Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          EJjgUmXkn1zyP9WBZLUFF7uKrx5T6kcKBdq4CQRa71g=
Subject key identifier:   C3:F0:99:42:BE:E5:25:9E:50:FD:FA:62:5C:5A:53:57:D1:25:8E:C7
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       019CABA212B2A8F59B1FF614A4A46404F44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          08D4
Signing time:             Sun 01 Mar 2026 23:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:51 +0000
Files and hashes:         1: 1--6A0fn2NhA1NZd62Q5I9zcdB1E.roa (hash: EH25i1o06YPHiAuJedj6ere5DhO1CqohFt6zhHaGS9w=)
                          2: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
                          3: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
                          4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: qrzS4YosGAbALpTixeipPOXZ9NLYDo7GXHo0aidjOi8=)
                          5: sef3oIWVUvY_zvFY7Q-dmEYwMeM.roa (hash: KUYDRoZPtUS/Sglg5oZKEXcSGG037brQKOBSD2zs9MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:12:b2:a8:f5:9b:1f:f6:14:a4:a4:64:04:f4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Mar  1 23:00:51 2026 GMT
            Not After : Mar  2 23:00:51 2026 GMT
        Subject: CN=c3f09942bee5259e50fdfa625c5a5357d1258ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:93:9c:2a:85:42:11:43:9e:f8:81:08:0c:
                    ea:25:69:f3:70:4e:98:b0:14:a6:28:ac:c0:07:0a:
                    3b:cd:c9:27:8d:15:17:4a:5e:0b:f6:ea:d0:ea:cc:
                    3b:80:d6:31:35:52:96:3d:e3:12:be:e4:8c:73:b9:
                    05:fc:4f:48:9e:57:3f:5d:5c:0b:73:fb:4e:8d:e6:
                    1b:2b:71:21:98:ef:5b:e7:96:0d:66:a8:be:29:21:
                    54:57:9e:3e:b2:e3:b9:32:b9:be:04:9d:b7:8c:57:
                    7f:d5:92:b6:dd:83:32:a3:01:10:01:9f:ac:41:47:
                    90:ad:3a:fc:47:22:34:38:24:25:77:46:59:1e:e4:
                    ae:95:34:16:b1:2b:a7:3d:b8:5c:e8:fd:61:a5:bf:
                    8a:57:ad:0c:ee:18:1e:1f:15:5e:fa:1f:53:90:cf:
                    eb:89:29:53:77:87:3f:70:cb:0c:20:c5:0f:f9:c2:
                    70:8e:ff:6d:9a:70:e5:a0:de:01:31:d7:a1:c4:75:
                    c4:78:63:f3:5f:e5:99:0a:37:de:63:51:9f:c0:c0:
                    97:0d:d1:42:e1:83:9f:0d:f8:59:fc:cf:f9:4f:23:
                    10:3e:5c:3e:ec:69:84:6b:99:25:ce:cb:28:95:ba:
                    ef:2e:96:17:b9:05:8b:8c:9c:30:9e:7a:83:b5:a8:
                    83:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F0:99:42:BE:E5:25:9E:50:FD:FA:62:5C:5A:53:57:D1:25:8E:C7
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7f:8d:41:82:df:bf:6c:10:3d:a0:0c:c1:cd:a5:ef:ee:e2:
         1e:84:73:9b:fa:18:21:05:4b:bc:4c:02:7f:a2:a2:8c:f6:e8:
         e7:ab:af:a8:d0:bf:53:2a:6a:c1:61:2c:a9:15:80:f1:5d:25:
         4e:93:c6:1c:2a:16:d4:56:6f:d5:09:59:c6:db:83:58:67:18:
         79:f5:8d:07:3e:2b:0b:74:8b:dd:bd:85:35:ca:1d:6e:c1:df:
         3d:bb:40:ef:8a:3f:bc:f4:9c:71:e7:f1:20:3e:ec:28:13:af:
         f4:a4:17:76:3b:70:6e:44:a9:3a:9b:87:8a:a1:51:0c:12:df:
         ba:50:d5:2b:91:08:48:f8:d8:b0:7e:b9:da:97:6c:23:b1:09:
         00:9e:97:f4:8c:91:ae:95:31:1f:a1:b5:96:9b:e1:76:3e:1a:
         c5:16:8f:1d:03:ff:e7:37:31:35:61:c4:47:1b:2a:cb:4a:0e:
         65:1b:ca:a6:b2:f2:71:8c:de:53:2e:96:a1:37:19:ce:9a:1f:
         32:48:48:b7:fc:d3:c9:b7:56:28:0d:66:5e:f9:60:d3:71:7a:
         2c:b8:49:49:56:40:06:92:cb:b2:e4:62:02:1f:f7:c7:88:7d:
         40:b7:d3:41:23:2f:30:f6:19:72:43:d5:65:0f:ad:16:0b:eb:
         1c:91:d9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:37 2026 by rpki-client