Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
File:                     pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft (raw, json)
Hash identifier:          TbCBCVmwez8/9KZ9n/qNxJ8DGZiXUr7BM9OKB1ZkZxY=
Subject key identifier:   C2:6F:15:E5:F7:F0:98:C4:B8:32:B7:C1:D6:B0:DB:68:6B:0B:1F:E7
Authority key identifier: A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD
Certificate issuer:       /CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
Certificate serial:       019CACB5742DDE1FEE0F7AFD7E641F082455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
Manifest number:          0888
Signing time:             Mon 02 Mar 2026 04:01:38 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:38 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:38 +0000
Files and hashes:         1: pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl (hash: 73mxR5zp766wVYAVz9tArsxU5I43YYDhWTmthZPHCrU=)
                          2: zHx4SptI2tUU_j8Mkd8Tk06BII0.roa (hash: tWNlo8QgxYZ/7AKQgcvdlNsW8RQC+Ct2O3NbmFTyQSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:74:2d:de:1f:ee:0f:7a:fd:7e:64:1f:08:24:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
        Validity
            Not Before: Mar  2 04:01:38 2026 GMT
            Not After : Mar  3 04:01:38 2026 GMT
        Subject: CN=c26f15e5f7f098c4b832b7c1d6b0db686b0b1fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:c6:7c:13:d7:83:f1:c9:c7:7e:19:d0:b7:
                    58:8a:42:90:ea:60:9c:16:42:22:22:be:4b:16:02:
                    da:ff:5d:53:c3:76:f6:bc:4c:84:13:75:1f:4e:4b:
                    0a:00:08:09:15:77:41:50:43:27:bd:4d:62:18:99:
                    3c:07:86:10:88:86:fd:07:91:19:b8:0a:ed:29:de:
                    4b:52:fa:24:ec:fd:9c:21:f0:35:c6:bd:76:22:2e:
                    be:a7:2b:43:7f:53:79:4d:2e:d6:51:a9:43:f9:b1:
                    6e:fd:9d:9a:ea:51:bc:83:a8:5a:df:b3:fd:94:d4:
                    f3:72:c3:dd:f0:7d:50:b5:10:94:60:c5:f7:df:37:
                    38:c9:6b:cb:40:50:87:b5:15:2b:a2:43:97:9c:54:
                    94:c4:e0:bb:31:25:8f:57:d5:b4:bc:1d:0f:ed:a9:
                    0d:a6:d8:ab:46:9c:1f:02:a5:6a:c7:81:db:58:b0:
                    87:11:f3:80:f9:7b:5d:f4:0b:b2:db:13:9c:e2:89:
                    63:58:19:16:73:91:c8:c0:ed:0b:8f:96:17:94:66:
                    bf:89:a6:e9:65:05:dd:a0:62:25:76:4e:cf:83:a1:
                    8a:bf:69:8e:d8:5e:01:9c:da:63:c3:62:84:65:91:
                    06:8b:0d:be:0d:79:be:df:3c:83:9f:aa:bd:1d:99:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6F:15:E5:F7:F0:98:C4:B8:32:B7:C1:D6:B0:DB:68:6B:0B:1F:E7
            X509v3 Authority Key Identifier:
                keyid:A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:f3:e6:13:e4:9f:f2:6f:1e:9c:6a:bd:48:de:0b:31:71:
         50:b8:10:37:b4:be:f0:ab:38:ec:b1:7e:e3:e5:c6:96:f4:ad:
         81:44:06:8f:59:76:48:cb:59:c4:d2:a9:b9:10:37:f3:df:5b:
         cb:08:c7:5a:c0:0a:2b:b6:c0:75:f9:da:8b:06:1c:2f:b3:fe:
         67:e7:aa:04:a6:18:1f:dc:15:1e:6f:d0:27:91:03:91:4d:47:
         78:cf:e8:66:7e:bc:5f:e8:51:f8:61:dd:d1:43:f4:f2:4d:3f:
         ef:d9:6b:25:ac:99:9c:37:40:46:aa:ca:a4:2c:06:0d:5a:b1:
         00:c8:4b:ff:88:3a:46:2c:77:1a:6b:0f:99:f2:82:80:c8:4e:
         de:51:33:cb:42:89:67:6f:2e:3c:27:4e:64:5a:0a:37:91:79:
         ec:aa:f0:de:2c:23:7f:a1:8c:8f:67:0c:0b:f1:0c:bc:c6:9f:
         1c:b5:81:73:15:86:84:1e:90:91:52:e7:27:1b:ed:b9:af:e4:
         30:33:c2:48:94:43:61:8d:23:7f:09:64:35:15:37:e5:aa:a9:
         c3:ae:9f:92:b0:57:e1:d5:1a:8f:e1:e4:95:e8:32:85:f9:fe:
         2c:39:b7:50:ce:9a:95:af:95:b3:0e:a3:59:af:86:98:42:5a:
         18:22:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:35:45 2026 by rpki-client