Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File:                     qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier:          XqKGSUF7q4myQG54BUXMlTU35OPKKUZwswXs3K7d2S0=
Subject key identifier:   97:94:0B:1F:A6:DD:CD:2F:A3:21:07:97:56:F9:3E:63:B9:F9:35:05
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer:       /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial:       019CAC46A55BBEB81E942AFFCBA4B1D7B0E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 02:00:36 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:36 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:36 +0000
Files and hashes:         1: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: qHsGz5oXtIVTlDiWt8FOvbe6U7/ZA1afTlCdhFZijlg=)
                          2: s4z6KSPU66aHa9IpWr4h0fSsZEc.roa (hash: T4mhOBKBFlKgTip//Yw1HwCgxWQpfJTZCSk6zAZ8jes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:a5:5b:be:b8:1e:94:2a:ff:cb:a4:b1:d7:b0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
        Validity
            Not Before: Mar  2 02:00:36 2026 GMT
            Not After : Mar  3 02:00:36 2026 GMT
        Subject: CN=97940b1fa6ddcd2fa321079756f93e63b9f93505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9b:86:fd:dd:66:a9:af:d5:8d:8a:59:60:6d:
                    c8:fd:44:ac:1e:c0:66:f1:cc:b5:e1:2e:e4:41:b2:
                    ef:69:08:70:6b:34:27:7d:d5:ce:b9:13:94:2f:dc:
                    8e:2a:d1:f6:bd:1c:32:fe:b9:cc:07:39:6a:1c:66:
                    49:fe:c2:b8:dc:37:46:25:22:90:dd:c0:0b:6c:58:
                    78:da:a2:92:01:5b:01:4c:6e:2d:c7:2d:b4:d6:da:
                    91:f3:a4:1c:85:9c:37:42:d2:50:97:f2:d6:87:eb:
                    e7:10:94:f5:db:67:d3:00:cf:14:9f:25:e7:b8:80:
                    d3:06:cf:e8:8b:7b:8e:26:66:13:61:2b:24:54:79:
                    84:93:b4:2e:96:ec:4f:71:77:6f:b8:2f:ce:44:37:
                    7c:0b:f8:90:44:a0:54:09:1d:3c:a5:2c:a3:de:ee:
                    94:a8:49:ce:77:4e:6e:3d:3a:35:6b:ce:33:65:b6:
                    48:3d:2c:c4:57:9e:ea:f1:c9:06:6d:84:99:38:fe:
                    a8:98:ea:42:2b:f9:81:fb:2f:e1:6c:86:8f:1c:f1:
                    b4:5a:ab:6d:41:7e:7c:76:57:2c:22:d1:e3:f3:2f:
                    c8:56:50:69:61:a4:96:9a:ec:61:22:7a:82:17:09:
                    ca:02:e1:60:50:2d:79:6d:12:41:97:35:52:ec:49:
                    a1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:94:0B:1F:A6:DD:CD:2F:A3:21:07:97:56:F9:3E:63:B9:F9:35:05
            X509v3 Authority Key Identifier:
                keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:32:19:7f:1e:26:09:f5:5f:4a:c2:2d:1e:b3:2e:9a:b7:
         4f:cb:02:0b:c6:1f:45:fe:d0:39:da:72:8b:5f:0c:76:5b:f2:
         45:57:3c:67:32:c5:c8:60:b5:6f:4f:47:1a:22:13:10:0a:c0:
         56:1b:eb:c8:1d:75:72:d1:04:3d:8f:35:93:9b:2e:05:3d:01:
         e3:a7:28:0b:bb:6b:02:a5:5f:42:1e:33:9a:a5:b1:68:ff:f2:
         e4:0c:7c:b4:8e:f4:0c:3c:d4:cf:2b:84:03:54:eb:44:44:9d:
         40:d6:86:8a:ce:74:03:88:46:fb:8a:64:eb:4e:89:78:77:98:
         d7:b6:cb:ae:58:4f:ed:d8:66:7f:b3:e8:1e:3a:01:b8:e6:f8:
         b8:aa:8d:4f:25:c5:27:6c:ad:f4:b0:91:71:b3:e0:00:81:2e:
         09:3c:31:ef:aa:ea:a5:f6:f0:85:2d:8a:c1:4e:7a:22:b3:97:
         29:6e:2f:e8:c0:e0:9d:37:6e:08:28:20:81:84:dd:c7:56:e0:
         c0:10:e4:f3:da:fa:44:c7:90:c2:f2:fc:c6:0c:11:af:c4:c0:
         52:86:8f:58:71:60:b7:8c:0d:65:8f:99:c4:2a:8e:22:a0:69:
         01:b5:46:5a:a9:2d:9f:95:89:f3:3e:dd:2e:7e:3a:9e:09:0c:
         a2:a5:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:48 2026 by rpki-client