Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          tcWqYx9AHldUY/ygasg0xxdLozIy9QLsjrHUybu1Nyk=
Subject key identifier:   0B:DF:F9:0E:CD:3B:49:E0:DB:39:81:40:2D:BB:01:9C:22:74:91:C2
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       019E29CB6ED706A0F84631D75C3183675C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          13EA
Signing time:             Fri 15 May 2026 04:00:58 +0000
Manifest this update:     Fri 15 May 2026 04:00:58 +0000
Manifest next update:     Sat 16 May 2026 04:00:58 +0000
Files and hashes:         1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: GVwAMIuYQjc+qtWZNf56Dfh4dROTBJY2IvnGcClbgAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cb:6e:d7:06:a0:f8:46:31:d7:5c:31:83:67:5c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: May 15 04:00:58 2026 GMT
            Not After : May 16 04:00:58 2026 GMT
        Subject: CN=0bdff90ecd3b49e0db3981402dbb019c227491c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:ef:19:54:4a:6d:2b:8e:64:0f:56:ee:98:
                    a0:8d:69:12:ab:ff:31:21:2e:68:58:ad:5c:5e:80:
                    1d:6d:c6:6a:0e:be:59:cf:ab:9f:c1:5e:8f:e2:ba:
                    f8:8d:b9:c3:b0:d9:69:dd:34:aa:fc:14:97:4b:f8:
                    c2:fb:ba:7c:dd:85:f7:08:17:dc:27:01:ca:70:86:
                    6c:fd:76:21:36:b6:5d:01:d9:b5:d0:99:2b:8a:f7:
                    47:18:23:06:a0:4e:da:60:b0:f4:46:19:22:8b:cf:
                    e9:91:69:07:91:e9:64:53:f6:3d:c7:20:2f:99:a9:
                    ed:2c:af:f4:a9:0e:5b:32:eb:af:e6:14:5c:94:43:
                    c3:87:7f:3b:8e:26:e3:cb:95:4c:a7:f7:51:0b:e6:
                    ad:1d:a3:b9:b7:97:2f:8b:52:c9:34:87:b7:82:67:
                    a2:f2:80:de:47:6f:cd:3d:a2:76:71:9d:3d:80:0f:
                    93:20:35:e8:7d:d1:9e:c9:74:8a:0e:a1:14:6d:c5:
                    5a:b8:55:71:fe:51:de:e7:9c:79:3f:b6:54:78:04:
                    d0:8c:e6:1d:40:39:af:31:31:d4:cf:f4:ac:7e:7a:
                    06:47:29:d7:82:40:97:e6:be:6b:0d:88:d7:b3:4e:
                    62:cf:64:49:03:1b:4e:3c:4d:d8:28:e8:11:35:ed:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DF:F9:0E:CD:3B:49:E0:DB:39:81:40:2D:BB:01:9C:22:74:91:C2
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:35:ec:3e:1f:ce:46:46:15:95:fb:02:b3:6b:9a:38:c2:06:
         4e:1d:52:5d:43:86:ad:95:b1:16:4a:fd:c2:98:11:b7:2d:71:
         2c:5f:f1:7a:b9:c9:14:b8:67:39:10:96:28:68:08:54:42:80:
         78:46:78:dc:9d:21:2e:18:e4:1c:ff:48:8c:9f:df:4e:be:d9:
         d2:9b:67:bc:e0:9b:01:ac:93:d1:39:06:b5:0d:5c:16:45:d7:
         5c:9a:bd:ca:4c:46:0d:0c:15:02:21:83:56:97:d0:db:d9:87:
         b7:64:eb:8e:49:fd:ff:7c:79:9b:f7:f5:4a:c2:5b:7c:12:e4:
         bc:83:29:8d:af:d3:2c:0d:d9:e6:dd:da:29:48:63:bb:5c:75:
         88:9b:b4:86:59:f4:52:f1:4e:06:ba:95:25:f5:2b:4a:f1:c1:
         f4:8d:cc:ec:b8:75:bf:3f:32:ab:ab:ec:52:41:37:72:02:b5:
         0f:3f:52:ef:90:3f:e3:de:1a:41:6b:ce:c5:48:a6:58:f9:84:
         4f:24:b7:d5:01:b6:44:9f:6c:a7:e2:cc:04:dd:de:ab:4c:ef:
         0b:0d:fd:36:c7:21:bc:f8:8e:52:52:f9:bf:c2:9e:fa:34:bc:
         1d:4a:42:5f:ab:07:2e:70:b7:d3:6f:1c:93:82:34:5b:a0:d6:
         c1:d7:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:28 2026 by rpki-client