Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File:                     QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier:          RFD37OkhkHH2/MMiAw4iqnw6wPGrr5PY1so/jmDdY3g=
Subject key identifier:   3E:FB:37:0A:0F:6A:1C:5E:26:DE:59:39:31:0E:87:11:F9:56:1B:CD
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       019CAA58DFCD04AD2EDC3CB398373EFCCA76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number:          188A
Signing time:             Sun 01 Mar 2026 17:01:17 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:17 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:17 +0000
Files and hashes:         1: OTudHmFNPy5T-L1hWQnog6A_ceI.roa (hash: wIvVhud/9mGvpy1rcC5MEiOLhE/0LwqjcBJHlLA5qFQ=)
                          2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: YTf3G4GEICP2Fq7Cswt0axGzGfl4/8xCoV7OhVdd1w0=)
                          3: W7xXQepVYqOcN3HtIVDmtoxvm_U.roa (hash: 1dqGMvwgE4nyLDHC/icI0sBfdJkRLj5FLFOTHDIJ6Uo=)
                          4: WlAKMNPruSZgFaPvtYJyDu67Od0.roa (hash: 45tdzajp934hoCjwF+mGUtWY46Eoj3bjg9Xls4lMV3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:df:cd:04:ad:2e:dc:3c:b3:98:37:3e:fc:ca:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Mar  1 17:01:17 2026 GMT
            Not After : Mar  2 17:01:17 2026 GMT
        Subject: CN=3efb370a0f6a1c5e26de5939310e8711f9561bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:a4:96:e9:59:d5:49:a7:0d:24:92:57:e9:
                    2c:f1:38:b6:78:0a:1d:0f:c6:7d:0a:ff:75:cf:70:
                    2a:19:99:b1:53:b4:91:5c:d2:0e:3a:4b:09:73:c9:
                    b2:3b:04:c4:11:6a:95:96:ef:8e:b1:1e:8c:54:ec:
                    3f:0a:7e:73:b5:e6:be:21:28:11:c3:d3:28:27:3a:
                    58:97:f6:32:87:5a:79:14:c9:18:a0:c7:d7:8b:c6:
                    6a:00:e1:fb:fc:f8:52:33:e9:61:be:29:0e:76:a0:
                    e7:e5:e7:30:e9:74:38:b0:e4:b2:e6:2e:cf:e5:2c:
                    e7:85:03:12:b5:51:8f:79:ac:ca:ca:e2:6b:ef:d2:
                    27:f1:58:54:19:2a:53:84:fd:e2:d4:82:b0:53:41:
                    d7:b6:3e:4e:f4:72:77:a3:e1:c9:00:1e:87:53:52:
                    56:fd:9e:35:94:a7:4a:5c:38:08:3b:63:08:35:2e:
                    c3:95:53:9f:8e:97:cf:e1:86:70:00:0d:8b:45:87:
                    18:28:6d:21:96:03:bf:6c:63:56:1c:06:f0:ee:71:
                    2c:47:e8:16:0a:aa:4e:3d:95:3e:74:6a:1b:09:72:
                    dc:13:78:63:2e:8f:c6:0e:e0:b1:54:ed:a1:db:9b:
                    b7:94:fa:38:f0:fc:55:3a:0a:fa:f3:dc:b5:19:2d:
                    f8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FB:37:0A:0F:6A:1C:5E:26:DE:59:39:31:0E:87:11:F9:56:1B:CD
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:15:78:eb:ba:ba:59:4a:87:e2:b5:5e:07:0d:e0:b2:7e:
         2b:22:9d:11:d1:71:0e:3c:2e:32:90:ee:3a:ee:96:e6:21:fa:
         72:7c:9b:97:91:e1:29:32:fc:06:6e:34:e2:97:99:e5:f6:c4:
         63:3c:f0:28:1f:09:5d:b2:4a:b9:60:44:d4:ea:8e:87:ee:c1:
         38:1e:8c:63:62:ee:b7:83:f7:8a:d4:a9:7c:c6:54:c5:a3:f4:
         4d:53:d4:1d:34:ff:9b:87:3c:09:34:94:4d:b9:db:6f:e8:4d:
         d2:c5:f9:4a:b1:cc:47:bc:85:57:98:ba:c1:61:19:08:54:3d:
         72:d1:7c:69:63:93:d7:90:cf:0d:29:3a:2e:59:19:b9:05:2c:
         7e:01:6f:61:8a:a2:56:c1:77:91:f8:bb:aa:bd:d8:1a:dd:51:
         f4:a8:10:5d:d8:29:0f:58:2a:2a:2d:bf:15:5a:9c:01:97:97:
         3c:a2:49:0b:d5:8f:9c:9b:c9:52:09:5d:4b:dc:51:2c:e0:25:
         53:15:32:78:51:f5:59:63:f1:23:c2:93:a0:f3:0d:8a:c1:70:
         a1:05:97:df:12:60:a6:9a:1a:dd:70:78:f5:dc:31:6f:e4:e7:
         29:f9:7a:e2:ab:52:b6:4c:a1:84:13:e1:20:db:34:89:35:5a:
         fc:da:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:51 2026 by rpki-client