Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File:                     QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier:          YFtZ6zDufnrrHVna6GrN65j0tpXej39hw389zx22hko=
Subject key identifier:   42:9A:AD:2C:7D:5A:DC:46:0C:74:03:58:A5:49:02:D0:23:20:BE:03
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer:       /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial:       019CA94577FD6802574606871B7E6819051D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number:          108A
Signing time:             Sun 01 Mar 2026 12:00:28 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:28 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:28 +0000
Files and hashes:         1: JNIABgZFmaWxjr_C6leE2KJ6tTA.roa (hash: U+MKLIrsfWPb0hJeiOLmKOB38yCKlAGbLyA4d1nN0Hs=)
                          2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: OZQiFiK/LbfHrV9TIfREGZPPDq7gIqo5Abdo8PZq3PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:77:fd:68:02:57:46:06:87:1b:7e:68:19:05:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
        Validity
            Not Before: Mar  1 12:00:28 2026 GMT
            Not After : Mar  2 12:00:28 2026 GMT
        Subject: CN=429aad2c7d5adc460c740358a54902d02320be03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:a7:e9:26:e5:ef:b1:aa:3d:42:c1:45:c5:
                    23:14:51:19:09:7a:27:13:0e:e0:8c:11:36:cd:4d:
                    37:98:fa:f5:42:0c:77:b3:40:60:13:a8:51:c3:d7:
                    da:ad:27:39:09:5e:70:70:9a:4d:1e:a9:ba:76:42:
                    5d:44:45:a3:02:70:99:39:64:68:39:b8:e6:4e:dd:
                    ab:4a:97:52:e3:4b:84:f6:23:55:91:54:c5:a3:0e:
                    6c:7b:6f:4a:2f:a5:5b:35:92:3d:00:c7:14:9d:1a:
                    05:92:00:fb:1f:c4:74:97:3c:04:ed:38:2f:bd:82:
                    f7:c3:d6:04:c0:6c:01:1b:16:7b:1b:21:80:8b:ee:
                    36:bd:ce:a0:9b:d8:5d:56:e6:00:54:5a:34:55:09:
                    81:3c:2f:51:57:de:f9:a6:14:71:e8:de:a5:00:7e:
                    5d:86:14:98:cf:60:e9:09:64:88:52:ca:84:25:2c:
                    86:19:f8:b4:8c:1f:50:d3:23:84:70:42:71:79:e4:
                    1f:26:92:6a:d3:3a:5f:55:58:76:02:6f:4b:cf:32:
                    28:85:dd:49:a8:ff:a1:92:93:13:38:e6:b9:2d:0a:
                    a9:da:d2:3e:12:9a:e2:9b:ce:b8:98:f0:a0:6a:37:
                    31:d3:4d:a4:2a:b7:ef:fa:8f:ca:8a:c0:07:dc:3b:
                    35:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:AD:2C:7D:5A:DC:46:0C:74:03:58:A5:49:02:D0:23:20:BE:03
            X509v3 Authority Key Identifier:
                keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:81:d5:c0:29:22:11:f1:28:1d:6f:20:a9:78:60:22:c4:f4:
         bf:8d:9e:86:bf:70:aa:87:72:82:31:7b:b5:56:85:e6:82:76:
         d0:53:19:dc:ef:9b:cc:89:9d:25:7e:85:25:29:2f:d6:b2:78:
         41:96:1a:a5:70:ed:83:53:bd:2b:1d:de:fa:bb:42:ca:45:f3:
         7f:22:4c:87:70:79:e7:ee:9e:e3:58:45:8b:bc:2e:a0:ed:9a:
         39:39:50:9f:a4:76:bd:fb:e2:55:0e:95:8b:84:c4:ff:a8:e1:
         86:f3:46:42:9a:62:8c:de:f4:81:c4:e8:4f:8f:cc:5b:a7:7b:
         d6:cc:eb:2f:18:d4:bc:5b:07:a9:34:bd:12:f6:15:33:a9:b9:
         05:47:15:19:40:ed:d7:59:27:ca:ee:5d:4c:7d:2d:2b:b1:35:
         e7:de:36:0e:a2:46:9e:bd:12:05:f6:79:cd:e7:e3:0a:e2:79:
         10:dd:f4:00:4e:40:00:0b:ae:91:e1:79:f7:e3:b0:2f:93:f0:
         1b:90:d5:ae:cd:8b:39:8c:90:d2:1e:e0:6d:50:75:16:67:da:
         7e:ab:1e:f4:39:98:36:df:bb:f0:84:de:9e:b3:2b:fc:b3:e3:
         da:f9:64:27:40:73:88:86:63:6a:c6:a1:63:a5:1a:f1:ad:59:
         26:fc:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:30 2026 by rpki-client