Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File:                     qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier:          ca0e+mZH2Lb6Hb+8tTxVkzqkXBUdxxnHzkNia3JMYMw=
Subject key identifier:   66:2F:4C:C5:F9:64:89:F1:0F:C9:25:40:BF:1A:0F:B6:6E:D7:C9:7C
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer:       /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial:       019D2B4E638D6D65808C1FEF09FCE453E58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number:          0B3F
Signing time:             Thu 26 Mar 2026 18:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:50 +0000
Files and hashes:         1: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: AM8UQYp2LyKx+aReqXY8gjfkz3wCXXV3BPPjwp8sSHA=)
                          2: uLVt8T3d78JYSpR4LeS6qWguKcM.roa (hash: rBNYvMK4p3Mahw6EVTteREy0VbAJzYePOU2yB1g4AWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:63:8d:6d:65:80:8c:1f:ef:09:fc:e4:53:e5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
        Validity
            Not Before: Mar 26 18:00:50 2026 GMT
            Not After : Mar 27 18:00:50 2026 GMT
        Subject: CN=662f4cc5f96489f10fc92540bf1a0fb66ed7c97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:9a:2c:00:e0:f2:26:f1:7f:28:57:3c:8a:
                    ca:39:95:d9:b2:ff:db:70:8e:72:b5:a4:98:c2:9f:
                    f3:a4:8f:de:b1:ef:2e:9b:35:c5:c3:c8:a1:7e:10:
                    98:71:82:56:15:8f:6d:01:a3:bb:5f:e2:6e:04:34:
                    f7:59:8e:f4:26:f3:8f:6c:c5:75:9e:f1:5e:90:82:
                    ca:4c:45:a2:c1:eb:8c:37:7f:ae:22:7c:bc:99:9f:
                    ea:94:7b:92:12:53:fc:95:e9:84:33:b4:fb:cd:6d:
                    03:40:3e:01:5e:d7:05:12:d1:0d:27:a2:26:36:70:
                    8f:59:e9:c9:47:54:f6:80:10:e2:ff:1e:a5:23:6f:
                    eb:91:c9:04:88:70:78:46:91:92:fc:0a:b7:63:20:
                    c3:7b:f5:60:62:2a:7c:47:0e:d4:e9:b2:2c:d6:0d:
                    66:a0:91:5b:10:e2:b7:91:e5:23:3a:75:d4:98:19:
                    06:9e:83:7f:b6:ae:79:e1:05:24:0e:c2:35:6c:97:
                    d3:af:36:83:36:bf:b2:71:4a:24:1b:3e:58:43:5f:
                    0a:10:24:7e:87:97:94:8d:75:4e:a8:c9:1a:b5:86:
                    39:cd:3b:b8:9f:99:b1:82:a1:71:d8:c5:2c:8e:35:
                    5d:39:50:07:3e:2b:3a:ef:9a:2a:02:b0:6e:13:f9:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2F:4C:C5:F9:64:89:F1:0F:C9:25:40:BF:1A:0F:B6:6E:D7:C9:7C
            X509v3 Authority Key Identifier:
                keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0f:13:92:f0:f2:55:5f:1e:a5:e8:e9:1c:ba:24:40:a8:4f:
         36:54:20:5d:f5:a8:79:db:5e:31:98:10:24:2c:89:6e:6b:21:
         22:19:85:1d:ed:43:db:83:87:5a:f5:af:17:7d:84:f1:ca:64:
         c4:d6:ee:b2:f1:e7:af:81:c5:40:1a:9d:1e:ad:40:50:4b:63:
         65:dd:99:e8:a6:f9:ab:e8:5d:b2:00:27:05:fe:bc:d5:47:64:
         2c:5f:f2:ac:9c:16:8c:2c:d1:7e:4f:6d:45:56:5e:39:8d:d2:
         31:26:f6:85:6a:ff:94:29:f2:85:2d:78:8e:55:fe:55:18:a1:
         04:6b:a3:d5:e4:fa:4a:5d:97:8c:1f:ac:f0:fd:9b:d0:4e:84:
         c3:78:87:4b:1f:33:18:21:9c:e0:25:dc:88:b1:14:7e:dc:14:
         13:b1:25:70:bc:4c:5a:38:36:34:8b:17:f9:a1:52:35:a4:ce:
         e2:8a:89:7b:a2:66:3b:02:04:c4:19:ec:6d:80:9f:c6:12:1d:
         dc:dc:f7:4a:ad:24:60:1b:0c:a5:33:df:53:5e:35:cc:5e:89:
         f7:d7:6c:e0:5e:5b:24:6d:c9:6b:9a:b5:f6:bc:f1:ae:6d:8b:
         14:ed:d6:50:d4:28:25:72:ed:fc:6e:98:ad:4c:3b:84:df:c1:
         9d:48:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:24 2026 by rpki-client