Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
File:                     qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json)
Hash identifier:          7+vNgp9l/j3+OK3pdE292dOUYNgzzUnP1j17zq/srLQ=
Subject key identifier:   2A:F0:86:8C:D1:1A:24:1A:34:06:C9:5D:3C:36:BE:C4:2E:AE:A8:79
Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
Certificate issuer:       /CN=ab19000781c183366cba55416fd75b57dba0e4bb
Certificate serial:       019DA78BAA89B79AEA3D3E692A3B0D5F6E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
Manifest number:          0599
Signing time:             Sun 19 Apr 2026 21:00:41 +0000
Manifest this update:     Sun 19 Apr 2026 21:00:41 +0000
Manifest next update:     Mon 20 Apr 2026 21:00:41 +0000
Files and hashes:         1: UBF65ckkUeTb5TbQD9-moIuJwLc.roa (hash: RrSAA6sqxIszGdOffmEq9g8ZmL1cSXwchcGnATyPrPg=)
                          2: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: cdzjSTrZTyzN1uCc7k8q6Fdry1eJcRJ0koBpTbXIJfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:8b:aa:89:b7:9a:ea:3d:3e:69:2a:3b:0d:5f:6e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb
        Validity
            Not Before: Apr 19 21:00:41 2026 GMT
            Not After : Apr 20 21:00:41 2026 GMT
        Subject: CN=2af0868cd11a241a3406c95d3c36bec42eaea879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:e1:03:76:c3:99:12:c0:ac:71:22:23:fd:
                    ae:7a:44:df:50:f2:f9:1f:3d:88:90:16:b3:b5:36:
                    75:2b:0e:53:ab:fd:5a:99:87:a5:86:4c:62:d5:68:
                    ab:e1:ad:d3:e7:33:75:e6:c5:57:f1:49:f0:ac:b8:
                    96:f7:1e:ae:57:b4:3f:e3:d3:6e:f1:e3:b6:91:c1:
                    70:a5:55:6a:b9:74:82:f7:68:d4:d9:cb:bd:66:dc:
                    89:29:d4:3e:00:df:1b:fb:60:0d:57:4d:6b:67:a9:
                    13:a1:71:17:82:39:87:34:e8:41:ee:a4:64:59:b8:
                    6f:db:5b:db:c0:be:f2:66:0d:eb:f6:47:05:68:98:
                    f9:a9:10:90:c4:32:66:a3:7a:c2:f6:00:98:85:9a:
                    1e:67:35:a1:77:85:6c:86:50:e3:6c:3f:57:f8:74:
                    c7:8e:99:76:eb:60:98:88:cd:d3:e6:8b:ab:be:3e:
                    ae:48:f5:00:ce:ca:6b:7a:e0:ee:09:a5:b5:61:a4:
                    a9:f9:6b:74:32:1c:2c:2a:7a:37:ac:89:03:9f:b3:
                    ca:e1:78:ff:02:26:76:3d:14:44:72:a2:bf:b0:42:
                    f6:5b:b5:3d:99:a9:26:a1:b7:8c:9a:13:4b:b6:0b:
                    40:14:21:d5:5a:fa:29:01:b9:41:4a:42:f5:15:74:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F0:86:8C:D1:1A:24:1A:34:06:C9:5D:3C:36:BE:C4:2E:AE:A8:79
            X509v3 Authority Key Identifier:
                keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:a1:40:cc:fc:49:c6:2f:91:2b:87:51:51:4c:87:c5:4c:
         8f:89:17:8e:15:b3:5b:7f:ad:20:05:c1:c9:2c:e3:c9:6e:39:
         78:19:7c:bc:cc:62:ef:6c:a2:e2:6a:28:6d:1b:63:02:e2:99:
         5b:b3:37:f9:a7:d6:1c:1d:a0:9c:1c:77:9b:a6:ff:4e:9f:7b:
         63:e7:54:77:e6:22:c3:1a:2f:f0:d2:23:af:b9:29:91:af:de:
         0b:13:1d:f5:48:ee:68:d6:4f:91:c0:c4:af:66:07:8a:b8:89:
         22:50:75:37:71:55:44:7a:14:66:5c:14:c8:a1:5d:fe:be:86:
         15:f2:9e:b3:9b:e8:11:50:3e:2b:21:95:b0:77:e5:5c:3d:a0:
         78:5e:a8:1c:08:86:7a:63:f2:af:3e:f5:99:37:7f:48:ed:f7:
         08:ba:08:4c:12:2e:19:50:67:c0:aa:38:9b:45:96:94:7f:6f:
         c4:4d:bd:b8:2e:e7:a2:16:96:c4:56:5d:d8:73:12:17:b2:0c:
         34:23:30:55:b4:ab:4a:2a:76:60:22:30:2d:21:99:ed:15:1d:
         54:eb:a9:65:f4:de:85:68:08:53:b0:76:33:8a:42:9c:80:59:
         99:79:79:3a:b7:77:25:aa:6b:74:e5:42:94:de:ef:90:88:3b:
         f5:87:fd:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ni6qJt5rqPT5pKjsNX25lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMTkwMDA3ODFjMTgzMzY2Y2JhNTU0MTZmZDc1YjU3ZGJh
MGU0YmIwHhcNMjYwNDE5MjEwMDQxWhcNMjYwNDIwMjEwMDQxWjAzMTEwLwYDVQQD
EygyYWYwODY4Y2QxMWEyNDFhMzQwNmM5NWQzYzM2YmVjNDJlYWVhODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B7hA3bDmRLArHEiI/2uekTfUPL5
Hz2IkBaztTZ1Kw5Tq/1amYelhkxi1Wir4a3T5zN15sVX8UnwrLiW9x6uV7Q/49Nu
8eO2kcFwpVVquXSC92jU2cu9ZtyJKdQ+AN8b+2ANV01rZ6kToXEXgjmHNOhB7qRk
Wbhv21vbwL7yZg3r9kcFaJj5qRCQxDJmo3rC9gCYhZoeZzWhd4VshlDjbD9X+HTH
jpl262CYiM3T5ourvj6uSPUAzspreuDuCaW1YaSp+Wt0MhwsKno3rIkDn7PK4Xj/
AiZ2PRREcqK/sEL2W7U9makmobeMmhNLtgtAFCHVWvopAblBSkL1FXQSKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrwhozRGiQaNAbJXTw2vsQurqh5MB8GA1UdIwQY
MBaAFKsZAAeBwYM2bLpVQW/XW1fboOS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmI1M2YtOTBjMC00YTM1LWJmMjMt
ZmYyZGZkNjJkMzc2LzEvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NmI1M2YtOTBjMC00YTM1LWJmMjMtZmYyZGZkNjJkMzc2
LzEvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULehQMz8
ScYvkSuHUVFMh8VMj4kXjhWzW3+tIAXBySzjyW45eBl8vMxi72yi4moobRtjAuKZ
W7M3+afWHB2gnBx3m6b/Tp97Y+dUd+Yiwxov8NIjr7kpka/eCxMd9UjuaNZPkcDE
r2YHiriJIlB1N3FVRHoUZlwUyKFd/r6GFfKes5voEVA+KyGVsHflXD2geF6oHAiG
emPyrz71mTd/SO33CLoITBIuGVBnwKo4m0WWlH9vxE29uC7nohaWxFZd2HMSF7IM
NCMwVbSrSip2YCIwLSGZ7RUdVOupZfTehWgIU7B2M4pCnIBZmXl5Ord3JaprdOVC
lN7vkIg79Yf9/Q==
-----END CERTIFICATE-----
Generated at Mon Apr 20 04:48:33 2026 by rpki-client