Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File:                     qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier:          XiSHPLCzDyVqTf0Bz/G75guSln8KwmiVG86/r9C5+js=
Subject key identifier:   5A:59:5E:43:1B:6B:E4:74:B8:76:35:C2:56:10:8C:1B:41:1C:CE:D1
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       019E29CC95C284E3A2CB664E241B6878D8B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number:          1395
Signing time:             Fri 15 May 2026 04:02:13 +0000
Manifest this update:     Fri 15 May 2026 04:02:13 +0000
Manifest next update:     Sat 16 May 2026 04:02:13 +0000
Files and hashes:         1: Ak6u31He6A4CRCNJ-mPt0nCtwZU.roa (hash: 7MkMOyLE5GlfXjuXXJbB4yn5qJnSvZNuEM4M9yp+Ggg=)
                          2: J4F6hmO4Edi1GJ1rYixOAYPJtKw.asa (hash: duHFJJFX3I0YlZcUnlx39bgebUrlvDxKVBOAIrt4NF8=)
                          3: c7fgla_dSX-z5KFPVPyl6usE9oA.asa (hash: m9vQeSG4KsIradAMsd9ae2Gv66PLCXXvhHDN7ENT3BQ=)
                          4: dx3-AQN3WL647_MWerdOTTLQl5c.asa (hash: /71UZPa2NLWcdNywVSl2z1VdiqE2Rm6tSY8lOSE+s/E=)
                          5: gg1rsNo7V5zof6nPOy2P8woJ0Io.roa (hash: ggRo1SvW34/PLbqz4mYFAX1SvQ/7Sh6bs05rEKb+rC8=)
                          6: iKaObausadYfw9kPgxecbJ9r-pc.roa (hash: Oqhnf7OZmJjBnoTR4PKybtGL6ocdLnBasrpV7eemX80=)
                          7: mm9YPqzrw5zY5U3H2B6nLzTqSrA.roa (hash: g53CFeW1Ry00+6lkqgMlD1le2EyIkmKgf8pBvIsao8s=)
                          8: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: 39uNoMwLoau9ox6g2mO3DFy9VT7mMKctAwa7rGeuG/w=)
                          9: u_hh95Vwkks4UP2ORaA383yO97Y.asa (hash: +9FNPQckA3MOMNlYIUC/m8OKXVehox9XWsT4hl75IHk=)
                          10: yRURA_ME4G4HnmjS22RzxWlBmrg.roa (hash: Bbk1x9eZaB94lGJyLOYQomUSMw9B6/AIocIUkwMP9Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cc:95:c2:84:e3:a2:cb:66:4e:24:1b:68:78:d8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: May 15 04:02:13 2026 GMT
            Not After : May 16 04:02:13 2026 GMT
        Subject: CN=5a595e431b6be474b87635c256108c1b411cced1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:2d:b3:6f:f7:72:3c:3c:02:78:7f:93:fd:
                    30:4e:d1:c1:62:9c:ec:0b:a3:ef:2a:2f:45:05:1c:
                    d4:44:ac:f6:91:83:e4:23:28:61:35:fc:ad:12:7f:
                    30:bd:7c:0e:ca:77:29:fc:41:ec:67:21:6f:5d:fb:
                    37:db:b5:03:6e:02:43:7e:e7:b1:ca:58:7c:02:08:
                    cd:80:74:ae:b6:96:43:76:7e:96:b6:82:7b:30:2d:
                    a5:1e:9e:5e:40:86:48:36:cb:ff:77:39:ce:ed:4e:
                    3b:2e:f7:2d:fe:d8:7e:10:94:57:5d:9a:c8:c2:0b:
                    63:77:4b:7d:c8:27:b6:62:55:e6:ad:7f:68:ce:2d:
                    ea:9f:ed:f0:88:ba:32:d8:63:83:70:7c:9e:85:7e:
                    18:28:19:d4:5d:ac:11:e2:1e:7a:61:b8:21:c5:8d:
                    44:4f:c8:71:61:93:4a:97:b7:99:f0:5a:bf:37:6f:
                    25:68:c5:9c:03:2e:f1:dc:39:77:7a:5d:58:c5:8f:
                    0e:1a:12:44:d7:b1:42:f7:54:f8:5c:99:94:13:35:
                    f5:f5:b0:f4:ef:68:0c:3b:f3:66:03:05:36:04:cd:
                    c4:9c:6a:fd:f0:1a:5a:5c:db:85:1e:32:34:4e:3c:
                    fb:cb:2f:d0:d4:d6:9b:1d:2c:a1:c4:26:85:00:64:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:59:5E:43:1B:6B:E4:74:B8:76:35:C2:56:10:8C:1B:41:1C:CE:D1
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ac:8e:d7:c9:91:40:b1:1d:be:cd:f4:1f:6f:1f:09:66:a0:
         e6:0e:1d:2e:24:35:50:0d:3a:f5:1a:f6:e6:e5:8e:c6:ad:87:
         85:37:c6:d8:ff:11:c2:1f:d7:78:2c:8d:c9:31:aa:2d:7f:82:
         70:cb:37:ae:a0:70:35:9f:db:01:f3:8e:b7:f6:db:5e:7a:19:
         c7:dc:e5:34:a7:44:c4:0f:79:56:57:5b:89:79:2e:13:d4:57:
         3f:23:89:0b:16:dc:6c:39:d1:1e:8f:0c:d3:3c:a4:98:33:2b:
         43:1a:7d:12:82:86:1a:d7:32:58:80:29:98:0a:a0:bf:44:54:
         f0:4f:cb:e8:c0:a0:13:f7:4b:2e:1c:ac:b6:06:5c:80:90:75:
         e2:62:59:36:ea:dc:3d:a0:27:5e:f6:e1:98:65:df:29:15:89:
         7b:79:87:f6:98:50:e3:e0:c9:6d:39:1d:31:97:34:b0:b0:27:
         12:99:ad:2c:16:d3:4d:43:d2:70:07:66:18:d9:8e:b0:31:45:
         f5:d3:f1:ed:10:bd:ce:d7:26:83:21:5e:97:aa:a0:96:21:be:
         dd:42:af:3a:e0:79:f9:72:6e:01:3d:23:5e:d6:4c:c6:2c:8c:
         3d:09:be:6a:be:d8:56:09:4a:f8:3b:6f:0a:34:c8:70:df:2d:
         62:49:81:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:06 2026 by rpki-client