Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File:                     qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier:          u6nHzENUGuhjDpka7vO9XND2st6JW/LDPzLsa2rXE9Q=
Subject key identifier:   6A:54:99:86:2D:46:8A:45:C2:A5:03:99:BD:68:3D:56:7B:52:24:9B
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer:       /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial:       019CAC46D082B867396B631897AAC86DA019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 02:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:47 +0000
Files and hashes:         1: kW0WK2IFHNGeUqtoeqP2787mYnk.roa (hash: OoUVW67pQ7OzkcQcCKnAORtBV+T6+mdVc97qhb5jPng=)
                          2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: H8ukcvFYAEQ35d4ChQFDMp6x2QsKduQCUIwEk3fH4Go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:d0:82:b8:67:39:6b:63:18:97:aa:c8:6d:a0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
        Validity
            Not Before: Mar  2 02:00:47 2026 GMT
            Not After : Mar  3 02:00:47 2026 GMT
        Subject: CN=6a5499862d468a45c2a50399bd683d567b52249b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:ea:8f:f3:64:80:16:43:61:04:d8:64:e0:
                    f4:44:3e:6a:e6:11:24:82:c3:26:db:56:ec:2a:86:
                    3d:56:b7:f7:22:3a:a7:7b:8f:c1:d1:70:fd:0d:77:
                    cd:20:7a:b8:c7:35:02:9d:76:63:ca:5a:3e:01:24:
                    a8:26:46:e1:43:1b:ff:0e:f9:56:57:22:8d:a1:47:
                    96:3e:0f:32:1e:66:ad:79:bd:e0:2b:7f:19:df:98:
                    7b:09:25:9a:7f:a2:d2:b3:6b:6c:8a:69:88:e8:ba:
                    2a:cf:1a:30:ef:3a:b4:f2:42:96:d0:4b:c2:ad:e9:
                    f6:ae:77:a8:af:ff:31:b8:3a:33:ec:c2:65:58:58:
                    4e:12:06:df:bf:b7:e5:64:f3:15:ad:a0:dc:15:33:
                    ac:55:d1:fc:9d:e5:46:e3:be:11:3a:53:e0:8b:ae:
                    0f:af:0f:76:72:dd:8d:09:c5:46:f0:99:20:04:1f:
                    43:6e:f5:59:1b:f4:a4:8b:fc:02:0e:d8:53:85:21:
                    e6:18:a2:ed:94:9b:49:46:19:36:d2:ee:30:04:ba:
                    60:11:53:74:fb:0c:dd:7f:8e:ac:64:28:91:b6:56:
                    c6:8e:3c:a7:43:27:44:cb:57:77:a1:96:d8:f0:11:
                    3f:41:83:f3:be:d1:d2:2c:99:5c:b2:db:fe:d6:3a:
                    dd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:54:99:86:2D:46:8A:45:C2:A5:03:99:BD:68:3D:56:7B:52:24:9B
            X509v3 Authority Key Identifier:
                keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:85:61:98:bb:4c:64:f4:aa:fa:79:5d:26:e6:14:3f:17:cd:
         e1:65:0a:dd:8a:23:69:7b:a0:15:5a:4e:f9:db:fd:04:06:95:
         15:58:f8:9e:3b:fe:7c:3e:e7:89:72:0d:f9:b0:2c:2a:fd:6a:
         ea:38:55:a0:51:ee:42:5e:2d:70:06:75:99:96:aa:b4:52:73:
         f5:f2:50:b3:43:bd:af:7f:88:0c:3f:de:92:cb:2a:56:20:8a:
         58:5f:90:45:f4:c7:00:d6:95:c9:3c:f7:37:cb:9e:eb:76:d4:
         a7:05:10:17:7e:00:29:74:a4:eb:32:90:95:7f:ae:5f:9e:44:
         d0:80:26:74:e9:09:80:df:21:c8:55:c1:ed:4b:cd:a5:b1:49:
         86:c5:37:61:19:9a:1d:39:8f:4f:38:8d:60:d2:ea:67:8f:b2:
         d9:02:76:07:7e:9e:b0:1c:98:96:02:a2:dd:b0:a4:6e:12:21:
         48:73:4a:db:9f:2a:36:c9:f8:81:98:40:d0:39:4e:69:43:88:
         78:d4:08:6f:a0:89:63:46:3c:cd:2b:c3:33:a0:fe:32:ab:06:
         34:5a:86:0f:d0:cb:95:48:a3:78:df:59:b9:78:46:fa:05:ea:
         10:c1:dc:42:67:d6:33:6d:98:36:28:98:43:cb:26:dd:05:59:
         58:79:de:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRtCCuGc5a2MYl6rIbaAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MWZlMjY3MmM4ZjFjMTJiMjdhZGEwZmNjYmFhN2MyMTJj
YmQ3MWMwHhcNMjYwMzAyMDIwMDQ3WhcNMjYwMzAzMDIwMDQ3WjAzMTEwLwYDVQQD
Eyg2YTU0OTk4NjJkNDY4YTQ1YzJhNTAzOTliZDY4M2Q1NjdiNTIyNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6rqj/NkgBZDYQTYZOD0RD5q5hEk
gsMm21bsKoY9Vrf3Ijqne4/B0XD9DXfNIHq4xzUCnXZjylo+ASSoJkbhQxv/DvlW
VyKNoUeWPg8yHmateb3gK38Z35h7CSWaf6LSs2tsimmI6Loqzxow7zq08kKW0EvC
ren2rneor/8xuDoz7MJlWFhOEgbfv7flZPMVraDcFTOsVdH8neVG474ROlPgi64P
rw92ct2NCcVG8JkgBB9DbvVZG/Ski/wCDthThSHmGKLtlJtJRhk20u4wBLpgEVN0
+wzdf46sZCiRtlbGjjynQydEy1d3oZbY8BE/QYPzvtHSLJlcstv+1jrdAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpUmYYtRopFwqUDmb1oPVZ7UiSbMB8GA1UdIwQY
MBaAFKkf4mcsjxwSsnraD8y6p8ISy9ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YzA2YzktM2Y0Ni00NjU4LWFlODkt
OWJmMjI2NDAyZmQ0LzEvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YzA2YzktM2Y0Ni00NjU4LWFlODktOWJmMjI2NDAyZmQ0
LzEvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIVhmLtM
ZPSq+nldJuYUPxfN4WUK3YojaXugFVpO+dv9BAaVFVj4njv+fD7niXIN+bAsKv1q
6jhVoFHuQl4tcAZ1mZaqtFJz9fJQs0O9r3+IDD/ekssqViCKWF+QRfTHANaVyTz3
N8ue63bUpwUQF34AKXSk6zKQlX+uX55E0IAmdOkJgN8hyFXB7UvNpbFJhsU3YRma
HTmPTziNYNLqZ4+y2QJ2B36esByYlgKi3bCkbhIhSHNK258qNsn4gZhA0DlOaUOI
eNQIb6CJY0Y8zSvDM6D+MqsGNFqGD9DLlUijeN9ZuXhG+gXqEMHcQmfWM22YNiiY
Q8sm3QVZWHneUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:19 2026 by rpki-client