Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File:                     SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier:          JizpyK3GN+mRwZ1IwRTU0lL/1AusFg9vh5aK1KRbdEs=
Subject key identifier:   E6:3C:9E:99:6C:57:19:E6:B3:9C:8D:E1:51:5B:96:38:08:39:9A:0C
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer:       /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial:       019CAEA2EAC2A7D28BBEC8A8F3AC03644123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 13:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:38 +0000
Files and hashes:         1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: UDXLAFtONHl3HCeP54OC2B/GeQJ3LGTXKfKQkbbV6y4=)
                          2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a2:ea:c2:a7:d2:8b:be:c8:a8:f3:ac:03:64:41:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
        Validity
            Not Before: Mar  2 13:00:38 2026 GMT
            Not After : Mar  3 13:00:38 2026 GMT
        Subject: CN=e63c9e996c5719e6b39c8de1515b963808399a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:6d:c6:38:96:c7:c7:c0:29:b1:b3:d1:27:
                    ab:82:d7:9f:48:d2:30:08:de:fc:70:04:32:02:90:
                    61:4a:f5:70:8c:28:fd:d1:38:42:36:35:c9:5e:a0:
                    06:45:0a:e9:e4:9c:a5:47:7c:60:5d:c4:db:db:92:
                    d6:c9:a9:f5:c1:e0:1f:7e:bb:11:1a:c5:04:20:55:
                    d0:83:8e:45:69:b2:6e:14:39:15:c5:5d:08:fb:66:
                    3b:27:69:9e:f3:be:21:8f:be:71:35:3d:19:d4:7a:
                    61:68:f6:43:7b:8b:df:b3:26:16:4d:0e:be:91:4a:
                    d0:53:17:49:68:09:c9:4a:1a:dd:3e:36:a2:c3:00:
                    4f:6b:18:b2:df:15:7a:5c:42:c6:5e:b6:fd:0e:ea:
                    7a:60:01:60:b0:4e:50:60:ee:0d:bf:58:ac:d8:24:
                    d0:14:56:a1:82:03:e5:9c:cc:ee:33:99:97:be:c5:
                    6a:44:5c:bd:42:dc:e4:f0:19:52:4b:e5:af:f2:ef:
                    cd:3d:69:9d:e3:61:de:e6:1b:42:af:94:dd:03:25:
                    f7:dd:e2:66:7b:d1:07:b9:7e:a8:57:d7:44:21:fd:
                    94:be:c0:67:17:2f:fb:3c:da:2e:d6:f5:d7:1c:fe:
                    8e:8f:00:3c:a3:f7:dd:03:73:63:f6:03:8d:f5:e9:
                    5e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:9E:99:6C:57:19:E6:B3:9C:8D:E1:51:5B:96:38:08:39:9A:0C
            X509v3 Authority Key Identifier:
                keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c1:a6:db:db:fa:b5:30:5b:78:a1:43:e0:c2:0f:3c:7e:81:
         00:18:51:3b:16:bc:69:5d:3f:16:57:bb:8c:fc:4a:c4:28:92:
         ca:12:8f:96:a4:7e:97:82:28:84:99:ae:6b:8c:f3:90:cd:43:
         67:a0:53:fd:47:eb:d0:d5:f6:3c:14:cb:05:f8:fb:c3:ca:9a:
         11:97:0d:c8:46:f9:61:ce:67:99:6d:21:fd:2f:c3:10:d1:09:
         24:81:8a:00:4b:ea:26:cd:14:b9:4b:d6:7c:b1:da:3b:40:0f:
         61:fe:16:c3:b3:58:6e:29:53:84:e6:41:4d:4a:39:a7:4c:d5:
         78:83:31:d4:ad:63:6a:12:f8:84:3a:d0:8d:93:c9:04:b4:69:
         41:b0:ed:ae:09:3b:35:0d:73:90:e2:f0:f4:7a:5c:a1:b5:b1:
         46:51:70:87:c5:a6:f7:1b:ea:26:a5:77:71:f4:d6:d9:06:6e:
         e7:b6:5b:9c:92:b4:2d:64:3a:1b:d8:a4:83:40:31:48:15:5d:
         07:86:77:d0:f4:f2:0e:27:ae:ee:9b:33:50:49:4f:23:59:3e:
         a4:4a:ab:1b:ad:62:bd:da:f3:22:2d:c5:05:f1:00:c2:dc:a9:
         cb:0e:bf:1b:b7:a4:bf:c5:f8:ba:8d:60:4c:38:8e:55:11:52:
         ad:48:75:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuourCp9KLvsio86wDZEEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGRiOTk5Y2E0Y2UyODdjNWM5MmFiMTY3YTUwMDkwMjI1
OWJiMDUwHhcNMjYwMzAyMTMwMDM4WhcNMjYwMzAzMTMwMDM4WjAzMTEwLwYDVQQD
EyhlNjNjOWU5OTZjNTcxOWU2YjM5YzhkZTE1MTViOTYzODA4Mzk5YTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs1txjiWx8fAKbGz0SergtefSNIw
CN78cAQyApBhSvVwjCj90ThCNjXJXqAGRQrp5JylR3xgXcTb25LWyan1weAffrsR
GsUEIFXQg45FabJuFDkVxV0I+2Y7J2me874hj75xNT0Z1HphaPZDe4vfsyYWTQ6+
kUrQUxdJaAnJShrdPjaiwwBPaxiy3xV6XELGXrb9Dup6YAFgsE5QYO4Nv1is2CTQ
FFahggPlnMzuM5mXvsVqRFy9Qtzk8BlSS+Wv8u/NPWmd42He5htCr5TdAyX33eJm
e9EHuX6oV9dEIf2UvsBnFy/7PNou1vXXHP6OjwA8o/fdA3Nj9gON9ele8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY8nplsVxnms5yN4VFbljgIOZoMMB8GA1UdIwQY
MBaAFEkNuZnKTOKHxckqsWelAJAiWbsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUt
OThlMjVlMDQ2OTA4LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUtOThlMjVlMDQ2OTA4
LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMGm29v6
tTBbeKFD4MIPPH6BABhROxa8aV0/Fle7jPxKxCiSyhKPlqR+l4IohJmua4zzkM1D
Z6BT/Ufr0NX2PBTLBfj7w8qaEZcNyEb5Yc5nmW0h/S/DENEJJIGKAEvqJs0UuUvW
fLHaO0APYf4Ww7NYbilThOZBTUo5p0zVeIMx1K1jahL4hDrQjZPJBLRpQbDtrgk7
NQ1zkOLw9HpcobWxRlFwh8Wm9xvqJqV3cfTW2QZu57ZbnJK0LWQ6G9ikg0AxSBVd
B4Z30PTyDieu7pszUElPI1k+pEqrG61ivdrzIi3FBfEAwtypyw6/G7ekv8X4uo1g
TDiOVRFSrUh1jw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:18 2026 by rpki-client