Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File:                     qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier:          pkOUrZhY3kju+RqwE1s8CC7V74eOXwx2vLXDMeZt0mM=
Subject key identifier:   E3:4C:BA:9D:6D:3C:AF:42:3B:40:F8:4E:56:7E:B7:34:EB:48:C0:C0
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer:       /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial:       019CACEB82BC83CDA72D24D9452118A274E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number:          0508
Signing time:             Mon 02 Mar 2026 05:00:41 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:41 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:41 +0000
Files and hashes:         1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: i+HLEa3b+dCw3oC6WlEw9kVc2sMA5igbUNEolu8BC4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:82:bc:83:cd:a7:2d:24:d9:45:21:18:a2:74:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
        Validity
            Not Before: Mar  2 05:00:41 2026 GMT
            Not After : Mar  3 05:00:41 2026 GMT
        Subject: CN=e34cba9d6d3caf423b40f84e567eb734eb48c0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:37:7d:bf:5a:ad:f3:f5:55:dc:ee:21:64:
                    ed:64:d5:c9:70:8f:e9:e5:df:3e:21:ee:32:ea:74:
                    ee:31:ca:e5:b0:0e:77:ca:f2:1b:13:cd:64:b5:9e:
                    84:15:70:98:e6:f4:56:52:da:3a:60:96:53:ee:a0:
                    3f:8f:cf:14:a9:08:89:47:d6:93:e7:fa:b3:56:9f:
                    31:bb:22:79:b2:de:ea:c2:38:ca:37:23:70:3c:aa:
                    81:79:74:9d:ec:0d:62:46:07:81:75:6c:46:d7:2d:
                    63:be:1f:f0:78:ee:f3:52:28:6c:5a:b2:8e:7d:d5:
                    9a:85:26:78:1a:74:42:38:3e:b8:80:90:65:e1:58:
                    8c:19:c5:d9:7d:8b:57:4c:e9:15:89:d5:9f:9e:ec:
                    77:9f:d7:75:cf:8a:f1:bd:38:11:53:bd:7d:7a:88:
                    69:4d:ea:96:82:d0:a3:37:82:0a:3f:72:5c:de:58:
                    19:23:b6:e1:61:77:0a:e6:2e:49:9a:85:a3:22:9b:
                    99:07:c8:c5:b4:9b:56:29:e6:f8:00:1a:de:40:3e:
                    e0:e8:4e:99:fe:e2:14:4b:62:ad:3b:f9:be:a7:bb:
                    5a:c1:01:02:0a:55:88:16:76:a4:1d:64:2d:20:26:
                    fd:4a:07:23:9d:9c:c9:74:c5:5e:c2:98:93:81:bc:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4C:BA:9D:6D:3C:AF:42:3B:40:F8:4E:56:7E:B7:34:EB:48:C0:C0
            X509v3 Authority Key Identifier:
                keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ae:f6:84:53:63:ad:54:34:73:bc:e8:2f:e9:96:47:c9:a6:
         4c:f0:20:b7:df:c7:7d:16:c8:06:9d:c8:05:e7:45:d8:73:48:
         a2:15:2b:ff:1c:ec:22:f0:47:8c:eb:11:57:6c:e5:a8:72:19:
         99:b5:23:da:73:b2:b4:81:c3:a7:3a:0e:df:94:5c:c9:e5:2a:
         a9:5a:a1:c8:d0:dc:3b:97:7e:c2:18:e7:71:c7:1c:c8:6b:1b:
         71:da:38:ff:24:3b:1d:cd:4b:3c:e3:9c:1e:6b:d3:8d:46:7d:
         c2:b6:d3:ef:df:e1:36:27:a7:fc:6b:f8:1d:0c:38:0d:1d:1f:
         c0:d7:2e:44:b2:b5:ee:d3:a0:fc:51:fe:04:e8:af:52:15:b4:
         d5:25:b2:be:d6:b9:76:4d:a2:67:00:4d:43:58:39:1c:55:43:
         22:c7:6c:0f:10:3f:96:19:7a:0a:34:9c:82:de:ca:14:fd:47:
         21:b0:48:fb:66:b6:77:ba:df:a4:53:4c:30:3b:dd:cc:ab:c0:
         df:7e:9a:e3:c4:81:35:4f:93:78:e2:5a:b1:0b:8e:37:ab:32:
         6c:7e:76:56:10:aa:5c:05:fc:9a:8b:77:a9:9f:da:6d:2e:de:
         26:fa:77:96:2d:78:e5:7e:81:8d:b5:1e:ea:57:d0:40:3d:97:
         7f:9c:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:07 2026 by rpki-client