Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File:                     1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier:          m68Rpuc+Ua2C6LpfT0vKisHyc6nt7wcOTgWx5C0FWRE=
Subject key identifier:   8A:4E:4A:B0:A9:DE:39:78:AE:21:B5:93:0D:2F:95:02:E1:85:DA:E4
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer:       /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial:       019CAAC7042C61B7BB7E24B2C3084B6ECCB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number:          081A
Signing time:             Sun 01 Mar 2026 19:01:35 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:35 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:35 +0000
Files and hashes:         1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: dufup7j25M0PxiY8wCU0fc0F6QTuUCbMygNucf04MPI=)
                          2: f5IHBYE7NDPyB0LVrNWj1GgBNpg.roa (hash: 9Iaa5W9aUPxiaP8/fOFVvFkP2DxoYQVxx3K7Xwo06Z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:04:2c:61:b7:bb:7e:24:b2:c3:08:4b:6e:cc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
        Validity
            Not Before: Mar  1 19:01:35 2026 GMT
            Not After : Mar  2 19:01:35 2026 GMT
        Subject: CN=8a4e4ab0a9de3978ae21b5930d2f9502e185dae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:12:39:12:bc:91:2e:83:65:17:bb:40:43:
                    51:d3:a4:6d:74:9e:d8:c2:79:d3:24:c6:c1:b3:09:
                    18:2b:cc:31:4b:3c:55:89:42:55:5b:36:c9:51:00:
                    fe:b3:5e:40:ec:48:d0:56:fb:d4:f4:84:3e:82:0b:
                    af:ca:25:a7:f1:c1:fe:12:86:6b:fb:1b:c7:ec:d3:
                    d3:cd:a7:f4:25:7c:37:22:81:c2:e8:7d:1b:31:4e:
                    f1:ce:ed:82:3d:3a:c2:f1:a2:ed:b8:9c:61:6a:a7:
                    be:19:16:8a:ff:df:00:c5:1c:e0:a7:7c:3c:ef:a8:
                    20:e3:47:23:71:14:7c:73:49:03:f9:e0:64:15:65:
                    07:2c:cd:99:6a:67:90:08:91:19:d1:56:cb:87:8d:
                    7f:8a:32:76:4b:ff:ce:c0:bb:58:c7:23:f1:03:0f:
                    70:38:a0:3a:a4:9b:bd:cb:fc:70:87:97:ac:46:0d:
                    35:a4:50:4b:8e:9d:9b:44:8f:1d:c4:1a:38:5e:36:
                    18:1e:c1:df:66:ce:0b:be:4d:3a:41:a0:7b:ac:2e:
                    48:ab:c2:36:a5:2a:37:55:37:14:95:4a:d2:a9:bc:
                    69:4f:19:ff:14:35:ff:5a:41:cb:ab:14:f8:89:86:
                    36:39:d8:6a:9d:39:15:e2:5e:2e:3a:84:8b:65:44:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4E:4A:B0:A9:DE:39:78:AE:21:B5:93:0D:2F:95:02:E1:85:DA:E4
            X509v3 Authority Key Identifier:
                keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3a:a4:78:d6:66:2b:e7:6d:83:ce:6c:dc:c3:8e:af:f4:77:
         0a:11:3f:98:bc:58:82:21:ed:ea:1c:8a:e0:36:e2:6c:16:ff:
         4e:b7:3c:9a:0e:44:2e:72:da:52:a3:d4:05:96:ca:b6:6e:2e:
         46:e9:b4:40:cf:9f:d2:4c:3d:37:af:f2:3b:c6:76:cc:6e:d9:
         82:bb:58:38:7d:ac:35:49:f1:4b:a8:00:71:8a:3e:d3:aa:60:
         61:0a:c8:7b:0e:39:b6:48:d1:43:ff:88:3a:35:d1:78:c2:4e:
         ce:17:a6:03:a4:e5:e7:76:78:bf:f9:90:36:bc:32:e8:89:1b:
         4d:28:47:3a:7f:df:a0:fb:eb:ce:bd:df:ea:57:53:a4:8a:ee:
         9f:cb:a4:4c:20:71:4d:0f:4a:6a:69:db:c4:2f:3a:3d:40:2a:
         4b:f7:7e:c2:92:63:56:6b:93:96:35:32:fe:8b:fb:e5:c8:88:
         21:bf:8a:c8:ed:32:a1:ff:52:c9:15:d5:34:33:74:b4:9c:5c:
         a3:25:44:90:e0:6e:10:b8:d3:a1:4e:bb:fa:d0:dc:09:54:7b:
         86:74:6d:8c:12:4e:ca:0e:9e:c4:a3:87:52:1a:19:f0:d3:5b:
         5f:0b:aa:1e:a9:af:f9:6d:7e:09:e8:55:cb:48:a4:00:bd:57:
         15:fc:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:03 2026 by rpki-client