Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File:                     QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier:          moqmeuIP6Z7zWxXzZFzLGhwUbioE3Rj8m9VM1n+AJDA=
Subject key identifier:   59:4F:FC:6B:FD:C6:94:25:B1:19:42:C3:37:4F:D5:1D:37:E2:40:A5
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer:       /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial:       019E2A02DEA04B8F9AE6FEE3678D04B97146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number:          190F
Signing time:             Fri 15 May 2026 05:01:31 +0000
Manifest this update:     Fri 15 May 2026 05:01:31 +0000
Manifest next update:     Sat 16 May 2026 05:01:31 +0000
Files and hashes:         1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: ReGhRbHaO1cWNzXCKmmUSfrP1o0rG0ZrTRQu4nqdjKY=)
                          2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
                          3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:de:a0:4b:8f:9a:e6:fe:e3:67:8d:04:b9:71:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
        Validity
            Not Before: May 15 05:01:31 2026 GMT
            Not After : May 16 05:01:31 2026 GMT
        Subject: CN=594ffc6bfdc69425b11942c3374fd51d37e240a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:9e:71:c4:74:65:e6:a6:89:c3:87:dc:8d:
                    a7:32:c3:a4:c4:5a:5c:2a:d4:be:04:f0:da:35:a0:
                    4c:5e:76:4c:04:58:25:9d:f8:a8:b4:2d:b8:97:48:
                    c0:9a:59:12:1e:12:2e:27:8f:cd:34:43:61:02:26:
                    05:74:b2:7a:08:3c:45:bd:30:b4:e7:7d:30:43:e6:
                    35:f3:3e:e0:bd:1c:b3:a8:7f:ae:b0:a1:71:9e:d1:
                    66:27:9a:93:4f:9c:b5:27:22:81:38:d0:45:77:6a:
                    7e:92:4e:ae:f2:4b:ca:43:49:8e:39:10:de:ba:bd:
                    fd:3a:50:a7:a3:4b:6f:7f:76:25:ae:23:3d:d5:9a:
                    b7:47:cc:da:52:25:83:3c:fb:95:3c:b9:50:16:e3:
                    bf:11:0b:c0:5f:85:3d:b0:49:4d:94:38:9e:de:cf:
                    5c:c1:48:66:87:63:0a:6c:7f:b4:b4:55:aa:12:9a:
                    97:f7:40:86:00:c7:f4:d6:b3:85:57:d0:84:31:fa:
                    d2:fa:6b:23:f1:80:0c:18:55:2f:54:19:91:9d:c3:
                    eb:2b:1b:e8:ae:d3:76:e8:cb:a2:15:02:54:a3:76:
                    00:88:cf:6b:ec:f6:3b:8c:04:90:21:1a:1c:be:8b:
                    80:68:f3:06:5b:6f:5a:82:4a:4f:15:ca:82:b1:c7:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4F:FC:6B:FD:C6:94:25:B1:19:42:C3:37:4F:D5:1D:37:E2:40:A5
            X509v3 Authority Key Identifier:
                keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:00:ad:5b:4f:af:05:8a:7c:9a:20:fb:63:58:cc:66:99:
         30:95:2a:9b:d8:11:76:50:19:80:23:1e:0e:22:77:9d:57:62:
         f6:e8:2a:26:66:f5:70:81:eb:a4:28:a6:9a:15:d5:55:ab:60:
         58:72:a6:e9:08:7e:57:04:34:90:1f:8b:d2:b9:44:d9:76:b5:
         cd:8d:98:44:ec:fb:8b:b1:6a:dc:b6:b3:f7:9b:83:81:4a:38:
         e0:6f:c9:b9:79:01:43:30:1e:fe:14:1c:74:36:c1:fc:57:70:
         88:af:13:1f:8e:4d:39:c1:95:67:02:76:f4:bf:4c:83:aa:2e:
         4f:9e:cd:b5:f0:3d:f5:a4:d7:0e:4f:75:64:c5:10:57:be:c0:
         df:ea:77:d2:c8:fc:aa:12:7f:f4:bf:fb:8f:cd:3e:e9:02:fd:
         ee:91:74:de:25:0d:2a:bb:94:db:ea:65:f6:f2:db:91:3f:64:
         6a:31:5f:0d:42:02:18:de:c0:d8:35:69:2a:01:b9:2d:5a:61:
         3d:29:89:d7:18:e0:d4:7c:31:39:af:3d:9f:dd:88:2d:17:a9:
         50:3e:4e:e5:cc:62:4a:f6:17:b2:cb:e2:5e:8b:69:27:08:10:
         44:b2:00:3d:3a:4b:58:b8:8c:7e:75:49:eb:3f:ba:d9:53:83:
         b7:cd:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:42 2026 by rpki-client