Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File:                     qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier:          B5z/25NHUlAf9RX7lP6uNBoGu9flk9Xt2FQ90O0W6PA=
Subject key identifier:   8A:88:54:BC:38:A9:B8:85:C6:6D:BF:A2:DE:14:DC:00:D5:77:F8:7B
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer:       /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial:       019E2A6FFAC27D411F80B4D6947CAF9A52AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number:          1938
Signing time:             Fri 15 May 2026 07:00:42 +0000
Manifest this update:     Fri 15 May 2026 07:00:42 +0000
Manifest next update:     Sat 16 May 2026 07:00:42 +0000
Files and hashes:         1: ZaqtMpuV1OTHrfw5vTo173r3btw.roa (hash: 4AT/2CMIDCNnv/+NVAlofDA6B2gmgAWxYpfIG2EVarI=)
                          2: p7BVCU62BRURJnqp18vcgZBi9lA.roa (hash: DLOPi5ESV+e2DHMAV+0PXNX8prnnrufqQAKqkUfKYls=)
                          3: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: PnshKvDkNwCGM2poaFBOoc4357Ptav/Ag6ioIa6M56Y=)
                          4: tS7Ekl755jz7sx7rmhOe1p5tzfI.roa (hash: JxL6ENaZZO0bTihUCNQQ0Sy7sFcJ4MbgWVnIFPKdL6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:6f:fa:c2:7d:41:1f:80:b4:d6:94:7c:af:9a:52:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
        Validity
            Not Before: May 15 07:00:42 2026 GMT
            Not After : May 16 07:00:42 2026 GMT
        Subject: CN=8a8854bc38a9b885c66dbfa2de14dc00d577f87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:71:68:bb:71:40:1c:70:fc:89:16:e9:ab:
                    cc:ff:76:9a:68:ec:53:67:25:ee:24:c4:1e:6f:8a:
                    77:a6:70:d0:f0:8d:df:ac:66:e9:c8:1f:92:0c:07:
                    d0:d7:7d:30:2c:68:de:a2:85:5f:aa:62:f3:8f:dc:
                    e6:9e:24:fc:18:f3:0e:65:23:a2:e5:46:7f:61:e8:
                    a5:7c:1f:24:01:64:94:e8:57:a8:c6:db:28:4d:be:
                    29:58:50:e2:1a:21:fe:a6:39:aa:1d:9f:c1:88:26:
                    af:9a:4a:28:9b:d3:ce:46:64:b9:2a:92:54:84:05:
                    a8:61:9c:2f:d0:55:ce:55:2e:69:18:40:06:6f:a9:
                    4e:26:6f:f6:97:d4:61:69:e7:39:ef:d9:d2:5f:c8:
                    6e:7a:42:5a:4f:c0:1f:81:23:3c:fd:87:24:87:b9:
                    91:f3:f6:8f:09:a0:d0:8c:0b:be:29:85:c8:4f:1a:
                    fb:08:c8:a3:cf:d9:23:20:26:16:42:71:d9:ce:c2:
                    4a:01:39:f3:5e:cb:19:02:d6:b2:aa:6b:36:ca:22:
                    f0:58:86:e0:30:cd:73:e7:25:51:46:18:29:a7:9a:
                    19:d5:11:5c:04:30:78:74:8b:ef:0d:e6:28:42:d6:
                    24:28:d7:bd:9a:5a:36:2b:7e:e2:a9:77:56:76:b3:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:88:54:BC:38:A9:B8:85:C6:6D:BF:A2:DE:14:DC:00:D5:77:F8:7B
            X509v3 Authority Key Identifier:
                keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:05:be:b4:f4:66:d8:40:78:91:8b:1d:5a:45:a9:9b:19:
         d7:41:95:7a:7e:81:dc:f5:fd:37:93:80:c5:2e:c9:4c:db:7e:
         e9:f3:8a:c5:f9:34:52:d6:52:ad:46:6d:5a:bb:f5:c6:38:84:
         45:6a:63:3b:5d:3f:d8:5e:9f:cf:61:85:a8:a2:d5:83:21:82:
         45:5b:51:fc:9f:55:c0:e9:6a:34:2d:0e:b6:4d:8c:af:77:55:
         c3:33:f8:e1:d7:a1:50:66:bd:01:68:a2:a6:57:ab:cb:71:fb:
         06:4f:53:53:5b:db:c1:03:3f:63:14:66:06:5b:9a:90:c3:c1:
         e2:bb:a6:11:2c:0d:56:c8:62:11:a9:06:ce:51:4c:c0:4f:47:
         bb:bd:b7:b6:f2:a3:66:89:68:74:9b:c5:a8:d7:14:8c:12:3d:
         b1:ba:8d:86:65:c7:0c:a1:f3:4b:44:a0:c1:1f:69:b4:2a:d7:
         d9:32:e9:4c:cb:60:96:80:41:c9:ee:fa:63:fa:01:c3:3f:ba:
         64:02:f5:b4:67:33:07:4e:f9:d9:75:f4:2a:55:c6:d8:ac:ff:
         b6:2e:9e:9b:7a:40:ec:c5:90:a9:d2:d4:f7:be:3b:0b:a3:ee:
         b2:b0:ce:60:ef:4c:89:74:d8:69:87:ab:51:92:61:ed:29:c1:
         1e:9a:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:21 2026 by rpki-client