Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File:                     qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier:          ekfoXhEJCTTgXw0rHFNt7AMP1/OasFYgmUhg+oeoSfI=
Subject key identifier:   65:B9:7E:EE:BF:64:6C:33:FF:97:F9:DE:EC:C6:45:79:17:97:35:52
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer:       /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial:       019E2A021F638D4672B4F101E4AD8D87DBEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number:          1917
Signing time:             Fri 15 May 2026 05:00:42 +0000
Manifest this update:     Fri 15 May 2026 05:00:42 +0000
Manifest next update:     Sat 16 May 2026 05:00:42 +0000
Files and hashes:         1: 1BS5FFAL8Xioj9xP3XF2T09PUyo.asa (hash: KMqK1OYqPcxopPsLzmWQHtxtVOo5iXf0iz6640QVzZ0=)
                          2: LTmOQCe-BWUTWVQkjpSYNnXaYa4.roa (hash: zJdURY1Kn8xq2aZqWECgaU84OOgVmpgOtWckIX+5TSs=)
                          3: _opXEn0thzhgGf4NWVntdA2gblE.asa (hash: nbnWVS0wu/u5kwilgVDWUiJkK1AUWGIEUy+veLSh4gs=)
                          4: aXlS2MBHT3otsZcZeVd3GMw9MKU.roa (hash: EW9PAlMsLE2KLuPGMAVWKhlfJ/oPt4738Dlm3TTrJp4=)
                          5: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: Gf7qepVNZS8Hxjd+WJ9k50q2S9zKyl/iWx0J2aflXY0=)
                          6: qn7jJSv2tQh8tySyS9Bb7e0MqEc.roa (hash: DLE+2XwmNrt4PogNbYe21K3q7SvSlrBrHiqgI7d0ot4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:1f:63:8d:46:72:b4:f1:01:e4:ad:8d:87:db:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
        Validity
            Not Before: May 15 05:00:42 2026 GMT
            Not After : May 16 05:00:42 2026 GMT
        Subject: CN=65b97eeebf646c33ff97f9deecc6457917973552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7b:89:6b:bd:49:7b:d0:dd:24:38:1b:91:1f:
                    e6:e4:43:98:5c:05:dd:4b:56:b8:50:78:cd:8b:2b:
                    73:6e:7a:ec:1a:b1:80:c9:64:07:b4:e0:04:57:0e:
                    4a:8b:ad:25:a2:76:05:93:8f:ee:3b:25:21:79:1a:
                    fd:80:64:02:0b:04:04:d7:d5:0c:d0:13:c4:bb:80:
                    a0:01:40:42:a9:a0:9f:82:8b:aa:06:3c:07:65:f6:
                    7c:00:fe:58:2b:82:cb:5b:ef:b9:39:66:8d:1e:50:
                    67:c3:91:16:36:6f:24:e9:df:3e:c7:ee:f2:37:b7:
                    27:3e:a4:e9:b6:9a:a9:c2:62:de:30:ed:4f:36:bc:
                    33:63:f1:fc:8f:e8:51:22:59:35:13:18:98:e9:97:
                    53:f5:30:db:3f:e8:c3:32:91:9e:e2:4e:04:9f:4a:
                    40:31:24:ce:fb:36:2a:24:22:d7:68:a3:f9:ad:5e:
                    6c:c9:16:ee:4e:25:aa:ba:b8:46:a4:ee:51:53:63:
                    a6:cc:42:6d:32:10:26:ff:de:42:6a:65:4b:4a:8a:
                    27:49:73:9e:ad:fd:d2:ce:72:c5:1a:5a:ab:b7:81:
                    90:61:23:2f:04:90:7b:68:99:59:1a:a3:68:97:d5:
                    25:4a:6d:ac:24:b0:56:3a:7e:5b:38:1e:ab:60:61:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B9:7E:EE:BF:64:6C:33:FF:97:F9:DE:EC:C6:45:79:17:97:35:52
            X509v3 Authority Key Identifier:
                keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:99:c7:16:51:82:c7:49:2e:ca:24:3e:7e:d4:90:81:7d:47:
         bc:93:64:37:90:f3:b3:9a:c9:36:cd:c3:24:21:97:83:83:95:
         ae:54:50:7f:29:ac:3e:cb:83:83:6f:50:c1:7a:9a:23:75:07:
         7b:dc:be:36:40:03:da:e0:fd:3e:69:b5:b7:c0:a4:9a:7d:a1:
         9f:dc:69:7e:ed:e8:03:96:b2:5d:60:a5:07:78:ac:8d:5e:4b:
         51:55:39:6d:99:98:f1:b5:c4:bc:14:b7:88:63:b7:aa:bf:a7:
         1f:d6:4c:0b:dc:02:bc:72:3f:5f:70:56:4a:01:9b:a5:e6:5c:
         07:59:96:00:d9:3b:12:6f:ad:0b:94:85:35:bd:b6:f8:78:13:
         ee:a8:1d:0c:49:0d:ba:9b:58:10:60:1f:85:b0:2c:3b:68:aa:
         cd:bd:7d:cd:1c:ca:85:98:d8:7d:dc:b0:f0:4f:72:83:c5:37:
         ee:eb:3b:da:f6:ec:d2:d0:b3:94:46:df:3c:eb:d5:50:cc:9b:
         0a:c7:06:a1:96:16:35:dd:a5:e7:ad:5d:74:8f:18:c8:ea:f4:
         37:0f:ee:e6:ca:77:51:d2:f7:f3:d5:8c:ac:9d:fb:69:d8:ab:
         d3:f0:c1:af:6b:d6:a5:9f:8c:03:3b:85:c0:cb:0d:01:78:0b:
         12:54:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:38 2026 by rpki-client