Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          ll5emK/wen559o5u0au+KJtQj5kI5mzDP6tv9bQVS2U=
Subject key identifier:   33:54:D3:BE:15:1E:E6:EA:2D:E6:02:64:54:37:49:A5:17:4E:BE:C9
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       019E3260FBC8E5762336BC2176466F64AED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          1942
Signing time:             Sat 16 May 2026 20:01:17 +0000
Manifest this update:     Sat 16 May 2026 20:01:17 +0000
Manifest next update:     Sun 17 May 2026 20:01:17 +0000
Files and hashes:         1: A7_y22PIg0hPAMpCsH_sCKGtyg8.roa (hash: jYk6V/JIFZujPYouL6dTCjVEwQr4OkGYQk0D5ScRZVo=)
                          2: Ksd3OiB_AIxcmUtGOKUPQuXbBbs.roa (hash: mbt2rFbow8jwUY5FOtfvQrtCibBO+H5M+VNJrWE5hUY=)
                          3: bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa (hash: BubMw86WqvaBOSfoNUBrIVcL+fL5Ns64cLxY/APuJ7E=)
                          4: f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa (hash: PDGWp7iUzyz4cXF2Z4OAk/knVLv4u1kvbR76Ezmz3vs=)
                          5: j4Ert-J3RYXgEKpLcLx5_T9dxS8.roa (hash: keE/Qns0D+PUwgQtZ9LOIqamoxuah8ZLWQxn+5RiOWw=)
                          6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: XoTxJ5g75Wz/jir2aUpc1u5RtfCFH4b8uX9iAQnS5Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:60:fb:c8:e5:76:23:36:bc:21:76:46:6f:64:ae:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: May 16 20:01:17 2026 GMT
            Not After : May 17 20:01:17 2026 GMT
        Subject: CN=3354d3be151ee6ea2de60264543749a5174ebec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:2c:5c:00:ba:8b:20:de:7a:c8:8b:f5:65:
                    7d:52:cc:90:bf:5b:2b:b0:66:55:de:6e:f9:09:8e:
                    aa:fc:59:73:c1:97:6e:96:65:98:e6:ed:c7:b2:6a:
                    3f:c0:16:ac:d2:2b:6d:69:d0:f3:85:4a:10:99:0d:
                    16:a3:14:55:80:7f:bd:28:50:89:74:91:53:29:d8:
                    db:03:21:1b:3b:9c:bc:2b:f5:5b:a7:93:6a:27:27:
                    84:59:f3:08:05:cc:85:fa:3e:83:b9:90:7f:5a:5a:
                    59:3f:bc:0a:d2:da:49:d1:3a:4b:99:af:59:42:a0:
                    d9:cb:06:28:61:a3:ad:7d:f2:0f:e6:20:1c:a0:e1:
                    0a:c9:74:4e:dc:55:a5:f4:de:1c:2a:10:71:57:ef:
                    cc:fd:60:6d:94:58:02:6b:43:50:03:9f:04:32:1b:
                    7e:96:6e:19:4c:78:96:f0:47:68:4c:66:45:59:53:
                    9f:1b:ac:8a:28:e4:04:3b:e0:97:06:c9:05:b7:88:
                    de:b5:99:24:5e:51:41:6d:2e:f1:7c:dd:25:ac:45:
                    da:21:d5:5b:30:de:d8:f3:77:83:c0:b9:f1:0f:5f:
                    ab:16:ca:fc:b4:03:69:fa:6c:35:ce:a7:ac:4a:9b:
                    25:be:ea:e2:7d:68:b8:bd:77:6b:d1:cd:1a:2b:8f:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:D3:BE:15:1E:E6:EA:2D:E6:02:64:54:37:49:A5:17:4E:BE:C9
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:26:3d:bf:47:bc:03:f0:7a:ec:d3:80:35:63:12:bb:11:ac:
         f2:79:09:96:7e:50:73:2e:fa:cc:5f:9f:1c:bf:a8:5a:ac:8c:
         5f:64:70:bd:f0:e4:97:82:e8:df:49:f2:8f:84:b6:e8:d0:3b:
         3c:1f:b3:11:b4:1d:4d:b3:6b:19:f8:96:b2:be:0a:74:2e:85:
         3e:94:f7:3e:66:dc:95:53:95:39:8e:ca:26:9f:87:16:a6:e6:
         aa:5f:94:8d:b2:f2:7e:78:81:19:e8:01:de:3b:df:ef:8b:6a:
         f1:62:88:64:f5:95:d1:56:07:26:b9:9c:ce:ad:51:be:8f:d2:
         6b:26:fa:3e:f2:13:d2:6b:ea:8b:9b:22:ca:2e:f7:30:93:45:
         74:2e:1c:58:11:e4:ae:a8:ef:1b:49:63:a2:05:a6:39:32:4e:
         fc:3a:1b:41:ed:00:75:8e:98:36:a1:99:9a:c9:65:33:61:14:
         49:31:bf:a2:51:7c:15:0f:3d:16:c9:6e:26:e9:f3:4c:85:81:
         25:de:83:55:11:60:50:86:97:a4:12:e0:cb:4a:7a:c2:4f:39:
         7b:40:85:1d:ae:8c:30:f9:97:bf:6c:c0:b9:b3:38:5f:ed:04:
         10:34:7f:2a:8c:76:6f:8f:ae:8a:16:fc:32:93:5e:35:a7:7a:
         83:ac:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:13 2026 by rpki-client