Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File:                     qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier:          D63lZm9dJqgW952mm7+kzsk+9bgVPQnDVuWV6VV/2aI=
Subject key identifier:   EF:1A:66:89:94:CC:FB:CA:CE:35:D8:A7:80:CE:B9:CE:15:69:85:E5
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer:       /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial:       019E2B1548598DA8944C49D61CBD64BF8E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number:          190B
Signing time:             Fri 15 May 2026 10:01:15 +0000
Manifest this update:     Fri 15 May 2026 10:01:15 +0000
Manifest next update:     Sat 16 May 2026 10:01:15 +0000
Files and hashes:         1: IDJxz5Lf-bhA1wZBvX00WPWc418.roa (hash: jtojvMTm31S/WThDl0+VIPwens+k95gEp5w6ddEUhik=)
                          2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: A/VC6XhqrAAnBvwXFPaQOALdAcYPJAfnnYe0gSRYN9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:15:48:59:8d:a8:94:4c:49:d6:1c:bd:64:bf:8e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
        Validity
            Not Before: May 15 10:01:15 2026 GMT
            Not After : May 16 10:01:15 2026 GMT
        Subject: CN=ef1a668994ccfbcace35d8a780ceb9ce156985e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:78:35:23:7b:98:9c:84:30:9f:64:57:bc:
                    87:87:b6:2a:26:b9:fb:50:37:53:bf:ab:c2:59:ec:
                    51:93:a5:00:df:a8:a9:5b:04:2f:a9:df:8c:5e:33:
                    89:c9:f0:96:89:db:b2:a7:aa:fd:fe:5d:56:e4:1a:
                    d5:53:1a:2b:9d:f3:8a:c6:cc:43:74:a2:1f:23:e4:
                    7e:cc:b7:9a:7c:63:c9:50:06:e4:62:b2:8c:bc:b6:
                    fc:03:6f:cb:12:b8:e7:f1:2e:b4:02:3f:c2:7b:01:
                    f6:eb:a1:f9:fb:0e:29:3e:f4:82:41:28:ad:18:32:
                    d9:0b:08:31:84:be:86:05:21:79:7f:76:07:e8:93:
                    40:1a:04:c1:a4:e4:ca:07:a0:f9:66:73:7b:45:d1:
                    35:d6:10:64:2f:77:35:48:ca:c5:47:1b:09:b1:7c:
                    a5:82:dc:08:32:29:35:22:72:19:56:7b:d5:83:25:
                    73:dc:51:8b:74:07:04:8f:54:69:e0:27:ee:39:68:
                    8d:28:d7:48:b3:ea:36:8c:1d:31:29:e6:7e:b7:4f:
                    69:7a:a8:73:13:b7:66:01:b3:15:a4:38:a0:3e:c9:
                    bf:d8:f0:a2:7e:4a:fd:a9:33:48:89:eb:c4:50:c3:
                    c8:23:45:9a:13:2e:8d:2a:a7:8c:af:fb:90:fb:da:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1A:66:89:94:CC:FB:CA:CE:35:D8:A7:80:CE:B9:CE:15:69:85:E5
            X509v3 Authority Key Identifier:
                keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:79:04:e1:4e:6a:38:d3:18:93:86:d3:82:f7:24:a5:c8:e0:
         6e:ad:9c:98:1b:88:f3:51:35:f0:27:76:78:43:d5:d7:e1:a4:
         66:02:48:22:e4:10:08:fa:8b:39:1d:3d:0f:df:8d:4f:ae:97:
         7d:79:bc:42:c6:ce:fd:1e:85:aa:3d:18:cc:5d:27:e4:13:b3:
         54:1a:89:1c:9d:f3:3b:ea:fd:0c:57:b0:d1:ba:9a:58:02:fe:
         ee:5b:7f:95:c0:9e:7a:2d:b5:0f:81:ec:5c:28:71:20:8a:f1:
         fa:60:8a:6e:73:34:b7:63:b4:34:db:59:1e:b2:b5:6f:cf:3d:
         e7:f7:f2:9d:b3:79:38:0d:b4:1f:24:70:54:36:fd:03:06:64:
         23:4f:fc:94:e3:9e:71:a3:61:a0:5a:60:75:4b:c3:f9:d1:06:
         0b:f0:50:a7:32:c3:64:98:2f:6e:bf:6b:b5:bf:aa:ae:bb:95:
         c6:59:9c:83:0d:df:05:b9:95:e7:68:bb:c7:45:51:9a:90:09:
         cf:36:47:48:56:a4:67:0a:b4:e7:5b:5b:37:3f:2b:d3:c3:42:
         c3:98:18:5c:b5:e5:07:35:f8:2b:67:5c:53:7c:fd:03:32:48:
         ae:90:e6:74:79:55:07:fd:2e:d7:cb:48:01:29:e8:d0:19:8c:
         04:17:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 18:20:33 2026 by rpki-client