Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
File:                     7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json)
Hash identifier:          IZJfx/nOpGciO9NV5nRhEVBPmpdxe3YIiEjfENyf8UA=
Subject key identifier:   6E:B9:8A:AD:5D:01:09:C1:F4:0C:96:CC:C5:3F:49:1E:99:71:A2:EF
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Certificate issuer:       /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial:       019CAEDA57CCC84D5E9DC12C14F080D94562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
Manifest number:          06A3
Signing time:             Mon 02 Mar 2026 14:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 14:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 14:01:10 +0000
Files and hashes:         1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: U646cQqeRlXpWRFDl1neR3b4Y3tb4wPRHnqu8j/SmOw=)
                          2: cFm6ye9YYzLfyOwoeW-SophEslI.roa (hash: wK5ZZbYjXfq8ZMAuBJ6aukKc/TCZu0uxRC1ZIPKuaL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:57:cc:c8:4d:5e:9d:c1:2c:14:f0:80:d9:45:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
        Validity
            Not Before: Mar  2 14:01:10 2026 GMT
            Not After : Mar  3 14:01:10 2026 GMT
        Subject: CN=6eb98aad5d0109c1f40c96ccc53f491e9971a2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:09:5c:6e:14:60:48:d5:58:bf:c2:06:2e:
                    12:66:c6:3f:30:d1:bf:df:40:af:77:4e:f2:f6:8e:
                    7f:aa:0c:e2:53:41:69:c9:a2:fd:65:17:14:5d:66:
                    d2:08:f9:0e:c7:98:6a:95:93:d6:6e:9e:9c:64:f6:
                    31:e3:67:34:d4:86:2c:53:92:98:c8:b1:d9:e8:98:
                    3c:23:55:38:5f:3b:9f:03:79:99:78:4e:bd:72:ed:
                    dc:35:a7:49:b8:07:39:cb:a4:6c:d9:e7:7d:55:cc:
                    ae:5b:6d:80:e9:60:91:68:88:b6:bd:66:5e:db:a9:
                    80:54:44:46:ae:4e:4b:17:54:75:57:62:b4:2d:81:
                    2c:ad:d2:f3:c0:a1:6e:55:90:f0:99:b4:58:d7:4a:
                    84:1a:1d:6e:d8:6b:e8:0c:3d:8a:77:9f:0c:ed:a3:
                    b1:6d:39:2f:53:ba:83:6e:a4:32:19:5d:7c:07:2d:
                    55:e1:b1:b2:25:cf:a4:bf:5f:9b:15:f4:e7:c0:46:
                    17:80:bd:a4:66:35:ed:37:bc:90:af:13:32:b6:a6:
                    3f:a9:90:18:a5:f3:e9:57:2a:93:9a:53:a1:02:5c:
                    1e:8c:58:e0:68:2b:d7:15:87:45:c9:af:e1:1a:77:
                    99:53:9b:b8:e1:1a:42:9d:65:9a:a5:da:da:bf:53:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B9:8A:AD:5D:01:09:C1:F4:0C:96:CC:C5:3F:49:1E:99:71:A2:EF
            X509v3 Authority Key Identifier:
                keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:1f:3f:16:ae:85:36:08:3a:5a:fc:50:eb:fb:7e:ad:26:
         29:83:b1:3a:0c:7a:94:48:55:6d:1d:15:35:f7:08:5a:4c:f6:
         d0:7f:11:1f:32:61:94:1d:f8:aa:7c:11:7e:5d:32:2a:fd:a0:
         af:d4:d3:1f:9b:74:bb:60:96:9f:92:03:4b:c9:84:82:8f:ac:
         51:b3:14:77:67:d3:a0:21:e0:7b:9e:d0:af:c0:f7:6a:e1:4d:
         aa:35:3d:63:aa:e8:af:15:65:a2:d8:36:f3:88:bd:51:5d:3f:
         11:19:93:d4:6d:f3:32:9a:15:97:e3:d3:45:cb:64:03:e5:31:
         74:43:02:ee:4d:30:6e:e9:44:6e:8e:3d:f9:0c:66:26:d2:60:
         2d:dc:6c:e2:b3:47:4f:a8:af:94:79:bf:92:2f:ad:89:72:73:
         b0:7e:c0:cf:d1:91:ec:53:25:c4:43:f1:fc:19:f4:c0:c3:36:
         ad:58:31:2d:e9:11:8d:0b:4d:d8:d7:d6:94:5e:67:20:38:6c:
         32:fd:d7:c5:be:c0:f4:3a:58:b1:d0:85:a9:6c:45:1b:23:9f:
         cd:85:cc:59:6c:cd:6e:88:ac:0e:ce:aa:85:02:70:19:9f:b5:
         f3:e0:6d:b9:c9:69:fe:06:c3:d5:c1:4f:01:14:07:48:e5:70:
         18:61:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:29 2026 by rpki-client