Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File:                     QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier:          LfgF/ZYStEIDC6JIcGSqOGloqvJ+UC9FtOY4wjb+zzs=
Subject key identifier:   AB:20:B8:6C:82:37:5B:1F:73:8D:E2:96:7F:94:D4:8B:36:3C:D7:A5
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer:       /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial:       019E2ADE8CF4EDD3A87D1C7E05770D2AC2F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number:          190E
Signing time:             Fri 15 May 2026 09:01:28 +0000
Manifest this update:     Fri 15 May 2026 09:01:28 +0000
Manifest next update:     Sat 16 May 2026 09:01:28 +0000
Files and hashes:         1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: fMMV4CQ1KY5FFD7LtONTRlVOJ1qjwTQ5dqYwdJp6a4U=)
                          2: R8G1L5YZFoXqf9gMiTpM3wiCF5E.roa (hash: iGaxDBxbx1MC3MNbPezJIeAw0C567dpwIT9cPctlVlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 09:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:de:8c:f4:ed:d3:a8:7d:1c:7e:05:77:0d:2a:c2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
        Validity
            Not Before: May 15 09:01:28 2026 GMT
            Not After : May 16 09:01:28 2026 GMT
        Subject: CN=ab20b86c82375b1f738de2967f94d48b363cd7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:84:bb:21:11:7b:db:a5:3e:2d:19:97:3a:
                    43:56:a6:3f:f3:c7:08:ca:b9:16:de:e4:f6:9b:20:
                    b8:39:24:68:64:d1:14:37:77:0b:ac:b8:13:2b:60:
                    a8:7c:d8:2c:f9:b6:75:0d:5f:d8:65:06:77:2a:ba:
                    f4:89:91:3c:46:f0:ca:d0:4f:27:a3:16:0c:2c:a1:
                    5c:84:40:70:05:ed:aa:9d:1d:55:39:28:93:58:f0:
                    f9:71:80:bf:0c:2b:6e:64:d2:4b:0e:1c:51:0b:9c:
                    40:27:c6:e8:bc:d8:56:dd:19:3b:11:bb:05:63:d7:
                    b3:0a:ab:76:86:7d:5b:d1:18:a5:11:d1:80:f7:13:
                    7c:c3:6d:39:ec:6f:ef:ff:e8:f1:81:3f:92:ee:5c:
                    73:71:5b:3e:e2:ee:85:a6:12:1b:cd:67:40:2d:73:
                    95:d9:0c:e7:53:3d:fc:ea:7f:81:81:f6:1f:35:40:
                    2d:d1:ee:39:b4:58:56:68:94:91:f9:00:07:df:72:
                    26:0e:d6:91:74:c6:94:6a:ba:54:3b:bd:15:e3:b6:
                    76:68:8a:fc:7e:77:23:49:fd:11:d9:31:78:03:7b:
                    00:e4:d9:e0:56:5e:fe:61:a7:92:33:f7:76:c2:ce:
                    87:82:b6:f1:9e:ee:5a:23:1d:8c:0a:e5:7d:19:06:
                    fa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:20:B8:6C:82:37:5B:1F:73:8D:E2:96:7F:94:D4:8B:36:3C:D7:A5
            X509v3 Authority Key Identifier:
                keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:32:11:99:80:7b:f3:e6:b6:11:14:b0:58:3e:22:c4:93:
         f8:e9:15:7a:5c:00:74:8e:b3:de:c5:15:28:e9:27:1c:f5:c7:
         0e:c3:40:da:7f:c6:37:59:bb:7f:5d:bd:42:14:9a:db:b8:01:
         fd:70:36:6a:7a:51:80:b1:81:ef:7f:cb:6b:21:c8:03:96:78:
         ea:6c:b0:99:1d:e6:fc:ee:e6:2f:90:2f:fa:67:33:6d:f4:7e:
         4f:7e:85:61:06:2b:cd:d2:ea:37:c6:77:f3:a2:80:19:9a:33:
         6b:bb:55:2a:18:e0:97:a2:8f:c9:05:28:6d:95:1c:d2:fa:bd:
         8a:32:a3:10:a5:d8:e7:89:99:9f:d5:f5:16:8d:9b:e3:6a:14:
         52:c2:fe:e9:20:2b:aa:e4:7b:7d:c9:79:ec:f4:01:9a:ba:77:
         20:2b:07:2c:c6:a8:90:8d:5f:63:b0:ec:bf:02:cf:37:a7:f3:
         86:44:5c:12:dc:aa:12:14:4f:6d:10:3f:14:2c:3d:91:cd:6d:
         c8:5c:eb:00:28:fd:76:cc:f1:74:27:3b:dd:04:7b:a0:07:bf:
         cd:9a:9e:c6:1c:db:0b:8a:3e:d7:bb:e8:2f:69:57:d0:ee:62:
         87:08:9e:55:b5:d6:c5:78:8a:16:26:c2:d2:63:62:40:d0:d4:
         3b:57:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:35:55 2026 by rpki-client