Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File:                     qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier:          p24tbj0zvwsSZc5i9/6Ayfcv77QrA6Nc2AtopH7LDYs=
Subject key identifier:   F3:33:60:AD:9A:A6:B7:2D:B9:5D:DF:1D:FE:9B:3A:4B:0A:38:D5:D7
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer:       /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial:       019E2A703625AB9F623DE19B4CB7EA833F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number:          112E
Signing time:             Fri 15 May 2026 07:00:57 +0000
Manifest this update:     Fri 15 May 2026 07:00:57 +0000
Manifest next update:     Sat 16 May 2026 07:00:57 +0000
Files and hashes:         1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
                          2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
                          3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: Cp044t00ymNeM4gtaMfj5DcaOrGESjpH8coSBwA37iY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:36:25:ab:9f:62:3d:e1:9b:4c:b7:ea:83:3f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
        Validity
            Not Before: May 15 07:00:57 2026 GMT
            Not After : May 16 07:00:57 2026 GMT
        Subject: CN=f33360ad9aa6b72db95ddf1dfe9b3a4b0a38d5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:f3:e5:27:c1:ca:b5:16:f3:9b:d5:db:ba:
                    60:37:8d:90:8a:2c:b8:01:34:f6:4b:98:2a:a3:ed:
                    16:11:ab:9f:c9:8b:6e:f7:32:cf:c5:e3:a8:c8:06:
                    30:e5:4b:ad:d7:83:5d:30:84:51:f7:4a:67:8b:c8:
                    80:33:e7:ed:47:10:fa:74:cf:60:cc:69:70:2b:bb:
                    f8:8a:89:e0:7a:78:df:e0:7c:ff:73:08:7a:c5:a9:
                    c4:9c:7e:fa:71:59:60:24:5f:02:df:cc:31:a6:0e:
                    5b:3c:25:84:42:f0:3e:57:90:0d:f0:b1:40:c6:68:
                    42:3d:9f:d7:cf:df:ac:cd:13:d2:3a:37:9f:61:6b:
                    44:87:f2:40:d1:5b:92:09:ae:84:8b:7f:f6:4e:9e:
                    f2:78:cd:7e:d4:39:db:06:56:66:c7:06:8e:ec:7d:
                    2d:ba:ca:26:c9:4a:af:6d:aa:3a:6c:44:06:b2:29:
                    cb:34:f5:22:a7:d9:5a:0e:fd:1a:22:a1:df:08:70:
                    f6:49:91:6a:e3:75:c3:58:64:cb:a6:fc:88:f3:ab:
                    b5:50:67:c7:11:2b:d3:98:ab:80:04:f6:be:bc:52:
                    ec:df:c3:4e:04:64:b6:be:c7:9e:b9:cc:d7:31:f8:
                    61:4c:bb:91:10:3b:ec:96:39:c8:05:62:f8:d8:25:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:33:60:AD:9A:A6:B7:2D:B9:5D:DF:1D:FE:9B:3A:4B:0A:38:D5:D7
            X509v3 Authority Key Identifier:
                keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:90:09:4c:20:53:7e:37:ad:e1:a2:d4:19:96:76:83:d8:27:
         f0:59:ba:09:de:66:29:10:05:be:06:d4:8b:28:e7:55:a5:5e:
         fa:59:27:3f:10:98:34:f5:17:46:c2:1d:61:b4:6a:ec:7f:e9:
         71:16:62:52:5a:ce:60:ae:1f:56:bd:73:8c:87:b9:96:b7:3b:
         47:38:d3:5c:23:a7:df:34:8a:ed:2d:9b:53:ae:fa:82:08:7a:
         0a:ee:de:5e:b6:8e:cb:d7:a4:fc:6c:7a:10:2a:a5:8e:65:18:
         4a:cc:10:c4:48:c5:ff:1b:02:76:f5:94:9e:e3:4a:03:ee:16:
         de:f8:1f:b4:2e:20:52:0e:02:60:d5:25:c6:98:d3:36:3c:89:
         10:5a:0c:99:fc:8a:c6:ac:c8:df:d2:e4:f4:03:5a:9e:e6:a5:
         94:96:b4:83:11:01:ea:b5:45:80:2d:07:71:70:67:13:7b:74:
         29:ff:ea:35:b5:46:1b:6e:c6:7f:61:03:52:97:04:90:f4:2d:
         2c:fd:3f:be:8e:2a:85:99:cf:2d:7f:f3:93:24:ef:33:a9:23:
         3e:c8:23:06:07:84:af:6b:2e:58:fe:9f:2d:64:06:f8:50:30:
         aa:73:fb:cb:ef:38:50:21:0c:2a:af:51:5e:e6:6b:14:87:71:
         a9:6e:a2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:14:48 2026 by rpki-client