Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File:                     qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier:          0C+2qFRXp/hUEYZ6HjOxc79uJ4M6AWfj2ZtB18xzbB0=
Subject key identifier:   A3:58:D0:71:04:2C:59:CF:12:A2:71:A2:A4:8C:4E:D6:A8:E6:38:D3
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer:       /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial:       019DDD316E2B0C83BB4B8F3668CC18997343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number:          0F73
Signing time:             Thu 30 Apr 2026 07:01:37 +0000
Manifest this update:     Thu 30 Apr 2026 07:01:37 +0000
Manifest next update:     Fri 01 May 2026 07:01:37 +0000
Files and hashes:         1: JLgki92L26vgomF3wfSSuh1nDvo.roa (hash: CiXEqBng4Y1tHGwa/wiL3CgsnavhpNvBwwl4OGe5/4I=)
                          2: NcpN8sW8qQBrAdmBdPAjvFVJbQ4.asa (hash: YF9c0azhuf6/qBJm+KdWT2V2rii+OM05USUNERyUwKo=)
                          3: fKbITxoxfBmzkn5iR0VgygDPyi0.roa (hash: KdtKUNbFJJYqnd0wx10wIIQRBQE9tIaSTN//dYTfeQQ=)
                          4: m6hIErNMpBZVw2qZHKcW2BJUVwg.roa (hash: CKojvhqXdroeSLPSwIAOGazGVtOAtTG05hf6NLW4WCs=)
                          5: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: rqtHL/C767HEsYcHIpFDigAhjHB8dM9wbMnIQmz7okw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:31:6e:2b:0c:83:bb:4b:8f:36:68:cc:18:99:73:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
        Validity
            Not Before: Apr 30 07:01:37 2026 GMT
            Not After : May  1 07:01:37 2026 GMT
        Subject: CN=a358d071042c59cf12a271a2a48c4ed6a8e638d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:44:70:e9:95:6d:73:c9:fc:1d:1f:9d:9c:
                    02:e1:fe:95:a7:62:3a:3e:af:95:55:5d:c1:a9:db:
                    6a:f9:53:96:20:47:7e:9b:3c:f1:29:3a:67:1d:68:
                    24:cf:3c:fd:04:0e:8a:04:9c:52:86:5d:7b:97:71:
                    f2:ea:36:e6:4a:16:d4:d5:48:5d:a6:ea:e6:23:02:
                    9e:af:cc:b1:f4:9b:3d:40:aa:39:1c:09:c1:d7:02:
                    63:92:b8:5f:9e:93:ea:16:bb:38:59:bd:75:8d:97:
                    6e:00:00:2e:36:45:f5:6a:5c:f4:1c:a9:4f:f7:c2:
                    53:f6:c6:d6:59:12:48:86:df:46:8b:1d:3c:cf:ff:
                    0f:fd:ef:d6:48:b7:19:fb:44:06:f9:12:32:d8:d5:
                    7d:a1:c7:7c:0d:7b:6d:0a:0c:82:82:16:8b:29:8e:
                    a5:af:e0:81:99:a4:63:6e:49:bd:e1:f2:12:24:81:
                    4d:cb:f9:58:ed:5c:3f:44:03:83:af:61:d5:9e:8e:
                    a8:4d:9b:61:bd:8c:74:00:16:95:09:ec:23:78:cb:
                    00:51:7a:94:79:f0:06:5b:dc:2a:06:d5:13:26:24:
                    12:0d:75:97:b6:04:bb:9d:13:2e:03:80:a5:b8:47:
                    14:2c:31:96:89:c3:3f:15:43:f9:5f:73:31:52:47:
                    34:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:58:D0:71:04:2C:59:CF:12:A2:71:A2:A4:8C:4E:D6:A8:E6:38:D3
            X509v3 Authority Key Identifier:
                keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:77:57:fb:0f:cc:df:2a:f3:e9:23:5f:e6:47:e4:77:38:fa:
         72:5b:e8:f3:71:e2:05:ab:31:6c:61:19:b5:fb:57:e4:b8:5d:
         8d:a3:16:86:10:85:7a:e3:d4:db:a3:01:55:88:01:35:20:5f:
         bd:49:a2:f9:14:62:fb:ec:81:b7:00:00:13:3d:3c:0f:a4:d2:
         9a:e2:48:22:7c:e8:19:2e:7b:64:44:d2:26:2f:9e:bf:97:e0:
         ef:30:6d:4c:9f:94:00:e0:fd:e1:56:a6:a3:11:4a:de:88:ae:
         24:26:88:0f:36:0a:33:27:21:a2:d3:f4:a7:df:ab:78:45:39:
         b2:b2:0d:61:3b:9e:90:15:49:b3:4a:7c:7a:66:d8:80:ee:8a:
         3d:83:ae:95:92:98:10:63:98:4f:2d:d6:b7:55:9c:bc:e5:13:
         27:49:b7:70:af:96:e3:c5:7c:1a:8a:79:69:3f:bd:44:71:c2:
         88:8b:4d:0d:d2:cd:04:9d:d2:5c:c7:55:b5:e0:3f:24:58:4c:
         02:d9:07:e4:e8:7c:94:4d:67:72:18:a6:80:7e:1e:9e:01:e9:
         30:1b:ed:b9:d4:76:b8:9b:e0:16:c9:5a:53:5a:8c:63:b6:dc:
         ca:b4:7d:c2:8d:dc:d5:95:be:d0:4a:cf:a4:ce:de:0f:d4:d0:
         e9:42:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:59:34 2026 by rpki-client