Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File:                     qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier:          4V4c/Sm3SZHoH/lRitDlnWCZqfahR1ZEH3i2FFBHhCY=
Subject key identifier:   6C:A6:F2:07:E1:CB:E5:A6:90:9E:87:3F:89:3D:97:E3:74:8E:A6:ED
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer:       /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial:       019D99993C04730908B0884599643C650B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number:          160F
Signing time:             Fri 17 Apr 2026 04:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:49 +0000
Files and hashes:         1: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (hash: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ=)
                          2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: O2kDoxXnoN1MVA2L9pojViVjfVhL5dWLdSQhFFlKMWE=)
                          3: y1xvK7lHBhE4mJfORtJta3k7QLw.roa (hash: ifW/r0S+8T3HM1pq3eDXlZA/lxPnTJhYCS5bj7w7VBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:3c:04:73:09:08:b0:88:45:99:64:3c:65:0b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
        Validity
            Not Before: Apr 17 04:00:49 2026 GMT
            Not After : Apr 18 04:00:49 2026 GMT
        Subject: CN=6ca6f207e1cbe5a6909e873f893d97e3748ea6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:31:f3:a4:e9:cb:4c:3a:78:7d:e5:2c:a5:
                    75:8d:dd:7f:f8:bd:ca:12:89:15:65:f0:28:dc:5d:
                    94:2f:de:69:dc:e6:d5:df:7a:ee:10:21:c9:f1:6a:
                    cd:87:ea:6b:58:58:69:87:56:9a:9a:73:d4:3a:f7:
                    36:3b:8f:cf:82:db:be:18:fe:3c:d5:84:26:dd:3b:
                    44:3c:6b:85:61:24:c9:52:64:1f:32:af:f2:96:13:
                    e1:5f:20:42:a0:1c:3d:bf:b9:1d:d9:e5:82:fe:9d:
                    f1:50:e9:bd:63:be:fe:93:d4:dc:e6:97:e6:62:55:
                    d1:e4:42:6e:ce:2c:cf:71:8c:2a:40:9c:5a:22:43:
                    7f:09:fd:fd:f6:27:4a:f4:cc:4b:06:62:e0:2d:a9:
                    27:41:42:3d:bc:3c:a1:5f:ca:8b:b5:7d:bc:45:b1:
                    2d:43:12:df:3d:85:4c:7a:d1:6b:9f:72:2c:da:85:
                    58:b7:23:01:a9:3b:90:e6:79:c0:d2:0a:68:ed:c7:
                    30:6d:6d:ea:c4:d4:81:f1:67:90:a1:ef:0f:2c:8b:
                    35:f0:62:80:a4:ad:06:e0:9f:5a:f3:cc:83:8d:0c:
                    54:0e:2e:6f:e4:7e:b0:15:98:56:c6:da:6d:9f:36:
                    49:69:57:77:c9:11:1f:70:e2:8d:f1:45:e8:48:fc:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A6:F2:07:E1:CB:E5:A6:90:9E:87:3F:89:3D:97:E3:74:8E:A6:ED
            X509v3 Authority Key Identifier:
                keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:dd:70:0c:bb:24:a3:d8:3a:e9:af:be:bf:aa:e2:b4:07:ad:
         fb:d8:50:0d:89:0c:88:94:bd:01:03:98:e9:e7:c7:47:d3:88:
         07:8c:dd:d0:59:06:5f:1d:0d:8c:a6:54:84:ac:6c:1a:18:8f:
         1f:42:ac:68:69:63:87:4f:7c:30:42:5e:87:97:a3:87:f1:99:
         c7:72:35:c5:28:a3:2f:fd:a5:97:7a:b5:12:45:10:15:ec:5a:
         07:e1:66:2f:9d:89:a9:93:64:0c:09:f4:e7:29:fd:e7:08:cd:
         d0:0d:ef:b5:10:49:c8:9a:ca:a7:15:98:d3:81:49:dd:e2:fe:
         38:bd:58:fc:e3:4d:3e:82:1d:b4:c9:dd:27:16:eb:d0:82:86:
         34:82:21:23:5f:e1:a1:ea:ae:33:d5:35:8b:9c:0b:a2:5e:a0:
         64:4a:a9:61:cc:96:83:53:44:6a:84:96:1e:a8:31:20:df:c8:
         e3:73:ea:b0:0c:d0:5b:37:6b:9a:3d:1c:39:38:ce:11:b4:d6:
         84:e2:b2:9b:5e:bf:7a:90:3c:01:44:1a:62:f8:30:4f:1b:f5:
         4a:86:88:84:6f:19:23:9b:c7:0f:22:23:cd:e8:0f:20:3d:da:
         93:b9:e2:7c:ce:12:0f:b8:25:45:35:9c:a7:a0:ed:66:41:6f:
         03:4f:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:06 2026 by rpki-client