Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File:                     qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier:          9w2cJ7tEIBkHXfZNYsrGWpwrO2wt58qpnM2z7qQ4j3M=
Subject key identifier:   50:C0:7A:9F:0A:1E:E9:C1:9A:65:D8:7F:34:A8:2A:4A:33:AD:B1:E1
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer:       /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial:       019CACB53892C4BCBB2763053003B3ECFCBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number:          1683
Signing time:             Mon 02 Mar 2026 04:01:23 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:23 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:23 +0000
Files and hashes:         1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: nwdwK2okBDDwNbq0XrUtRHNq6waPKstYT8xbRCy5cKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:38:92:c4:bc:bb:27:63:05:30:03:b3:ec:fc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
        Validity
            Not Before: Mar  2 04:01:23 2026 GMT
            Not After : Mar  3 04:01:23 2026 GMT
        Subject: CN=50c07a9f0a1ee9c19a65d87f34a82a4a33adb1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:05:ec:c9:6d:89:5c:a9:3c:2a:f9:81:49:
                    d9:3f:36:38:c5:57:d5:3b:9c:54:ee:44:30:2a:c1:
                    5c:03:0d:30:8d:66:6a:49:1c:59:ab:1b:9a:cc:33:
                    f3:ea:84:af:6e:49:93:7b:6c:45:ad:57:ce:d3:77:
                    3a:97:4f:04:5c:3d:47:cf:de:bf:dc:f6:bc:de:48:
                    97:28:a7:15:e7:3e:a1:a6:4d:d2:3b:c2:a4:af:28:
                    6f:a3:fe:24:67:02:2e:d9:75:ef:8e:14:5e:9d:26:
                    03:67:55:4e:e9:33:5a:58:47:ee:81:82:65:ac:87:
                    82:b1:af:05:1c:5a:36:ae:89:6a:ee:b4:3b:a3:bb:
                    0c:f2:b1:0c:aa:63:b5:49:d1:49:b8:f8:62:8c:15:
                    e4:70:69:06:d4:cc:30:0f:53:88:c3:e6:58:fb:4b:
                    c2:ff:d2:e9:5f:80:82:4e:6a:36:60:54:79:f0:6a:
                    8c:0f:e3:8f:9a:0d:8d:ca:9c:aa:88:72:a1:3c:e8:
                    1c:a3:be:1e:c0:d8:79:06:fc:38:c4:85:85:17:f7:
                    87:67:09:73:13:cf:73:9c:c8:71:bc:72:52:65:1e:
                    22:67:c5:7f:c8:b2:4b:b0:cc:0a:97:5e:c6:88:d2:
                    86:f3:a9:28:56:cc:d6:1d:8a:45:53:95:3d:0d:e3:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C0:7A:9F:0A:1E:E9:C1:9A:65:D8:7F:34:A8:2A:4A:33:AD:B1:E1
            X509v3 Authority Key Identifier:
                keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:af:4d:85:8d:ab:d5:d3:a2:64:2f:2b:ae:16:b0:54:0c:76:
         2c:da:e5:05:ce:55:99:1c:b3:12:21:d1:99:bc:5d:73:a6:72:
         3a:72:30:44:43:19:3a:93:d6:26:69:29:b9:7c:b4:1c:e4:ce:
         53:8a:b1:3b:bb:f8:18:0a:8a:f4:c1:28:20:bb:33:ca:2b:7e:
         1a:f4:68:2c:66:eb:e1:99:a6:2e:2d:55:c3:0d:68:b0:92:d3:
         48:d7:55:c1:d5:8a:67:90:47:72:ff:a4:14:10:7f:9d:94:d4:
         bd:8a:5e:1c:c0:b5:0f:47:26:45:4f:a5:92:c6:82:85:0a:98:
         9e:9b:84:24:bc:cc:a0:6d:3c:fa:f9:c7:6a:af:af:18:92:66:
         5f:12:83:10:a8:51:13:36:6a:5a:6e:45:5e:be:4d:d3:0d:57:
         af:dc:5e:0e:f7:a0:4e:ba:9a:a8:cc:35:5d:8f:ec:92:c1:80:
         b6:25:5c:2e:b2:ab:b6:20:14:53:f5:0f:84:b4:61:ac:31:2f:
         af:d5:a0:8f:65:76:29:55:67:2a:3e:d0:42:67:35:c6:6b:e7:
         6c:6c:df:23:64:99:27:14:54:d2:bf:dd:1f:2e:a3:2a:64:79:
         66:9c:b0:04:01:e6:30:0b:1d:a4:4d:f1:46:d9:15:80:62:8e:
         19:2f:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:46 2026 by rpki-client