Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          2GfCeMVNTxaO4ysNGVLQ9mQDBCs5nV6lQG7FY3VHNJA=
Subject key identifier:   F1:C6:95:1C:37:40:22:1A:8A:C4:3A:5D:CE:77:14:51:35:5A:C0:A5
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       019CAD902D9EC60113E6A8A57331623E743D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0F1E
Signing time:             Mon 02 Mar 2026 08:00:33 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:33 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:33 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: hqSXKSIXXBv82NHUcpeXZlWz5rdaKKznW2opJSVd02c=)
                          2: X9p1dpq5cNTg4oaZ6x30uyHelQI.roa (hash: D5fNoAic1Tp57BY17A3hU+C+OdDJaGcq/k7ZyehvTB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:2d:9e:c6:01:13:e6:a8:a5:73:31:62:3e:74:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Mar  2 08:00:33 2026 GMT
            Not After : Mar  3 08:00:33 2026 GMT
        Subject: CN=f1c6951c3740221a8ac43a5dce771451355ac0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:e5:86:10:8d:d1:39:e2:e6:9a:a1:dd:89:
                    48:4a:15:71:c9:4c:ba:e5:7e:7f:45:a5:f7:77:7e:
                    af:d4:d0:f3:e0:a7:87:7a:f1:83:35:05:92:18:8b:
                    71:16:8a:bc:c9:1e:1a:78:5a:c4:17:e4:33:01:67:
                    b5:0b:4f:2a:2c:c8:e1:18:9c:81:66:d7:08:8d:d8:
                    b2:ef:0c:01:f7:48:5d:30:ee:7c:4f:b3:9b:7e:08:
                    6b:b2:64:02:80:99:5b:b1:97:11:c6:be:e2:73:ec:
                    48:f5:98:6a:aa:ce:d0:c4:cf:5a:e5:c4:00:fb:9c:
                    7b:6f:9d:d1:75:26:73:e8:0c:4e:b4:3a:c8:e4:1a:
                    61:7d:f6:dd:22:a3:1d:c2:d0:bc:9a:52:58:a7:51:
                    9d:56:83:25:15:21:fd:ff:db:16:5e:27:38:4f:a0:
                    38:f9:ea:c2:59:0f:92:10:b9:42:a6:68:80:ad:02:
                    aa:48:05:6c:73:04:10:ab:f7:22:56:43:b8:9e:39:
                    30:02:6f:b0:e1:44:41:c6:8d:29:62:dd:fb:09:f2:
                    0f:a0:28:86:c0:fb:e1:af:01:08:0a:84:46:c2:17:
                    ba:fb:40:cf:99:81:97:84:ce:9c:25:68:52:39:d2:
                    d3:f0:5c:a8:73:c6:3a:15:79:51:7f:5e:6d:62:84:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C6:95:1C:37:40:22:1A:8A:C4:3A:5D:CE:77:14:51:35:5A:C0:A5
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ca:39:60:cc:b2:f7:7f:17:68:c2:53:5f:6c:5c:73:52:e1:
         35:95:5e:54:fe:7e:2b:eb:5e:ce:03:d3:e0:dd:bb:7d:37:a9:
         5b:4b:34:a6:e4:73:e7:f5:90:4e:e9:0e:d0:bb:ac:f5:34:ae:
         89:63:0f:27:e7:22:14:14:3d:85:25:04:9d:21:f4:8a:1d:e6:
         7f:1d:12:2b:07:a8:06:c2:49:98:df:c4:d8:8c:ee:06:17:ed:
         51:59:27:9c:ed:0e:69:bf:78:25:de:39:94:af:76:1e:f2:d8:
         c3:7e:8c:7d:cc:ab:3f:c5:c3:3a:79:71:ef:4a:c0:83:72:26:
         1f:cf:52:96:b0:04:82:52:af:33:e5:7e:b6:45:64:b9:29:0d:
         1e:f3:12:7b:3d:22:7b:25:07:a2:c3:1e:99:11:d3:95:cb:5d:
         d2:cf:bc:3b:65:b2:7f:5f:b6:6b:68:07:38:2b:d8:ca:44:63:
         f0:5e:09:ea:f2:8a:36:2a:3a:37:cf:33:79:f2:da:9c:21:aa:
         ef:ea:4c:f6:f9:28:00:2c:4f:3a:31:6a:15:e3:d2:9a:75:55:
         16:75:fe:ca:be:86:9b:9d:16:2d:11:f4:1e:37:7e:d0:8f:a2:
         5e:d8:0c:08:a7:38:83:77:09:66:4e:f1:d4:12:b9:54:b6:21:
         10:e7:8e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:59 2026 by rpki-client