Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File:                     QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier:          jl71TGF60DVc/cRG8c0ra98AZ/Ei9plUKmacsVRu0z0=
Subject key identifier:   C7:E1:BB:56:0F:2C:4F:70:73:0C:A7:88:B4:EA:6E:D6:A0:30:F3:2E
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer:       /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial:       019CAC46C1A9E987D6023FD658849CED5984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number:          035A
Signing time:             Mon 02 Mar 2026 02:00:44 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:44 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:44 +0000
Files and hashes:         1: 0fZE0uIvZ6ZkQgfjfFBSc-iQ15Q.roa (hash: XBQwm3jQjgkMj0LZQlnffF8nBMAdgqCU7K93V782wzA=)
                          2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: 1TSvQnCOoujNMBMRwnAaBSWLDT7DXRVlflcfscNqf94=)
                          3: VL-lnxlE6fflxqRRlw7b9MCnGvo.roa (hash: GtOH60oIJtJHnm++7YABJtPUhpfnGJz3iJ4jvFL6ZBk=)
                          4: hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa (hash: yt1gpylTF5DwEVRgiWOOxqt2J7YwsxusRFsZDCgtRfE=)
                          5: kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa (hash: qZYqyURYcynOIWE252O3MtzO4WaOHKWvGwoZG8pxdGk=)
                          6: sJ4fBRlYkaW2DfbwT41aefbNZtc.asa (hash: KPvz8H9YcmTAaol7AmPzK6hmkkiOVVm9HlZufolZpd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:c1:a9:e9:87:d6:02:3f:d6:58:84:9c:ed:59:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
        Validity
            Not Before: Mar  2 02:00:44 2026 GMT
            Not After : Mar  3 02:00:44 2026 GMT
        Subject: CN=c7e1bb560f2c4f70730ca788b4ea6ed6a030f32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:7c:61:32:f7:97:6c:86:97:74:92:4a:5b:
                    3b:0d:36:38:19:1c:45:d5:f7:58:a3:6f:89:34:5f:
                    65:48:29:6c:c7:86:ee:11:f9:c4:98:c8:0c:64:df:
                    fe:b1:4b:cd:64:65:bb:78:a7:cb:6a:4a:a8:0b:16:
                    b9:0f:8c:a8:06:8d:dd:e3:4f:16:9a:e4:5f:d1:b1:
                    07:7a:49:36:41:00:21:a4:fb:8e:e7:71:fd:14:6a:
                    6c:3d:8f:52:2f:2f:d9:f8:50:81:50:fd:06:cc:b3:
                    dd:31:75:dd:f2:26:c2:74:67:d1:12:72:0a:cd:1a:
                    28:8d:4e:42:04:a1:00:7a:23:5e:4e:8d:c1:92:df:
                    94:85:18:fe:50:b2:a2:af:4c:2f:a4:ce:ba:94:b0:
                    3e:ee:e3:f1:6b:df:77:e9:3e:9d:70:70:9b:6a:47:
                    f7:b1:e3:c0:cd:cd:17:63:04:44:33:22:46:df:90:
                    dc:79:04:c9:f6:06:76:e0:c5:a2:7d:f1:11:19:20:
                    24:fa:c4:4b:35:d0:a5:56:de:9b:50:b1:6d:5f:fd:
                    37:99:d9:f3:ae:60:e0:25:b5:02:c3:d6:96:97:0c:
                    06:a9:f4:7d:5f:a5:c2:8b:0a:87:8e:e6:35:03:ad:
                    70:81:be:f4:c5:eb:83:fb:07:bf:26:23:c1:8e:0c:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:BB:56:0F:2C:4F:70:73:0C:A7:88:B4:EA:6E:D6:A0:30:F3:2E
            X509v3 Authority Key Identifier:
                keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:fc:98:d7:5b:ac:96:0d:64:a9:f1:04:bb:d3:83:e7:c9:
         c4:0b:bb:f3:95:1e:fe:d7:33:8f:29:ae:0d:29:43:c1:03:70:
         f6:00:a0:51:ff:70:d7:31:52:63:5c:7f:97:35:78:2b:11:eb:
         96:f9:36:54:02:2c:61:a8:82:4e:89:2b:e2:50:84:26:d8:6d:
         1b:61:7e:95:46:8a:47:af:fa:0f:37:e0:28:49:49:17:69:1a:
         56:09:c4:29:2a:1c:b6:aa:70:36:e3:43:e8:d4:d2:69:2e:7b:
         56:33:4d:f0:c5:b7:97:de:69:4e:b0:dc:f9:d9:94:2c:00:81:
         5f:96:4a:e0:db:43:b1:23:c9:6a:da:33:c2:b0:c4:a4:0f:64:
         c3:bf:04:6b:c1:69:e5:ec:42:a8:f2:0f:18:0d:81:cb:cc:95:
         04:a2:e2:47:3f:bd:3c:c9:1a:23:ba:c4:89:a7:b9:88:81:ea:
         7e:ba:c8:0b:59:6d:b3:14:9d:8b:81:16:51:e4:8c:20:47:9d:
         93:f0:3d:0b:13:37:17:71:c7:80:57:16:54:cf:80:c4:e7:bd:
         19:84:06:2d:d7:7c:8b:76:b4:9c:bb:85:5a:62:bb:f8:3b:1a:
         a9:dd:1e:e0:11:20:20:55:9f:6f:a0:b8:b2:1a:d2:11:8e:10:
         6b:d7:78:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:06 2026 by rpki-client