Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
File:                     Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft (raw, json)
Hash identifier:          GwZ+DY4eukyJzGJWG5nZ2xQ3zznlvvtxUXtIYtCjaUs=
Subject key identifier:   83:FE:59:4E:4F:E2:DC:E1:2B:41:9E:A3:BA:F9:B6:ED:E5:36:FA:B4
Authority key identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
Certificate issuer:       /CN=42afd560d513077e339fabfe0ccda90940bdd814
Certificate serial:       019D27E03C980A2E468186430965E6C6F5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 02:01:40 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:40 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:40 +0000
Files and hashes:         1: Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl (hash: 8FL+yrb6QMZSEwlvAQJX/SbGiwOXS/uL9OVVgfk5MnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:3c:98:0a:2e:46:81:86:43:09:65:e6:c6:f5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42afd560d513077e339fabfe0ccda90940bdd814
        Validity
            Not Before: Mar 26 02:01:40 2026 GMT
            Not After : Mar 27 02:01:40 2026 GMT
        Subject: CN=83fe594e4fe2dce12b419ea3baf9b6ede536fab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:2e:2d:4a:bc:88:36:34:89:87:eb:cd:41:
                    37:b8:75:2b:a9:93:ae:4b:31:23:b4:42:f7:cd:db:
                    23:1e:db:43:e1:15:58:2c:10:d7:42:d5:69:05:4d:
                    fa:64:e8:d0:cd:5e:97:bf:68:a8:d3:ae:2f:b1:b8:
                    9e:09:37:4b:2c:94:b0:40:0c:f7:b2:89:a0:fc:59:
                    ad:f0:34:47:3c:1e:a7:c0:ac:00:ff:56:43:1b:f5:
                    45:de:87:4e:17:df:c1:3b:f2:73:3d:c8:01:f4:04:
                    38:3f:65:b8:f8:12:2a:86:56:b3:a9:93:1d:1f:40:
                    6c:59:4d:df:f8:28:37:4a:b9:3a:fa:f9:24:b9:ce:
                    86:83:7b:ec:fb:d8:91:fa:28:da:36:fd:68:96:51:
                    d9:b0:30:b1:df:a4:e3:c4:77:37:6b:2a:88:ae:62:
                    7b:74:17:6f:48:87:03:0d:80:ae:53:a9:31:31:d9:
                    26:1b:69:14:f6:77:96:e6:be:77:e3:a3:b0:13:84:
                    6b:dd:bf:34:b3:f2:cc:ed:18:6a:ab:07:b5:fa:38:
                    4d:04:c9:dd:f4:e3:3f:76:f0:9c:02:c1:67:21:97:
                    4b:21:9c:fd:d4:3d:e0:cd:fb:21:8e:ea:87:e9:19:
                    74:86:0b:64:d5:33:79:dc:ee:ff:db:22:43:60:0f:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FE:59:4E:4F:E2:DC:E1:2B:41:9E:A3:BA:F9:B6:ED:E5:36:FA:B4
            X509v3 Authority Key Identifier:
                keyid:42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:41:28:26:b4:11:5e:f7:1f:aa:db:bc:92:0d:90:76:07:75:
         08:a2:87:7a:2e:71:20:f2:5f:db:74:c1:d8:e6:ff:49:05:07:
         86:d5:39:92:a4:27:49:53:8a:96:02:19:bd:35:6d:ad:14:6e:
         11:a5:11:45:95:6b:36:89:15:92:fb:8c:b8:38:45:02:38:6a:
         2e:0f:06:d9:4e:86:9a:67:57:9e:1c:cb:ba:fc:3c:f3:43:f2:
         6e:1e:65:6a:33:da:c1:9d:20:08:36:e9:82:14:6d:e5:5b:f8:
         39:10:1e:b6:76:8d:e6:9e:0a:8f:ed:97:e1:94:3b:15:d9:34:
         eb:85:2a:df:26:f6:d4:79:e1:e7:78:0c:55:f8:e8:88:8e:88:
         1b:5e:34:ec:0f:f4:ed:64:85:2d:07:bb:b6:94:88:b4:c8:df:
         f5:73:68:86:2a:88:a6:33:ab:0d:43:c0:ad:71:63:fd:e6:6c:
         fc:e2:f8:5b:80:0d:03:b6:2d:fb:6e:56:f1:01:62:97:b6:14:
         92:cd:1b:bf:b0:6b:49:24:04:5c:01:4c:55:ed:8a:26:a4:b7:
         21:4f:bf:d0:fc:db:0c:d5:1e:66:69:0d:58:bc:25:79:80:70:
         ab:d3:00:01:81:f8:3c:60:df:fa:53:f4:88:6d:89:a4:c2:20:
         06:2f:60:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4DyYCi5GgYZDCWXmxvXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYWZkNTYwZDUxMzA3N2UzMzlmYWJmZTBjY2RhOTA5NDBi
ZGQ4MTQwHhcNMjYwMzI2MDIwMTQwWhcNMjYwMzI3MDIwMTQwWjAzMTEwLwYDVQQD
Eyg4M2ZlNTk0ZTRmZTJkY2UxMmI0MTllYTNiYWY5YjZlZGU1MzZmYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ouLUq8iDY0iYfrzUE3uHUrqZOu
SzEjtEL3zdsjHttD4RVYLBDXQtVpBU36ZOjQzV6Xv2io064vsbieCTdLLJSwQAz3
somg/Fmt8DRHPB6nwKwA/1ZDG/VF3odOF9/BO/JzPcgB9AQ4P2W4+BIqhlazqZMd
H0BsWU3f+Cg3Srk6+vkkuc6Gg3vs+9iR+ijaNv1ollHZsDCx36TjxHc3ayqIrmJ7
dBdvSIcDDYCuU6kxMdkmG2kU9neW5r5346OwE4Rr3b80s/LM7Rhqqwe1+jhNBMnd
9OM/dvCcAsFnIZdLIZz91D3gzfshjuqH6Rl0hgtk1TN53O7/2yJDYA/sTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP+WU5P4tzhK0Geo7r5tu3lNvq0MB8GA1UdIwQY
MBaAFEKv1WDVEwd+M5+r/gzNqQlAvdgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFfVllOVVRCMzR6bjZ2LURNMnBDVUM5MkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81NDliOGItNjQ5NC00YTkyLWE5NGUt
Y2Y4Y2UyMmMzYWY3LzEvUXFfVllOVVRCMzR6bjZ2LURNMnBDVUM5MkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81NDliOGItNjQ5NC00YTkyLWE5NGUtY2Y4Y2UyMmMzYWY3
LzEvUXFfVllOVVRCMzR6bjZ2LURNMnBDVUM5MkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkEoJrQR
Xvcfqtu8kg2Qdgd1CKKHei5xIPJf23TB2Ob/SQUHhtU5kqQnSVOKlgIZvTVtrRRu
EaURRZVrNokVkvuMuDhFAjhqLg8G2U6GmmdXnhzLuvw880Pybh5lajPawZ0gCDbp
ghRt5Vv4ORAetnaN5p4Kj+2X4ZQ7Fdk064Uq3yb21Hnh53gMVfjoiI6IG1407A/0
7WSFLQe7tpSItMjf9XNohiqIpjOrDUPArXFj/eZs/OL4W4ANA7Yt+25W8QFil7YU
ks0bv7BrSSQEXAFMVe2KJqS3IU+/0PzbDNUeZmkNWLwleYBwq9MAAYH4PGDf+lP0
iG2JpMIgBi9geg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:27 2026 by rpki-client