Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File:                     qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier:          cedjKCfs1owWVyw8NVASWB6SjG/pUZPoqXn9Miy8ED0=
Subject key identifier:   C5:30:D1:FA:07:36:BE:C2:A3:D0:33:D0:A7:DE:77:73:94:02:5D:3B
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer:       /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial:       019CA7C509B2AA5C9B54B96C19E8C89A38A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number:          F1
Signing time:             Sun 01 Mar 2026 05:00:34 +0000
Manifest this update:     Sun 01 Mar 2026 05:00:34 +0000
Manifest next update:     Mon 02 Mar 2026 05:00:34 +0000
Files and hashes:         1: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: FWXLQoF0VGwjb2aETs4MgqX7N2aLqscVShYaampig/8=)
                          2: snjhD4ZbdnCjhHGNejLaziB-EQw.asa (hash: k4YrVwNF0xC0R0c1Vt2SsaD9GQCIRybl7XtCYC8QQBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:c5:09:b2:aa:5c:9b:54:b9:6c:19:e8:c8:9a:38:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
        Validity
            Not Before: Mar  1 05:00:34 2026 GMT
            Not After : Mar  2 05:00:34 2026 GMT
        Subject: CN=c530d1fa0736bec2a3d033d0a7de777394025d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:6b:92:bf:14:e2:98:65:ac:69:2d:37:42:
                    db:f0:c9:ad:79:df:e0:0f:7e:ba:ea:8b:a1:ce:52:
                    58:fe:6d:26:76:62:48:a4:3a:a0:8a:55:61:c1:83:
                    b2:ba:b7:b9:24:02:80:11:38:f9:0c:98:db:19:77:
                    c9:e6:16:22:51:8c:e2:0b:59:68:31:d6:2d:0f:76:
                    ad:38:10:05:19:e3:20:8c:72:b1:0b:93:c7:08:d8:
                    3d:49:c4:4b:bc:40:87:bc:e2:0d:fb:e7:37:f5:01:
                    27:49:e9:4b:06:cc:f4:fa:b1:78:dc:3c:18:b4:84:
                    2d:32:c9:9d:53:b6:1d:aa:8e:06:cc:d0:4e:f0:5b:
                    30:ab:02:0c:4a:bd:e5:1c:2f:a9:34:3f:10:b6:8d:
                    67:a3:fc:c2:1b:63:9d:02:37:6e:fc:ef:33:41:98:
                    be:26:9c:20:8b:fa:0a:0a:52:59:45:63:14:70:a6:
                    4c:19:65:95:fa:b7:3b:52:27:b5:51:7c:d7:b1:69:
                    66:3d:7c:8e:3a:fb:d4:40:d2:82:f9:74:fc:dd:c7:
                    0d:ac:83:b3:80:17:5e:30:64:a7:f3:ac:0c:05:23:
                    93:10:33:23:31:86:bb:5b:ff:03:21:9b:bb:06:c4:
                    ad:79:7b:ae:65:9c:02:bc:b7:f9:c4:43:ce:07:6c:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:30:D1:FA:07:36:BE:C2:A3:D0:33:D0:A7:DE:77:73:94:02:5D:3B
            X509v3 Authority Key Identifier:
                keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a2:e6:a7:5d:c2:f6:20:83:d2:81:09:e9:58:15:00:de:c3:
         c3:cc:29:ba:67:eb:fe:ad:f7:ab:dd:80:bc:42:dc:31:92:93:
         fb:a9:44:d8:51:65:fa:5c:97:66:0f:da:60:07:b5:aa:7d:a2:
         d4:64:f3:5a:7f:46:12:53:74:92:14:52:10:3c:1d:03:f3:c0:
         18:2e:24:d7:a3:8e:24:cb:88:1d:c2:2d:92:bd:1e:6e:dc:6b:
         0c:77:b2:85:de:e6:e8:d9:69:ae:da:09:97:0f:c0:8c:13:8a:
         a8:2d:c7:5e:9a:4e:47:0c:40:63:da:9a:f3:7b:a4:cc:ae:3f:
         03:6f:dc:5a:24:dc:df:45:fe:e9:d0:21:7d:26:7b:2b:af:c9:
         00:b4:3e:dd:97:4d:96:e6:4f:c7:d6:b4:43:a2:81:2d:a1:f6:
         29:bb:30:19:76:30:c0:5f:8b:b4:b2:81:c7:82:e0:0f:b3:f3:
         b4:d1:4c:4f:35:d5:a0:2f:92:72:94:6e:52:bc:6c:75:64:4b:
         95:6a:82:3f:59:7d:9d:45:0a:a1:82:81:48:53:9d:47:8f:ff:
         47:34:09:84:8b:b9:9a:2c:d1:e8:85:28:e8:f4:a9:26:41:9c:
         fa:c4:bf:ba:24:30:58:c5:a2:f5:4f:eb:ad:75:99:a3:90:69:
         73:63:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:59 2026 by rpki-client