Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File:                     QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier:          3rsl4oT7qmXG+mfMxiGJcM0DHjEcU+kPR9iQeTg8NVQ=
Subject key identifier:   63:47:46:82:52:0E:71:D0:1E:2B:F0:CE:E1:29:7A:80:2C:DF:AA:34
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer:       /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial:       019CAAFD43921DBFABA1A9EE15F6C1F97D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number:          160C
Signing time:             Sun 01 Mar 2026 20:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:50 +0000
Files and hashes:         1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: V5N8y/LqZA8R4ioX1vDIbJ5+GKI4dJDCa3G56mUj6AI=)
                          2: i-5JU6m0HCD3U3xlIXpYe2CvZ6s.roa (hash: DdvpLWQk/bI8gzJCBKoMFQlNjo/QKF7hqu6rxtSiFmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:43:92:1d:bf:ab:a1:a9:ee:15:f6:c1:f9:7d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
        Validity
            Not Before: Mar  1 20:00:50 2026 GMT
            Not After : Mar  2 20:00:50 2026 GMT
        Subject: CN=63474682520e71d01e2bf0cee1297a802cdfaa34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:1a:3c:e8:2f:fe:81:b9:19:30:1b:f4:78:
                    6a:04:0e:9a:db:30:2b:3f:ff:26:f9:03:79:6c:69:
                    5d:f8:83:12:68:c4:23:29:bc:e3:55:3d:e9:b1:fc:
                    b4:5e:08:82:14:02:e3:ac:91:14:cb:ee:d3:41:b7:
                    4d:ec:6e:e4:ea:cb:6b:80:3a:5b:3c:a0:b6:46:25:
                    6c:3f:be:23:fd:82:3b:3e:eb:18:9e:f5:9b:8b:ad:
                    57:11:0a:5f:cb:c2:cf:1f:2a:86:0e:fc:09:ec:04:
                    1b:ba:73:64:39:d9:a1:ce:72:d5:69:f3:b3:8a:70:
                    3a:4d:51:68:4f:71:d3:7c:00:64:f3:3d:df:ea:78:
                    23:45:44:d4:dc:31:ca:21:33:cd:68:78:e3:6a:a1:
                    1e:b8:8f:29:ed:17:ba:79:48:f6:af:71:db:29:19:
                    d3:b8:d1:b3:f7:3c:01:79:bb:e8:99:bb:6c:ed:0d:
                    72:d3:4c:0b:54:84:69:85:45:83:45:6b:34:15:04:
                    a3:4c:82:4c:1d:3a:66:b2:37:42:f2:b7:9b:d6:ac:
                    d5:9a:0c:d0:f0:79:e1:aa:63:0c:c6:d0:ec:fe:1e:
                    c4:cf:af:f4:4d:86:34:7a:cd:64:be:a9:25:3e:45:
                    7c:2e:c6:2f:fa:81:64:87:44:fd:64:26:e8:c0:d2:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:47:46:82:52:0E:71:D0:1E:2B:F0:CE:E1:29:7A:80:2C:DF:AA:34
            X509v3 Authority Key Identifier:
                keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:13:47:ff:1e:8e:83:4e:b7:54:22:fc:c6:b8:74:70:bb:3e:
         8a:b2:22:5f:b3:6d:6a:4c:9c:b3:6e:25:f7:98:8b:5b:a9:8f:
         8e:6f:99:3a:7d:56:13:1b:a9:5c:91:5c:f4:6b:a9:dd:d4:a2:
         40:9f:ad:b7:fa:60:15:57:ee:93:c9:86:78:fe:50:c9:0b:31:
         37:1f:76:84:4f:46:34:d5:63:78:10:39:7f:ce:60:eb:6e:ed:
         b9:13:77:9c:9b:34:74:db:dd:7b:2f:31:20:28:a0:52:c5:30:
         03:66:f6:17:19:39:d4:c7:86:04:3b:af:6f:5d:49:3d:3a:a8:
         f3:f0:7c:f6:c8:eb:07:9f:7e:fb:d4:b5:5f:19:53:a7:a2:31:
         20:7c:06:c0:5b:e1:42:4a:54:32:a5:9e:df:c1:ce:71:5b:1a:
         9c:eb:2d:16:e0:9f:2f:0d:6a:e1:89:50:0f:c4:f5:d7:d9:5c:
         6a:fa:bb:5a:b6:e9:a5:a3:92:82:ca:22:21:1b:9c:6f:ef:65:
         9c:a4:9d:cd:4c:11:77:82:6a:ff:99:36:70:8c:ce:5b:9b:fa:
         1b:0a:da:71:a1:d8:00:d8:10:a6:72:83:19:f3:4f:30:6b:16:
         1d:d5:88:16:de:66:98:e7:4d:da:b8:8e:4f:3e:91:0d:f8:f8:
         26:76:65:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:25 2026 by rpki-client