Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File:                     QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier:          ETzeO6oBlSWMmTlj5cX9xnF6LR3LEpUyqr5laBonFbE=
Subject key identifier:   99:31:55:1A:04:0B:27:4C:A3:C5:2F:57:02:2A:5B:48:41:97:4F:25
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer:       /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial:       019CAAFD85F20986942BD08C2C61E928EF45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number:          184D
Signing time:             Sun 01 Mar 2026 20:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:07 +0000
Files and hashes:         1: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (hash: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw=)
                          2: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (hash: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU=)
                          3: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (hash: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA=)
                          4: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: e2SKLEexIAgiPXKNjFo30iv1NTGuRzEEfDsnPwZ8ch0=)
                          5: zdUU6xh-U_UhQuIpzwDv3G1TgNc.roa (hash: Xcmlw4uYbZey4RR44rfO/TAhXzqgGs0gxnMsef5qoaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:85:f2:09:86:94:2b:d0:8c:2c:61:e9:28:ef:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
        Validity
            Not Before: Mar  1 20:01:07 2026 GMT
            Not After : Mar  2 20:01:07 2026 GMT
        Subject: CN=9931551a040b274ca3c52f57022a5b4841974f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d9:db:53:60:ae:ec:d3:b7:c6:fa:10:ae:c7:
                    4b:16:be:51:0a:95:1d:29:96:6b:d5:cf:4d:3f:30:
                    9f:da:21:ec:73:25:cb:88:e5:53:dd:f9:71:0e:ba:
                    57:a8:f2:cc:ea:1d:e1:ce:45:75:c4:57:9b:4f:1f:
                    77:77:61:25:62:60:c9:c3:9d:6d:ab:c4:96:01:d9:
                    e6:4b:9c:71:1c:c7:62:cc:07:13:32:42:d3:b4:74:
                    3e:d8:fd:70:bc:7d:6c:1e:35:d0:7d:cb:3a:4b:ec:
                    c7:0b:13:98:87:f7:f2:03:b8:f6:df:3b:b0:e6:54:
                    2b:d0:62:17:75:01:1a:8d:b5:53:a9:ce:5a:5a:bc:
                    a8:49:7e:1d:96:f5:53:9a:0d:eb:57:5c:73:1d:62:
                    5e:17:3e:7e:6c:5b:3d:c5:c5:14:9c:9f:d2:a5:e2:
                    68:97:2d:6b:fe:48:5e:cb:64:ab:4d:5f:ab:32:f7:
                    02:23:a4:3d:fc:14:ea:b1:81:24:91:95:2a:cb:46:
                    e8:fb:43:36:13:f5:e3:ce:17:8d:cd:23:b9:9c:e5:
                    c1:40:da:32:00:a4:62:dc:9c:43:af:07:58:25:fd:
                    33:06:81:18:8e:26:40:75:d8:4f:0a:b1:fd:fa:4b:
                    b7:31:2b:1d:11:a9:4a:1e:f3:08:cc:9a:ab:cf:30:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:31:55:1A:04:0B:27:4C:A3:C5:2F:57:02:2A:5B:48:41:97:4F:25
            X509v3 Authority Key Identifier:
                keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c2:b5:c1:d6:75:88:92:90:94:50:11:46:d5:d7:9f:64:15:
         67:46:6c:b5:69:53:3e:eb:ee:e2:18:32:8d:bf:34:3d:62:51:
         3a:cc:23:14:53:ab:24:4c:1a:ce:b2:e5:90:9a:ed:b2:59:7f:
         45:8b:13:d9:d7:a6:ca:10:64:a5:af:3f:35:a3:47:f4:3c:12:
         44:9c:3d:c9:e8:ab:d6:be:c5:e8:17:44:f0:db:e9:e6:69:c6:
         64:ae:0a:a8:9a:1d:c1:3f:f4:c9:40:bb:c8:80:7b:bd:8e:de:
         0e:30:f0:a3:03:b8:6f:df:e3:47:76:90:90:b2:0f:16:cf:50:
         fc:de:fa:01:ca:64:65:08:ee:6d:43:50:1d:ed:72:ae:dc:21:
         b4:7e:5b:12:9b:d6:48:97:7b:e6:a1:25:0f:69:69:d9:04:5e:
         40:5f:7d:36:07:de:fe:53:3f:bc:27:46:d0:e5:8e:ff:e9:9e:
         96:23:e5:ac:4a:0b:81:f4:fa:38:15:2d:13:06:f7:d4:8f:bb:
         f3:54:ce:34:21:2d:90:16:02:fc:f9:7a:13:8d:48:70:3d:9a:
         26:36:50:b0:1b:ec:c1:e5:66:bd:f3:17:0d:7c:66:84:40:c7:
         8d:ae:4a:fe:b3:2a:f0:9c:8d:e4:f4:3d:8e:5b:b8:02:6c:50:
         d2:61:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:03 2026 by rpki-client