Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          uzvhttaol5ABUc+UVORfUSKsSyIeqjoFxQqzN33Blvc=
Subject key identifier:   C8:1F:67:08:AD:BA:D4:6B:37:84:10:48:13:D4:2F:02:70:2A:EF:BE
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       019DDD6817F86A5AD02F2BD2EEBEFD4421EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          18E6
Signing time:             Thu 30 Apr 2026 08:01:19 +0000
Manifest this update:     Thu 30 Apr 2026 08:01:19 +0000
Manifest next update:     Fri 01 May 2026 08:01:19 +0000
Files and hashes:         1: 3oYuOEcw1b9v0ouS6gA5UBDk4tQ.asa (hash: nrqhWNV+Xc5NkmygiKViAPbV5PLyvcfSxXDvQeMjjJs=)
                          2: UYOEbjPyLAeXDjmWXka43xNSBrc.roa (hash: Ea7vb/KbqpdCWL5Nsui+X7+vrHZiuSMLp+d9Fc0ie4Y=)
                          3: W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa (hash: ftW/H5OGOvc73tGHyq9jUHDKeB+UWHSYf4rvMWEvpmQ=)
                          4: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: h7MFevATUmb6i2kp2oRR9n4QaOM+eg/4bVI2cG+pXA0=)
                          5: w_LZxwyOUgD4IGBy1szvQwuznT8.roa (hash: YO+GhiXP/lIUMsu3S7EDreywlrg58HTztRPtniTveWM=)
                          6: x7TD4pUm1hOHrZRLC3TJ-5O5zTI.roa (hash: L8tddTG9LQKbBaTsHjpHN79P5a7dlI7sXDT4x985xho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:68:17:f8:6a:5a:d0:2f:2b:d2:ee:be:fd:44:21:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Apr 30 08:01:19 2026 GMT
            Not After : May  1 08:01:19 2026 GMT
        Subject: CN=c81f6708adbad46b3784104813d42f02702aefbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:88:06:4e:43:f1:01:8d:49:e0:5e:58:19:
                    be:f3:4f:ef:b4:2c:d6:3a:c4:71:f7:48:76:f0:8a:
                    57:b2:a3:77:73:b0:56:01:52:4d:d9:21:38:7d:b2:
                    bd:62:3b:46:35:70:71:73:ad:95:44:4c:1f:53:7c:
                    c2:85:9e:0e:e8:fe:1b:ba:44:1e:a5:5b:3b:50:d9:
                    38:ea:8c:ba:5d:4f:63:39:8e:f1:da:6c:b7:de:cc:
                    a8:0e:18:34:79:8e:0a:b2:15:df:25:99:f3:43:06:
                    7a:36:34:cf:e9:29:14:2a:dc:e4:18:b0:e7:cd:54:
                    13:28:f9:5a:40:a2:ea:f8:b5:97:6a:5b:a4:72:bf:
                    c1:34:fe:ca:c9:88:50:98:d5:f8:1d:29:02:89:11:
                    0c:6a:5b:94:b0:85:f1:40:c8:6c:19:a9:09:fe:46:
                    c6:9d:5b:70:a8:fb:9d:07:60:4a:27:9e:94:e9:6c:
                    ad:b9:0f:d2:cb:39:8a:2c:1a:39:43:d7:af:23:76:
                    95:b5:e7:5b:74:f4:48:ee:52:7d:18:21:e4:cf:4a:
                    dd:c3:41:c7:b1:dc:62:a9:2e:f2:19:06:80:b4:bc:
                    d0:3d:e5:81:93:c5:3a:04:4f:f1:0b:6a:fc:12:39:
                    70:33:95:79:2c:2d:01:f6:33:e0:54:67:aa:cf:c8:
                    9d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1F:67:08:AD:BA:D4:6B:37:84:10:48:13:D4:2F:02:70:2A:EF:BE
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:9b:b8:26:2d:80:b7:e3:04:e7:87:78:a6:a8:65:59:3c:
         d3:6f:9c:83:7d:48:a1:e4:3e:63:12:0c:0f:03:c9:1e:41:fd:
         8d:b8:2a:13:1e:93:08:9b:3c:7a:e8:23:8f:84:8c:53:45:7c:
         ed:a5:ed:bb:04:07:d5:86:fa:5e:1c:d1:a8:0a:ae:78:57:b7:
         7d:0b:34:85:50:b0:1b:ef:11:3b:39:47:ac:48:60:69:dd:c6:
         01:05:6b:ea:14:0e:09:c5:fd:e4:1f:de:1a:95:cc:7e:51:9f:
         9a:16:83:d1:a6:05:eb:d7:70:a7:e4:33:fc:cb:d3:bb:40:52:
         7a:a9:43:f0:1d:1b:44:6c:15:7c:b5:91:36:75:34:9f:43:1e:
         6d:01:6f:c7:29:83:b2:06:07:f6:05:3d:de:ae:c2:52:49:5a:
         02:a4:12:5a:de:d0:fd:ca:1e:d4:f4:1b:8d:5c:3f:ac:91:70:
         d6:0f:fa:51:f6:f7:3d:4b:b2:32:97:3d:35:ce:c4:2a:eb:6d:
         a2:cc:53:eb:bb:68:f8:00:98:04:7e:5d:4f:58:e0:ee:b7:5a:
         0d:4e:42:11:57:79:45:0b:d2:e1:dc:dc:79:d0:b8:fc:b3:8f:
         18:35:7a:a9:ad:30:cd:1b:78:73:d9:60:56:82:79:6b:89:a9:
         ae:9c:69:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:10:59 2026 by rpki-client