Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File:                     QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier:          WctbaY6wjQILcNnj/gIgtvMlX854Gu5nXq/wiDdbs7s=
Subject key identifier:   D3:D1:0B:41:DE:67:88:0C:A5:6A:F1:2F:7F:F1:9E:CD:F4:52:C3:03
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer:       /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial:       019DFA604B41296AD9A92F5EDC43CED0FFCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number:          0407
Signing time:             Tue 05 May 2026 23:01:47 +0000
Manifest this update:     Tue 05 May 2026 23:01:47 +0000
Manifest next update:     Wed 06 May 2026 23:01:47 +0000
Files and hashes:         1: 0fZE0uIvZ6ZkQgfjfFBSc-iQ15Q.roa (hash: XBQwm3jQjgkMj0LZQlnffF8nBMAdgqCU7K93V782wzA=)
                          2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: 0UM0KQzLB+WKzBpW2RiNFe6aaDZ/TBKvBhGz8TugRyI=)
                          3: VL-lnxlE6fflxqRRlw7b9MCnGvo.roa (hash: GtOH60oIJtJHnm++7YABJtPUhpfnGJz3iJ4jvFL6ZBk=)
                          4: hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa (hash: yt1gpylTF5DwEVRgiWOOxqt2J7YwsxusRFsZDCgtRfE=)
                          5: kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa (hash: qZYqyURYcynOIWE252O3MtzO4WaOHKWvGwoZG8pxdGk=)
                          6: sJ4fBRlYkaW2DfbwT41aefbNZtc.asa (hash: KPvz8H9YcmTAaol7AmPzK6hmkkiOVVm9HlZufolZpd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 18:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fa:60:4b:41:29:6a:d9:a9:2f:5e:dc:43:ce:d0:ff:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
        Validity
            Not Before: May  5 23:01:47 2026 GMT
            Not After : May  6 23:01:47 2026 GMT
        Subject: CN=d3d10b41de67880ca56af12f7ff19ecdf452c303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:19:d5:c2:eb:e7:b2:f9:3a:29:77:84:95:
                    e2:07:74:10:d8:2f:a1:f3:52:14:a8:7b:ee:a5:c0:
                    3a:39:1e:58:78:03:62:ee:7f:90:0d:92:85:71:b7:
                    cc:7e:a2:59:12:b6:26:8f:40:16:ce:ba:82:4c:64:
                    23:9b:d4:fe:f0:87:67:5d:98:ad:9a:3e:76:a9:a0:
                    dd:c0:ce:e9:44:62:61:10:5e:5f:9d:12:89:55:3f:
                    7b:49:37:48:05:69:3d:7a:22:bb:7b:b0:3a:29:1c:
                    9f:1b:ad:09:25:6c:3f:df:42:fc:69:b5:85:4c:8a:
                    1a:6b:65:60:0a:dc:0f:0e:93:a6:78:49:e4:51:ab:
                    b5:09:36:a4:58:7a:ee:45:4a:78:cc:b1:e9:b9:2f:
                    17:b8:80:16:44:a6:7c:ff:9c:b4:8a:d7:ed:95:e5:
                    65:60:fe:91:94:19:3a:e5:15:3e:88:41:a4:4d:25:
                    72:01:78:06:7d:13:0c:cb:32:f0:9d:4a:eb:f6:7d:
                    22:41:71:ed:5a:95:76:40:a9:1c:cf:b1:46:dc:b7:
                    b1:ab:5d:3f:9e:0c:01:0d:9f:04:a4:84:19:30:df:
                    df:65:50:2d:7e:bf:7d:51:9e:2d:a1:09:fa:92:ec:
                    92:2e:91:2d:3d:26:6a:32:50:3c:a8:a1:07:53:50:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D1:0B:41:DE:67:88:0C:A5:6A:F1:2F:7F:F1:9E:CD:F4:52:C3:03
            X509v3 Authority Key Identifier:
                keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ad:ed:4f:fc:bb:b0:e4:c9:be:dc:c9:59:b2:6a:86:89:3e:
         cc:fc:aa:e7:a4:6e:cf:6a:90:16:2d:f5:51:3d:47:88:af:62:
         83:e4:16:5e:a8:62:52:fe:6f:ee:48:b8:d9:cc:e3:2a:38:f9:
         c7:f8:10:67:15:54:ee:5e:d7:a9:b9:cb:86:31:ce:13:21:ef:
         40:5e:61:f2:84:3f:61:59:bd:9e:55:50:cf:78:24:9e:79:d3:
         2b:54:4f:5f:62:1f:e8:86:09:4d:7a:7c:0a:c3:12:1e:6b:c2:
         1e:92:bd:11:4d:ea:07:65:4d:2a:7a:0b:3b:95:fb:8a:30:62:
         d4:20:98:80:2e:20:85:84:94:4f:be:5b:75:23:85:6e:0e:48:
         b9:19:ba:16:80:16:c8:55:47:0b:04:f7:de:e0:c1:72:04:a3:
         d0:8d:77:b9:79:be:7f:c5:49:79:2e:f1:b2:c3:e6:db:61:c8:
         80:4b:f9:22:40:b6:6d:db:34:42:04:07:4a:71:d4:23:da:ae:
         6b:c6:db:bb:cc:49:94:d2:64:e2:13:38:2b:71:cb:14:75:5c:
         fb:a1:c0:b9:6e:c0:04:b8:43:e5:37:97:96:30:26:34:87:b6:
         38:56:ff:7a:ac:f2:3c:7a:aa:2e:b1:68:c5:9f:78:b3:a6:a5:
         5e:54:23:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:27:57 2026 by rpki-client