Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          Jk5Ixw4zvRawTHeEIYf/EGmx70lZQKbhC6iOVNd/a+Q=
Subject key identifier:   75:3F:6A:7A:95:05:70:18:E6:E8:F6:7D:3F:64:08:96:A7:25:55:66
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       019CAEA325C7D3ACA9232DF6243983D51DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          0443
Signing time:             Mon 02 Mar 2026 13:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:53 +0000
Files and hashes:         1: 52DLcP5QY9pi7vojxO_II_zfgcQ.roa (hash: RzKzGr4Ea3LAud+NmUq6w6faNUNWCiigM9sI+gxiGqs=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: 7wkCp6dQ5ZRIE7/APErGgBBnreWCgb5oiu3HA8qBaXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:25:c7:d3:ac:a9:23:2d:f6:24:39:83:d5:1d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Mar  2 13:00:53 2026 GMT
            Not After : Mar  3 13:00:53 2026 GMT
        Subject: CN=753f6a7a95057018e6e8f67d3f640896a7255566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:50:ec:27:80:a3:f8:46:4b:5b:a0:46:4d:
                    53:26:5f:88:c9:41:35:75:35:a9:5b:a3:87:22:15:
                    f8:49:ee:77:9c:a7:35:4f:e7:23:77:cd:a9:ea:df:
                    aa:7f:c0:3e:d6:86:f4:fc:83:1d:87:eb:ce:38:77:
                    2e:0d:91:d3:08:eb:e0:9e:5a:52:c0:07:42:ea:41:
                    f7:89:3b:f3:ee:e0:72:57:59:f4:24:5e:c6:59:af:
                    ab:72:14:2e:a0:f2:11:df:12:19:86:4e:ba:3d:b0:
                    62:e2:47:28:62:08:5c:89:04:ee:72:2c:85:65:f3:
                    57:cb:0e:f3:9b:b4:61:e3:92:5e:ed:fc:fc:3b:6b:
                    6b:b0:fb:80:ee:c8:cb:c6:4f:97:b0:85:8b:66:2d:
                    d9:a4:43:b5:51:67:7c:75:b8:0f:7d:99:2b:7c:79:
                    bb:60:01:6d:97:90:74:0f:c1:dd:9e:fc:2e:fa:c7:
                    9c:7b:b7:53:56:e2:c2:78:9e:ec:5b:0c:b3:ac:fd:
                    38:93:0f:27:07:39:bb:e0:ac:3f:15:1d:6f:10:7d:
                    ef:52:9d:c8:1d:ef:a2:6a:51:10:8d:81:9f:a9:56:
                    be:a7:a6:c9:9b:ee:44:56:8e:c1:8b:5c:67:47:d5:
                    c1:db:c9:6e:c1:8d:31:7e:00:aa:70:d0:c6:bd:45:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3F:6A:7A:95:05:70:18:E6:E8:F6:7D:3F:64:08:96:A7:25:55:66
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:9e:56:19:4c:0c:dc:ff:60:90:05:b9:28:58:7c:a1:27:
         de:bc:a5:26:0c:08:26:d6:bd:aa:e8:e1:26:e5:65:9b:9c:00:
         06:d3:eb:62:24:1d:49:ab:09:fa:15:21:bf:de:4f:96:5a:25:
         9e:33:89:f0:ed:71:98:30:c1:13:de:7e:de:b5:1e:ff:21:14:
         e4:4c:da:86:38:7a:4e:cb:6f:d4:9c:1d:f3:00:8a:26:c2:a9:
         40:4d:7e:7c:2e:73:b4:0c:67:7a:56:0b:0b:01:38:36:c1:fb:
         b2:fc:2a:5a:4f:e0:c9:44:3e:70:42:9d:71:96:da:32:ae:83:
         70:1f:05:4d:8f:33:df:10:31:21:13:1f:9a:36:90:6d:74:53:
         3f:c6:47:b8:6a:c9:df:97:17:6f:18:8a:68:75:66:f8:cc:cc:
         27:41:e2:62:36:cb:56:4d:7d:8f:31:04:b3:2f:ca:04:76:3d:
         f7:9c:99:25:45:90:31:7f:d7:bd:72:0b:31:d1:45:b1:d3:ee:
         53:0c:cc:e9:60:ad:a7:20:af:2d:03:2f:94:97:5d:61:08:f4:
         51:1f:60:64:93:9e:4b:86:e8:89:89:b5:dc:6e:c6:80:d6:6e:
         16:99:25:bb:66:e6:be:41:2c:90:bf:58:cc:e4:50:ee:4e:68:
         dc:c6:66:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuoyXH06ypIy32JDmD1R39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZGQ3OTU1NzI1NTQxOWViN2ZkYzZkMGFmMzFmYTcwN2Zk
ZmJhYzgwHhcNMjYwMzAyMTMwMDUzWhcNMjYwMzAzMTMwMDUzWjAzMTEwLwYDVQQD
Eyg3NTNmNmE3YTk1MDU3MDE4ZTZlOGY2N2QzZjY0MDg5NmE3MjU1NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFpQ7CeAo/hGS1ugRk1TJl+IyUE1
dTWpW6OHIhX4Se53nKc1T+cjd82p6t+qf8A+1ob0/IMdh+vOOHcuDZHTCOvgnlpS
wAdC6kH3iTvz7uByV1n0JF7GWa+rchQuoPIR3xIZhk66PbBi4kcoYghciQTuciyF
ZfNXyw7zm7Rh45Je7fz8O2trsPuA7sjLxk+XsIWLZi3ZpEO1UWd8dbgPfZkrfHm7
YAFtl5B0D8Hdnvwu+sece7dTVuLCeJ7sWwyzrP04kw8nBzm74Kw/FR1vEH3vUp3I
He+ialEQjYGfqVa+p6bJm+5EVo7Bi1xnR9XB28luwY0xfgCqcNDGvUX8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU/anqVBXAY5uj2fT9kCJanJVVmMB8GA1UdIwQY
MBaAFEHdeVVyVUGet/3G0K8x+nB/37rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWM3NjItNWI0ZS00MjEyLTlhZDgt
ZDBjNTViMGQ0NjM5LzEvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jMWM3NjItNWI0ZS00MjEyLTlhZDgtZDBjNTViMGQ0NjM5
LzEvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ2eVhlM
DNz/YJAFuShYfKEn3rylJgwIJta9qujhJuVlm5wABtPrYiQdSasJ+hUhv95Pllol
njOJ8O1xmDDBE95+3rUe/yEU5Ezahjh6Tstv1Jwd8wCKJsKpQE1+fC5ztAxnelYL
CwE4NsH7svwqWk/gyUQ+cEKdcZbaMq6DcB8FTY8z3xAxIRMfmjaQbXRTP8ZHuGrJ
35cXbxiKaHVm+MzMJ0HiYjbLVk19jzEEsy/KBHY995yZJUWQMX/XvXILMdFFsdPu
UwzM6WCtpyCvLQMvlJddYQj0UR9gZJOeS4boiYm13G7GgNZuFpklu2bmvkEskL9Y
zORQ7k5o3MZmFQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:28 2026 by rpki-client