Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
File:                     qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json)
Hash identifier:          +NYunuSnryQwL8jEul5Qbi49J/Uz07XVhrmLloispc0=
Subject key identifier:   88:29:DB:CB:09:17:75:B0:78:C8:52:C2:45:FB:61:AC:22:6C:80:8D
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Certificate issuer:       /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial:       019CAD59A498853D41235D17DBD455CA50DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
Manifest number:          0F59
Signing time:             Mon 02 Mar 2026 07:00:59 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:59 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:59 +0000
Files and hashes:         1: G3s7fFZiJFqITolnCSvINrflYsk.roa (hash: jskO07AkOlpZvjtyrYTNt3+GnH5jKgWqutiH7gmA7J0=)
                          2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: HbE9Q8EP97qHpmXdKeljOi8HCPgV1cfmbEZXeSmMUdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:a4:98:85:3d:41:23:5d:17:db:d4:55:ca:50:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
        Validity
            Not Before: Mar  2 07:00:59 2026 GMT
            Not After : Mar  3 07:00:59 2026 GMT
        Subject: CN=8829dbcb091775b078c852c245fb61ac226c808d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9a:e5:c0:19:ed:9e:3b:49:6f:fe:3b:62:cc:
                    51:64:7d:c2:2e:1c:99:1f:f3:8a:47:e8:5f:8b:13:
                    4f:b4:36:f6:b8:57:dd:06:42:73:ef:e0:ce:68:07:
                    11:e2:c8:54:df:23:d9:6a:ed:e8:65:6f:1f:11:26:
                    3f:64:69:a5:82:dd:3a:b9:2c:9c:d9:54:ef:d7:a4:
                    3d:6d:31:c8:59:12:4f:98:ac:6d:f6:2f:46:1c:3f:
                    d5:60:7b:97:b1:da:8c:6f:85:77:e3:26:ca:84:58:
                    0d:b6:ce:95:4f:a5:24:57:d3:ba:af:f5:49:c9:92:
                    79:13:6d:7a:79:5e:e6:74:eb:58:6a:ff:9f:47:9c:
                    5f:0d:77:fd:d9:a1:1d:bb:0a:fc:40:22:29:6a:90:
                    e7:c2:ca:fc:ca:d8:8c:34:40:43:a3:d3:52:ca:6b:
                    b7:d0:e5:77:21:c1:da:91:be:ab:26:34:b3:c7:5c:
                    90:5b:77:03:d9:5a:a2:b8:4c:44:2b:1e:ec:aa:24:
                    07:e0:38:f6:08:29:a7:34:66:ff:72:f1:18:54:51:
                    4a:2f:d1:1f:a9:33:e5:f5:40:94:09:ff:67:6c:72:
                    d9:bb:87:c6:9a:16:a2:a9:14:ff:df:30:47:5b:ed:
                    6e:a3:6c:8b:8d:66:df:61:f6:1f:b2:62:38:2f:e0:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:29:DB:CB:09:17:75:B0:78:C8:52:C2:45:FB:61:AC:22:6C:80:8D
            X509v3 Authority Key Identifier:
                keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:48:fb:f6:68:18:a6:b1:84:7e:e4:95:73:6b:de:8e:b8:
         ea:28:73:66:9e:09:2c:eb:c8:e7:e8:04:3a:7b:2d:ca:5a:22:
         a3:e3:8f:1f:d0:29:c9:8e:74:60:47:41:b8:62:8e:10:1b:d3:
         ab:12:dd:47:d1:91:94:56:b8:8d:0b:4b:3c:9d:53:32:bf:cb:
         63:f6:67:78:3d:7b:bf:7c:18:bf:01:3a:95:62:6a:15:cb:d8:
         2e:52:a7:9a:2f:82:46:7a:76:37:9a:9a:13:4b:8f:dd:85:b3:
         fc:80:cd:92:f0:5f:cb:71:3a:18:a0:38:4b:20:e8:7e:27:87:
         01:6b:e0:49:5e:46:f4:a2:45:d6:e6:1b:ff:f7:c0:e6:eb:9b:
         9b:b9:b7:eb:2c:dd:f1:68:8c:b5:ce:4f:54:3f:53:c4:7b:21:
         1a:65:8d:79:92:9e:50:a3:1d:5b:a2:e8:6c:ff:d6:0d:96:cb:
         29:02:61:53:3a:4c:53:99:a7:e9:e7:1b:e2:a4:ec:dc:cc:73:
         77:bb:a6:e9:5f:14:32:fa:d4:85:db:9a:ee:79:71:86:57:83:
         cf:4d:ca:50:4d:e8:86:e1:04:3d:23:89:54:80:84:96:4f:cb:
         4d:00:7a:8c:61:7d:46:f9:44:f8:f4:e8:e8:1a:fd:94:a0:2c:
         6e:82:aa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:22 2026 by rpki-client