Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File:                     QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier:          QOGUiBpHim+HaD8BWR5PQPnwubLysf40aqDUKC5VYrc=
Subject key identifier:   79:D5:ED:93:7E:42:E7:57:E6:E7:06:36:3C:EE:96:4E:9B:AA:2E:26
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer:       /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial:       019CAE35AE2D89B8180A50CEF13D8A32DAAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 11:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:19 +0000
Files and hashes:         1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: HqEdRLHnPSvwfhDrc6ykoZT0KMFEeSZug/S3NQsfqFY=)
                          2: q1-RUpRuUBWbVUTXhumFkZMtJE0.roa (hash: 3qe5W+9kAiScEd0vW+cxVBghgrjhqeOcbbAjhxWvcx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:ae:2d:89:b8:18:0a:50:ce:f1:3d:8a:32:da:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
        Validity
            Not Before: Mar  2 11:01:19 2026 GMT
            Not After : Mar  3 11:01:19 2026 GMT
        Subject: CN=79d5ed937e42e757e6e706363cee964e9baa2e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:f7:9c:b2:7d:b2:ba:ab:cf:13:fe:ce:d8:
                    43:1a:10:5a:d9:98:04:0e:d1:a3:58:30:1a:a3:3e:
                    d0:79:74:5f:b3:b0:ea:d5:1d:4f:24:dc:09:ed:72:
                    37:d3:cc:9c:a3:96:8c:4a:c7:86:85:2c:c3:9e:cf:
                    1d:1c:af:f1:af:1c:08:25:04:db:9a:47:53:46:4f:
                    7b:ed:0c:32:17:f4:d4:61:49:ac:60:81:2c:ad:be:
                    65:d4:13:1d:1d:9e:cb:c3:96:ad:06:c3:33:7c:4a:
                    0f:71:8f:03:7a:87:c3:02:ab:b5:55:c3:3c:d3:d6:
                    75:89:1f:5c:ce:ef:39:d2:2f:c0:bf:53:f4:67:27:
                    e4:7b:d7:a1:12:6f:c4:44:83:47:a4:99:19:26:69:
                    b0:ae:b9:49:5b:d9:f4:b9:44:7d:06:e2:c7:db:95:
                    59:13:34:67:b7:12:43:22:c5:0f:a0:fc:ac:f4:19:
                    85:b0:1b:ec:4f:dc:10:47:a2:90:27:67:05:da:92:
                    4a:05:53:23:32:29:b1:bf:0c:1a:14:42:0c:9a:34:
                    dd:16:7d:36:ce:5e:4f:16:3f:6a:ac:e1:21:47:d5:
                    7b:84:e9:06:9f:d8:6c:38:50:15:ed:3e:26:4a:ea:
                    40:e0:b7:73:b9:3f:8c:73:06:44:b4:64:3a:a4:1d:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:ED:93:7E:42:E7:57:E6:E7:06:36:3C:EE:96:4E:9B:AA:2E:26
            X509v3 Authority Key Identifier:
                keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:84:1c:c5:dc:ad:d7:63:74:38:8c:b8:d0:dd:7a:57:a6:
         00:bc:f6:47:c5:8f:46:58:3b:54:2d:f9:b5:57:b9:0f:17:19:
         b9:de:61:60:ea:23:9e:e4:4e:9e:60:55:24:c7:77:87:74:a9:
         cd:5e:f7:2a:eb:a0:00:e2:af:91:d0:a7:8c:3e:5a:03:8e:03:
         15:82:8f:50:b4:88:93:3d:e2:f8:81:2b:b5:26:07:17:e9:11:
         08:6b:9d:fc:60:e5:88:ed:1c:d6:b5:90:07:00:18:d6:d5:2a:
         c3:06:86:af:f1:cb:f5:21:d7:e8:48:19:dc:2b:68:82:ff:ac:
         5c:9b:c4:1b:4d:77:6d:c4:a1:89:9f:b8:9f:df:30:ad:f1:7b:
         bb:db:69:e3:43:f8:43:4f:b0:de:a3:2a:05:9a:4a:bf:48:e4:
         df:92:79:92:af:4b:06:a3:65:9e:05:36:05:be:ff:e5:9e:61:
         40:a6:c3:bf:52:d1:85:a1:23:67:b0:77:83:1c:40:f8:7d:1d:
         69:9d:3a:e5:7d:31:5e:00:39:3a:65:04:5d:03:03:ff:66:f7:
         69:06:4f:77:6a:e4:0e:91:e8:93:5d:fc:2a:ec:dd:ce:e6:36:
         da:8c:50:fe:53:25:f4:13:12:d3:19:90:a6:85:b2:cd:10:98:
         60:e2:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:15 2026 by rpki-client