Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File:                     QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier:          tKxavK0lAxA9lf6O2x6cJnuPSh6s2eYk229NK5F5Dd8=
Subject key identifier:   12:D1:CF:ED:49:8B:D0:E2:1B:1C:2B:11:33:AE:57:1C:25:A7:8F:DC
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       019DED80419B62DC7D804FA96DF9F6DDB25C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number:          1416
Signing time:             Sun 03 May 2026 11:01:38 +0000
Manifest this update:     Sun 03 May 2026 11:01:38 +0000
Manifest next update:     Mon 04 May 2026 11:01:38 +0000
Files and hashes:         1: 0sWjJb905jqzQqAPMLxDrrjWBMk.roa (hash: Zma9KLmjg5EV1eKmRL4soE5jPO+CVQlU/IWoQZY27PQ=)
                          2: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: USTYg2L3hl9lE0djdvwlqjD7fie7c/4wd/jZQPZU3AA=)
                          3: V2xIm0MXuFbznin5m4AbMt91R94.roa (hash: MPiaxxk7o8f5I+HVf8eWEZiYR8UOsfetA4mv9WmhsH8=)
                          4: bWmOOPKyQMv70URwqTZU8sllHjY.roa (hash: yQ8N3UwrqjLlEaxQHxKpVivx2+Lei1qK8l2tgkVbZiM=)
                          5: jr2Bs93kCy1qM5dGaxCmTxVRCPs.roa (hash: JQrsYENJWrVuw6dKCnfSnh8ynO6digQQI/K1CgLtuIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ed:80:41:9b:62:dc:7d:80:4f:a9:6d:f9:f6:dd:b2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: May  3 11:01:38 2026 GMT
            Not After : May  4 11:01:38 2026 GMT
        Subject: CN=12d1cfed498bd0e21b1c2b1133ae571c25a78fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:33:a5:05:ce:6c:8c:aa:df:af:d1:b7:79:06:
                    7f:f8:f9:93:ab:24:f7:80:85:98:f1:b0:87:f8:4d:
                    25:cd:5f:de:9a:42:14:f7:1d:60:80:d8:fb:25:55:
                    3c:fe:98:b4:42:85:3e:bc:d1:af:9e:e6:59:85:bb:
                    58:16:87:7b:da:b4:15:70:09:02:d1:a6:c8:9f:fd:
                    3e:d3:6a:15:85:5a:64:06:15:d6:3d:44:55:1f:c7:
                    6c:41:d0:4f:a5:8a:18:e5:55:c7:32:bc:f4:1e:95:
                    a9:c8:2e:17:e8:0b:cf:49:09:98:17:1c:1e:dd:bb:
                    4d:76:81:52:16:3a:ea:aa:7f:da:9c:8f:4b:8d:e1:
                    0a:bf:44:e6:20:ca:07:9c:58:5f:fa:0c:d2:fc:19:
                    bf:cb:29:18:3f:06:27:d3:57:67:f9:42:6a:14:c8:
                    69:44:71:48:c7:af:bf:d6:d7:7a:e1:f8:60:3d:6e:
                    36:7f:bb:f9:8d:f3:e2:e6:24:c9:fe:be:56:93:60:
                    f8:8b:30:71:a7:c7:74:fd:ab:07:6d:7f:4d:05:8a:
                    f8:73:1b:c3:28:99:98:27:d8:a5:36:29:be:e5:20:
                    d5:16:56:ea:c9:8e:1d:ee:06:12:61:a6:a9:27:83:
                    09:57:2c:7d:a1:63:9b:b3:bd:75:68:d1:79:ac:0b:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:CF:ED:49:8B:D0:E2:1B:1C:2B:11:33:AE:57:1C:25:A7:8F:DC
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:81:42:b3:b5:b6:62:59:05:9c:e2:a6:d9:6f:9f:f6:ab:af:
         3c:03:88:f1:b6:f2:b1:c5:db:4a:de:1b:7d:73:eb:51:cd:4d:
         94:30:5c:0c:86:65:2d:45:93:56:b1:2a:51:d7:75:8f:d8:6b:
         72:40:1c:96:f7:09:eb:ae:f3:c6:60:c2:e7:c8:90:23:c8:d5:
         8c:a0:e5:1f:7b:61:7c:89:f8:00:7c:dc:c7:b3:3e:2c:0e:e1:
         4c:f5:94:62:a3:44:3a:4f:b5:74:89:f7:23:2a:c8:ee:51:ef:
         73:eb:39:0e:2e:07:c8:20:5b:e3:dd:4c:bb:77:05:ee:d7:89:
         fe:35:f5:f4:7a:ca:e1:c0:04:4f:88:b8:41:e1:f4:7f:0e:b6:
         3b:28:68:34:b0:b7:f6:8f:7a:c5:a6:ef:8b:49:a4:01:35:d0:
         c4:10:7d:2a:35:a0:94:bb:02:64:6a:f8:51:ee:7a:54:35:0b:
         42:49:77:3b:9d:53:75:a0:00:f6:8f:4b:44:8b:4e:3e:71:d8:
         d3:bb:30:26:29:00:c5:5f:ae:f3:76:f9:1f:dd:f5:01:4b:01:
         a1:54:93:de:5d:c4:e8:7d:d5:e7:7f:8d:07:d0:4f:1d:31:9d:
         11:30:d0:e8:e1:5a:49:45:51:63:39:4e:9f:c0:d0:75:df:8e:
         da:7c:ad:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:32:08 2026 by rpki-client