Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          0wI9QZ/tPbPOCFMl7kiw2P9n74vgxeBirsdMAzbbdp4=
Subject key identifier:   21:00:A5:37:DC:38:2C:AB:79:E1:0A:F0:69:B8:8E:5A:59:41:29:09
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       019CAC46C421474DA2AE78628B4E2F4C21BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          1878
Signing time:             Mon 02 Mar 2026 02:00:44 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:44 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:44 +0000
Files and hashes:         1: A7_y22PIg0hPAMpCsH_sCKGtyg8.roa (hash: jYk6V/JIFZujPYouL6dTCjVEwQr4OkGYQk0D5ScRZVo=)
                          2: Ksd3OiB_AIxcmUtGOKUPQuXbBbs.roa (hash: mbt2rFbow8jwUY5FOtfvQrtCibBO+H5M+VNJrWE5hUY=)
                          3: bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa (hash: BubMw86WqvaBOSfoNUBrIVcL+fL5Ns64cLxY/APuJ7E=)
                          4: f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa (hash: PDGWp7iUzyz4cXF2Z4OAk/knVLv4u1kvbR76Ezmz3vs=)
                          5: j4Ert-J3RYXgEKpLcLx5_T9dxS8.roa (hash: keE/Qns0D+PUwgQtZ9LOIqamoxuah8ZLWQxn+5RiOWw=)
                          6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: sdV6Ho7dRnBTG/jxV7i60SFegeKIf2ZKkZ3Ce7fRLgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:c4:21:47:4d:a2:ae:78:62:8b:4e:2f:4c:21:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Mar  2 02:00:44 2026 GMT
            Not After : Mar  3 02:00:44 2026 GMT
        Subject: CN=2100a537dc382cab79e10af069b88e5a59412909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:c6:b4:07:e4:39:d2:ad:d1:3a:a0:8c:1b:
                    72:4c:94:ad:7b:50:1b:48:37:a7:73:28:cc:c5:ee:
                    d0:c9:94:50:9d:a7:82:bb:53:a8:40:dd:b1:c3:e5:
                    7a:fc:9b:19:dc:8f:d3:bb:9e:ca:d4:1b:6c:35:98:
                    70:15:7e:76:f3:56:91:9b:05:d6:49:14:36:96:a4:
                    cc:cd:4b:10:c1:b1:5c:f6:f8:05:53:b3:d4:92:07:
                    e0:87:ab:6f:e6:dd:6c:d6:2e:09:75:da:30:0a:8e:
                    c2:3b:3f:59:99:9b:18:74:7f:05:63:d8:1f:57:e5:
                    43:ea:d5:f2:94:e2:11:27:cd:14:32:e1:d4:f5:b6:
                    65:09:2c:8d:1e:37:cd:35:3a:5e:bc:a6:9e:85:0c:
                    43:e6:d9:62:60:56:d1:75:00:25:82:5a:45:80:8d:
                    0b:90:5c:dd:ff:8a:9d:20:75:65:32:a2:cc:69:45:
                    d2:46:9a:98:6f:4c:d8:91:82:b7:21:3a:4d:0b:f3:
                    b5:ea:fc:d0:83:4f:55:74:73:ab:f7:da:da:63:67:
                    11:8c:b8:07:4e:93:bb:2d:43:56:7a:bb:48:0f:d7:
                    8a:9c:31:44:a1:f1:37:a5:14:e0:01:3f:5c:09:a4:
                    8d:91:7a:26:1f:06:5f:ee:ef:6f:e2:72:a3:e6:73:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:00:A5:37:DC:38:2C:AB:79:E1:0A:F0:69:B8:8E:5A:59:41:29:09
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c7:c0:7a:51:f4:ed:51:fa:3c:f7:7d:dc:a2:fb:b3:21:91:
         2f:41:a3:f4:92:b7:34:74:fa:e0:52:86:3e:55:67:ff:93:78:
         4f:a4:69:85:3e:b5:e6:e3:15:48:0d:6c:3d:51:74:1c:7d:66:
         24:2c:0a:9f:28:a0:94:1a:89:25:3e:06:22:27:63:76:d4:c8:
         78:85:3d:a9:3c:e9:6a:e8:c1:78:31:cc:50:d3:4d:0f:69:4d:
         c6:eb:64:1f:45:54:82:d4:23:4c:7e:c7:61:fa:27:a3:dc:34:
         38:6a:37:80:59:a3:03:7e:54:f3:fb:a4:69:ff:ca:b4:33:da:
         61:23:0d:22:f2:d5:63:d0:12:23:db:19:c3:26:ee:b3:4f:65:
         59:69:90:34:21:e5:81:34:f5:27:4b:1f:22:b2:10:d0:54:c7:
         2f:83:f8:fe:53:e8:3a:8d:a3:99:a8:f8:59:bf:e8:a4:57:ae:
         3d:b5:a7:6a:a3:5a:ef:95:fd:65:eb:80:33:ee:5e:c4:38:57:
         9d:e1:f9:ce:03:58:90:53:64:3e:a1:30:2d:f7:56:d8:98:6b:
         2e:38:d0:8f:c7:30:70:e7:7d:a9:e8:74:82:7f:04:4b:a8:cf:
         ac:6c:82:01:27:1e:13:34:dd:4d:c9:2f:50:01:aa:a7:b9:2a:
         23:be:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:27 2026 by rpki-client