a4:da:d1:b4:17:6c:69:
         64:f6:82:ba:88:a4:3f:55:b3:47:ed:83:7a:de:20:20:a6:1b:
         2f:be:00:8f:6d:5a:98:1f:91:b3:14:2e:69:6f:78:8b:12:86:
         dc:f8:0c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:38 2026 by rpki-client