Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
File:                     QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json)
Hash identifier:          72MUVANWbVJMLb4Rm8o4diaPxKESDdIocvDy96VadUc=
Subject key identifier:   37:01:CF:62:66:93:29:9E:A4:F8:5D:82:7B:3E:7B:78:C1:18:6E:AE
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Certificate issuer:       /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial:       019E22492EB98D6EA8043975316B4D9ED14F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
Manifest number:          1437
Signing time:             Wed 13 May 2026 17:01:21 +0000
Manifest this update:     Wed 13 May 2026 17:01:21 +0000
Manifest next update:     Thu 14 May 2026 17:01:21 +0000
Files and hashes:         1: Ncdi86qG3HQ9DUgWZbEHaW9PcFU.asa (hash: fyniArHiC1WFFBjWeWSZsDgdpxc01uvZWE1DTfuzr84=)
                          2: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: Gw1PVLMvMc+BKFwOlNk+yylkOMwm9RTQ6Et6YhIWHJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 17:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:22:49:2e:b9:8d:6e:a8:04:39:75:31:6b:4d:9e:d1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
        Validity
            Not Before: May 13 17:01:21 2026 GMT
            Not After : May 14 17:01:21 2026 GMT
        Subject: CN=3701cf626693299ea4f85d827b3e7b78c1186eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:f3:12:13:62:6c:fe:3b:ac:f1:e0:a2:7a:
                    83:a0:24:36:48:8b:45:33:18:c2:0a:c4:d6:29:c9:
                    77:c9:f8:09:ef:7f:95:03:d7:a2:bf:de:8f:14:56:
                    01:dd:1f:de:a0:ec:15:54:5d:46:bf:ac:55:c5:a1:
                    27:ab:6e:a8:0a:da:62:06:db:cd:00:d8:b8:68:ed:
                    c2:1c:68:71:ec:d5:04:a8:a9:1f:ab:f5:7b:dc:97:
                    41:30:f1:4b:f9:cb:f4:34:1b:50:2e:44:6c:80:13:
                    7e:56:c1:b9:77:e0:4e:6b:97:6b:23:33:cb:d9:9c:
                    36:ee:ab:85:b7:57:d4:81:1f:97:49:16:14:49:8d:
                    1f:bd:35:a9:01:b9:c7:15:e9:74:53:09:80:c2:a1:
                    93:53:f4:f1:60:e9:ac:bc:a3:82:6e:eb:27:25:1f:
                    40:ca:ed:2c:12:bf:b5:6d:74:44:79:8e:28:23:70:
                    8b:8c:22:aa:6e:63:bf:6a:ab:9e:ee:d9:ed:40:0f:
                    ab:38:c5:5f:3a:2a:f3:53:cc:04:ca:c1:3d:cc:c4:
                    f0:c7:61:6d:11:d4:1a:ea:b2:36:a8:d6:1a:07:bb:
                    5f:7e:ba:1b:cd:5b:ce:b7:bd:f4:04:7b:66:65:aa:
                    03:d6:03:98:e5:53:0e:c1:bf:a0:08:bc:bd:a6:65:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:01:CF:62:66:93:29:9E:A4:F8:5D:82:7B:3E:7B:78:C1:18:6E:AE
            X509v3 Authority Key Identifier:
                keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e8:18:7d:cf:ed:3f:00:cd:81:71:bd:db:70:9f:c0:74:f6:
         77:c9:9f:7a:63:a8:64:a1:77:e4:d5:d5:28:80:3d:7a:96:f2:
         de:ab:53:1a:13:0a:9e:f3:11:e5:0b:52:01:b2:9b:74:25:b6:
         07:22:dd:8a:93:81:d0:80:8d:ca:ed:25:89:82:9b:98:c3:5e:
         69:91:4a:e5:b6:ce:60:db:c4:46:76:47:c3:cf:d5:c2:ad:85:
         78:f0:84:44:43:ae:71:b8:ed:2b:55:84:a5:a5:cb:55:a5:1b:
         5a:5f:df:3c:58:90:e2:b5:3f:46:41:94:69:91:0d:5a:a5:68:
         a1:68:24:67:03:bc:05:f7:45:3a:85:4a:a7:12:77:94:c0:8d:
         ad:7f:d4:7a:2f:82:1e:43:c8:61:f1:ab:2a:81:10:73:5c:50:
         df:f9:57:83:e4:e3:a3:3e:65:8e:02:8d:19:6e:09:55:c1:39:
         e9:4a:ee:04:08:c3:c4:0f:aa:4d:d4:70:c6:ba:b3:45:2f:ae:
         c1:d4:30:c8:f6:b2:60:3d:5d:8d:d8:30:31:20:b7:c5:a3:fb:
         52:37:84:96:4f:61:29:e1:64:c1:fc:10:74:09:fd:2d:08:97:
         c7:04:49:24:f4:42:32:3f:d1:1f:f7:e1:5e:bc:a3:79:c2:19:
         33:13:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 00:55:43 2026 by rpki-client