Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          ztCm/ZT51OZSF+0ZoUTYd80+yENhJvqT8tHPT5ILPGs=
Subject key identifier:   24:D6:62:F5:5F:58:76:B5:9A:96:1F:78:61:C5:E7:0E:85:1B:E7:00
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       019E3117CBCFB965AD69EFAA2689A05F32DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          0CE4
Signing time:             Sat 16 May 2026 14:01:43 +0000
Manifest this update:     Sat 16 May 2026 14:01:43 +0000
Manifest next update:     Sun 17 May 2026 14:01:43 +0000
Files and hashes:         1: 1-3nsrh4Lo8MRYJrpDe2Kv8gI2bk.roa (hash: J6AC5UbCT/JPLrTSWfSumCMQQX3px8kLFv3gDTLnI80=)
                          2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
                          3: PIU7Zxr6WOBUfjTOxP66dy63XjE.roa (hash: h4a3tGn4XY5dyoqR5ywDpWw2ctrTMxmn2LdoBTK4oGk=)
                          4: SZxwFn-rv4YHYIn11rPhhdZalEE.roa (hash: qGdnGUtcjilIGvYv6gZqj/DBGuFNWX/5F8NZ1f7ELoQ=)
                          5: dQp1_bF-2hRgZhoSUp2j8-OiYAI.roa (hash: Ktp1XPuBOcTSPdwju+u+aKIoeTI5yi+j2Ty+pydNaPA=)
                          6: fmZxjRZiqOQwHDt7j51f9SOA6RI.roa (hash: L9SLemKUDE99zwW/1qnnl1xaC8S5UDziumUBVKNLf1U=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: FK3CWVb7rH2G5IWYVloOpp2hWV59QRlReerB7xolFM4=)
                          8: rHk667_7e1f5CM1H6jMGDJQ1_rI.roa (hash: eJy0wY8fT6hZGfxYTUIN+SEKm4c/Wt9buTzlEZ5VOng=)
                          9: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:cb:cf:b9:65:ad:69:ef:aa:26:89:a0:5f:32:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: May 16 14:01:43 2026 GMT
            Not After : May 17 14:01:43 2026 GMT
        Subject: CN=24d662f55f5876b59a961f7861c5e70e851be700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:04:dc:e0:93:0f:dd:b1:86:50:c6:31:a5:
                    2a:6b:c5:2f:d8:25:73:9e:9e:78:fe:4e:5b:0b:e9:
                    ca:0a:ef:c3:4d:f4:a5:fe:86:dc:66:b0:58:60:9c:
                    4b:28:6a:65:a6:29:0d:03:e1:0d:4e:71:c7:90:8a:
                    a8:c6:6e:66:2a:1e:38:9c:58:e7:69:05:c9:80:00:
                    3c:a4:db:a5:62:78:d0:39:57:12:38:90:cb:1a:24:
                    ae:a4:00:65:f2:1d:2a:c3:c5:6f:96:13:f3:90:ea:
                    98:3e:b6:1b:77:6e:07:0a:3c:14:fc:8c:a5:64:ee:
                    36:a3:61:97:7b:20:47:10:9a:31:b0:6f:d1:6d:16:
                    ec:80:6d:7a:1f:c7:b1:79:0e:72:bd:74:f1:d3:83:
                    98:7f:df:f3:8b:1a:a3:6b:ef:f1:c3:17:5d:ee:a6:
                    1e:2c:a3:6d:71:10:ba:e9:61:5c:36:ab:6e:d5:1c:
                    9e:1a:81:3e:93:de:cd:69:21:fc:8b:89:e4:d1:2a:
                    53:bf:cd:c0:4e:8c:df:2a:3c:b3:d1:2b:12:1f:06:
                    7b:33:c4:ad:c2:8e:ab:af:c8:67:fd:b3:83:4e:64:
                    6b:74:71:d9:74:68:6f:5c:9e:0b:b9:8f:88:fb:45:
                    d8:fb:07:53:18:91:bd:e6:01:71:9c:bd:a2:b5:92:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:62:F5:5F:58:76:B5:9A:96:1F:78:61:C5:E7:0E:85:1B:E7:00
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:c5:f8:04:08:95:07:19:de:3b:65:cb:29:1d:2b:62:1a:e3:
         06:84:ce:d2:f7:1f:f9:7c:ae:ae:a2:cd:7b:7a:44:57:ab:04:
         0e:58:b9:13:f4:55:cb:ec:f5:34:26:31:a7:4e:7c:53:36:7a:
         73:70:4f:38:df:1d:07:d0:07:40:6c:7a:1a:a2:35:6f:13:d6:
         d8:44:ed:62:6e:11:13:d7:f2:69:d1:84:5f:6c:78:91:c1:c1:
         1e:27:47:e8:3a:5b:0c:df:a1:71:0f:d3:85:2d:0c:23:23:b7:
         31:5d:a2:4d:c9:61:3d:dc:ba:41:7e:cf:53:e1:03:ae:93:3c:
         11:6b:e6:a9:d5:73:6c:2c:6d:e5:8f:b8:b8:fa:62:4c:f9:4d:
         14:ad:37:3f:2d:65:bc:54:0f:aa:24:6c:a7:04:d8:be:31:b8:
         32:16:69:be:ce:4c:1a:4a:9b:9b:35:16:94:a6:f6:9e:0d:00:
         9a:c8:d9:a4:5a:48:f1:0d:f1:f6:00:54:a5:5d:86:b3:2c:d0:
         80:83:5d:32:66:04:29:22:b2:8e:3a:17:40:11:27:71:13:e8:
         24:31:0c:92:57:d5:bb:e9:6d:91:7a:aa:14:15:f9:bf:e6:8c:
         f4:8d:d2:ac:f6:40:5d:3c:94:d0:29:98:9d:7f:7b:ee:7d:55:
         d9:2f:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:43:41 2026 by rpki-client