Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File:                     qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier:          lto8XSzAMteL4rZzDiJkj5YIKF0KtjfQY5KZQBCPBSI=
Subject key identifier:   B0:E9:44:65:44:8C:F0:F1:61:BC:18:4C:10:73:EB:D2:39:7D:AB:6C
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer:       /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial:       019CAD22E8E5ABD14CB8D143EA887F9C94E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number:          069E
Signing time:             Mon 02 Mar 2026 06:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:11 +0000
Files and hashes:         1: Ayy3FQCZfsnrrkGpwiilXLbjkWM.roa (hash: esgmCzM37dMW6UxbTfw9yQ8cfp/xjD2YDV7D5NJMYIE=)
                          2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: G/bKhlMC4sinkzt/2rlj/JhSpwB146AEiBqpX4JltGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:e8:e5:ab:d1:4c:b8:d1:43:ea:88:7f:9c:94:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
        Validity
            Not Before: Mar  2 06:01:11 2026 GMT
            Not After : Mar  3 06:01:11 2026 GMT
        Subject: CN=b0e94465448cf0f161bc184c1073ebd2397dab6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:30:99:0a:2c:c1:cf:34:80:35:3f:6f:38:
                    87:89:fa:53:6d:cd:83:ed:fc:23:22:e0:df:75:6f:
                    32:31:66:40:15:93:e2:e5:68:04:71:4c:b4:b4:49:
                    59:d2:41:08:f5:c6:cd:d5:a8:75:4d:6c:4b:8a:fb:
                    dc:65:3f:5f:1d:c4:6a:ec:95:d1:9b:5c:92:2a:64:
                    5c:14:55:b5:1d:f4:bd:5d:2c:32:87:67:6f:ea:fe:
                    88:25:d2:02:d9:13:75:c2:e7:6e:83:1e:61:de:ae:
                    b6:23:16:82:70:3e:fc:d1:f4:92:ca:15:72:16:0b:
                    33:fd:f9:80:24:c1:7e:d6:94:ef:1a:ed:97:60:b5:
                    4d:cc:84:f9:32:b1:04:c2:07:dd:f4:f8:f0:e9:c9:
                    e3:bf:ed:68:94:72:ed:46:c4:5f:70:9c:37:42:b1:
                    c5:21:7a:64:2f:5e:9b:23:36:b2:ce:d5:26:55:3a:
                    bd:dc:3b:2d:31:79:53:df:b1:f0:53:1b:79:dc:89:
                    d1:f6:0e:e2:92:52:67:27:0d:49:f3:a1:5b:21:c1:
                    67:ce:35:c5:5a:59:f2:f1:b1:5e:68:70:7c:bf:5e:
                    11:78:ce:26:5e:e0:a7:50:5f:42:2c:d0:2c:23:6d:
                    84:4f:cb:c6:12:0b:9f:9b:ef:cc:af:30:47:8e:84:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E9:44:65:44:8C:F0:F1:61:BC:18:4C:10:73:EB:D2:39:7D:AB:6C
            X509v3 Authority Key Identifier:
                keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e3:e0:1c:6d:ec:51:a3:b0:f0:01:8c:4b:4a:15:8c:bd:50:
         de:be:a6:7b:07:bf:2b:b5:bd:fa:16:cd:a0:dd:9e:3c:cf:a0:
         9d:5f:b4:ed:6d:b9:54:ad:67:d0:70:2b:b5:6a:f9:f0:60:0f:
         a3:93:63:48:3b:ea:b5:e0:bb:5b:a5:77:d5:66:2b:ca:30:44:
         29:97:1d:98:5e:3e:5e:da:7d:41:97:23:69:c6:39:0d:d9:e1:
         c6:80:e0:2b:2b:03:5d:67:86:23:60:97:16:b2:7c:e0:62:d7:
         fb:94:ed:97:44:80:17:d6:77:0d:c0:0c:91:79:42:65:da:0d:
         38:5e:34:70:a4:8f:b0:a8:b3:08:7a:35:fd:18:ff:d5:e5:d4:
         c3:04:88:97:14:ca:49:71:9a:28:08:bf:c2:68:63:cd:2f:e9:
         7f:43:b1:4f:84:29:76:46:ea:a2:a8:ed:ef:0f:9e:ea:1c:87:
         ba:51:86:42:7e:18:21:86:5d:a6:3d:f5:ed:b1:47:18:c7:a9:
         fe:e3:37:f0:b0:96:a7:55:b2:d4:a9:b3:b9:3b:61:7d:82:67:
         78:c7:1d:7e:a8:4c:ed:58:4c:1c:5e:46:9f:b4:e5:ae:00:a7:
         16:4c:59:48:b4:f3:11:e3:2b:34:f1:5f:ea:78:1b:42:fc:ff:
         0b:14:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:53 2026 by rpki-client