Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
File:                     QpBWwzjRbJLN_aHlXQk2givFDNI.mft (raw, json)
Hash identifier:          3fPnyIFoI2lNl+E/xOME2uZAX8VTzQijOwgtMQi7Yew=
Subject key identifier:   4B:D2:6B:F8:16:9B:68:36:D4:E0:2E:FE:9C:D6:BE:FD:F7:B0:D6:CF
Authority key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Certificate issuer:       /CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Certificate serial:       019CAC106040488ACA9476F8F2C4ACA445FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
Manifest number:          06DB
Signing time:             Mon 02 Mar 2026 01:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:19 +0000
Files and hashes:         1: QpBWwzjRbJLN_aHlXQk2givFDNI.crl (hash: 6yqm+0yjMO9nOlubZFx4UgYaOQlwCHZPgmTKetW6+/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:60:40:48:8a:ca:94:76:f8:f2:c4:ac:a4:45:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
        Validity
            Not Before: Mar  2 01:01:19 2026 GMT
            Not After : Mar  3 01:01:19 2026 GMT
        Subject: CN=4bd26bf8169b6836d4e02efe9cd6befdf7b0d6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:11:53:59:bf:62:df:73:f9:45:eb:a0:9a:
                    e7:94:a4:a2:2c:94:0d:be:73:fe:39:92:00:91:41:
                    f5:cd:8e:45:85:3c:58:56:34:ff:fe:53:10:f0:32:
                    e4:05:94:5b:1d:a3:ed:6f:a6:9a:2a:0a:6a:05:37:
                    cd:27:fa:f7:29:e2:cf:81:b4:0c:10:e5:b2:db:d1:
                    7f:ca:9c:60:63:86:16:05:a8:82:4b:7c:c0:95:0c:
                    c5:57:43:d6:c9:f5:71:e4:dc:17:cc:9c:99:c8:40:
                    ed:ce:05:e2:c9:33:94:14:92:0b:35:7c:c1:0a:45:
                    aa:fb:07:dd:4d:88:0e:c2:bf:c1:b8:5f:df:6c:86:
                    76:ee:2f:4d:75:4e:93:0b:33:b1:de:6f:a3:69:b9:
                    c1:88:98:98:25:11:ad:05:76:06:d2:44:2a:fe:83:
                    f2:f1:31:a8:f8:aa:f8:db:42:fa:1b:e8:d6:a9:4b:
                    56:8e:a2:9e:1f:2c:5f:a8:5b:03:83:c9:cd:06:4e:
                    19:c4:ec:ac:dc:6c:d5:c0:7e:d6:b3:17:1a:a3:fd:
                    e0:14:71:10:fe:41:f8:89:ba:70:3d:80:78:47:f4:
                    6d:ba:1e:6e:1c:ab:da:57:6d:5e:9a:a7:30:03:37:
                    2f:64:f0:1e:84:3e:c0:8d:86:12:70:01:9b:21:9b:
                    ac:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D2:6B:F8:16:9B:68:36:D4:E0:2E:FE:9C:D6:BE:FD:F7:B0:D6:CF
            X509v3 Authority Key Identifier:
                keyid:42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:be:61:48:33:e1:53:a4:08:a9:c1:9e:70:2a:ba:34:9f:83:
         74:e4:a6:a2:f1:01:8d:c0:56:9a:1b:80:6e:8b:9a:49:f1:34:
         dd:17:60:6a:00:42:3e:02:fa:5a:26:b7:ff:03:d4:c9:58:e1:
         58:d0:17:ee:a7:3c:f0:12:47:20:be:79:5c:fc:73:a2:18:bd:
         36:82:ec:f3:42:7e:d5:6e:89:fd:57:6c:78:dd:60:6c:64:7c:
         6c:ac:4c:30:f5:f5:1a:14:a4:4e:6d:4a:aa:75:b6:6c:e8:b9:
         03:63:08:64:3f:f7:a9:89:01:4c:7d:15:17:99:65:10:16:e0:
         97:38:54:e9:87:57:ff:6b:27:92:7c:98:ac:12:41:99:61:f4:
         74:df:d2:18:76:33:14:78:5c:eb:a3:02:e6:f0:6c:34:a2:ee:
         ee:e5:96:8d:55:64:b5:0a:1c:9b:ab:29:59:1c:f2:04:80:e5:
         ea:29:40:f2:f6:b3:06:28:1e:46:31:26:23:58:1d:57:26:d9:
         6f:14:2e:0e:31:bd:90:1d:bc:57:c2:7c:09:27:5c:be:7a:31:
         43:43:2b:34:03:14:ed:72:80:ab:e2:00:49:7f:d3:72:7e:5e:
         a4:68:33:5c:6f:e4:d9:46:3d:ef:a4:e0:a5:41:84:74:0f:dd:
         be:81:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:17 2026 by rpki-client