Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File:                     Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier:          Dulw+BLvZfAPPd+TO77+7iarlExoPwQoh2coJZSCE/c=
Subject key identifier:   74:A0:02:66:1C:A3:00:28:FF:56:DD:B0:13:94:A1:E9:AA:59:0E:D4
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer:       /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial:       019DEDB73C310EB0A80DA83FE2DD0E7C4F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number:          1594
Signing time:             Sun 03 May 2026 12:01:41 +0000
Manifest this update:     Sun 03 May 2026 12:01:41 +0000
Manifest next update:     Mon 04 May 2026 12:01:41 +0000
Files and hashes:         1: 1-fDNlBb6dsCiNLwxYDANed4hKIM.roa (hash: 9WlEGtitw0vTUbPB2qKPl7C4ap723iLSdLT/GkzHijE=)
                          2: EeCb3xsgZulN1LmF6ikRslFxSCw.roa (hash: jjFm2wg01dKI6dAHnYnTU6ux1bEVbh+vpvsqWitVX/U=)
                          3: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: 91sICYRNZUOiOPwAMcJNr9tmQER7OkJgW887+uQZVdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ed:b7:3c:31:0e:b0:a8:0d:a8:3f:e2:dd:0e:7c:4f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
        Validity
            Not Before: May  3 12:01:41 2026 GMT
            Not After : May  4 12:01:41 2026 GMT
        Subject: CN=74a002661ca30028ff56ddb01394a1e9aa590ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e7:6d:a0:ae:22:e2:0e:a8:ca:13:af:37:55:
                    0c:4c:85:e1:08:b5:09:45:4c:26:c9:02:9a:ff:57:
                    f8:97:3d:a3:f5:b6:9f:64:e7:63:b8:ef:79:aa:d9:
                    b0:f5:47:13:e9:98:3a:73:22:11:e9:51:dd:4a:ef:
                    28:d2:02:34:d7:87:b7:71:07:26:e5:8f:e3:d3:f0:
                    03:63:cd:e9:35:1e:f5:b0:b0:78:33:55:b4:c0:7f:
                    3b:3d:33:70:52:f3:97:60:a9:12:15:c0:ad:f9:7d:
                    52:16:cd:d9:52:89:b4:c7:f7:ba:25:49:69:64:4e:
                    f8:0a:f8:66:01:88:f5:1c:e1:cb:17:6f:ac:c7:e8:
                    95:b7:a9:7b:e8:e9:ab:49:ef:8b:3e:99:f9:5c:c4:
                    a7:bf:fb:30:e7:db:e5:a1:ba:3b:ca:1f:29:21:52:
                    1e:d3:72:76:88:cb:b2:ef:b8:cd:7e:2b:1a:75:9e:
                    81:30:d4:0f:2a:56:bc:09:3f:a4:0e:51:cd:ff:c4:
                    39:69:4f:97:4b:91:8c:5b:29:fd:8a:ee:62:35:49:
                    16:58:cf:e4:02:9e:8f:59:f5:88:67:5a:fd:43:83:
                    4a:dd:30:53:8d:85:4b:10:92:e1:b8:7f:e4:36:8d:
                    a4:3a:6d:c9:51:25:3a:99:4f:a3:5f:ee:57:d6:1c:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A0:02:66:1C:A3:00:28:FF:56:DD:B0:13:94:A1:E9:AA:59:0E:D4
            X509v3 Authority Key Identifier:
                keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ab:ad:0c:62:48:7e:9c:4f:06:6b:97:55:30:5d:ac:2d:83:
         27:74:0f:ac:eb:00:e9:93:96:9f:03:d0:0c:66:ed:10:6b:c9:
         03:6b:a0:9e:00:00:ea:24:a5:b5:f8:aa:38:ab:a3:37:c0:46:
         99:3e:9d:1b:02:b9:6b:0b:52:85:61:33:ea:b3:dc:79:18:20:
         45:99:87:43:d6:bf:43:a2:99:91:b0:9e:a2:37:fb:9d:be:d3:
         80:7d:dc:ea:f2:7d:f9:38:e4:0e:3a:7f:1a:f6:58:4d:d1:53:
         03:48:1b:c8:ec:9c:e7:3e:09:1d:37:e8:9c:8d:bb:16:f5:33:
         62:53:43:f0:20:b2:53:e0:60:b6:00:30:50:7e:01:6b:98:aa:
         1a:a7:c4:44:4a:e3:c0:66:ba:36:dc:4f:45:c6:58:ac:96:e7:
         09:f1:fc:da:2e:c8:8e:09:dc:2b:c1:e2:68:82:fc:87:45:9d:
         93:d3:1c:84:1d:8c:10:e4:db:99:6c:56:ce:1f:7a:f1:55:d2:
         1a:84:09:55:46:33:4e:ac:2c:c4:bc:b1:05:d5:77:92:76:51:
         32:09:39:d5:1e:16:a4:2f:79:11:c9:fe:ed:98:99:aa:a9:d2:
         ad:aa:93:54:4a:c2:1a:d4:79:c2:e0:f4:a2:ea:68:d2:68:6e:
         31:7c:82:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3ttzwxDrCoDag/4t0OfE8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmViZTBiNjBiYWUyZWNiZjIxZWYxNGZjNWZkYzlkZGI5
YTNmMjEwHhcNMjYwNTAzMTIwMTQxWhcNMjYwNTA0MTIwMTQxWjAzMTEwLwYDVQQD
Eyg3NGEwMDI2NjFjYTMwMDI4ZmY1NmRkYjAxMzk0YTFlOWFhNTkwZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+dtoK4i4g6oyhOvN1UMTIXhCLUJ
RUwmyQKa/1f4lz2j9bafZOdjuO95qtmw9UcT6Zg6cyIR6VHdSu8o0gI014e3cQcm
5Y/j0/ADY83pNR71sLB4M1W0wH87PTNwUvOXYKkSFcCt+X1SFs3ZUom0x/e6JUlp
ZE74CvhmAYj1HOHLF2+sx+iVt6l76OmrSe+LPpn5XMSnv/sw59vlobo7yh8pIVIe
03J2iMuy77jNfisadZ6BMNQPKla8CT+kDlHN/8Q5aU+XS5GMWyn9iu5iNUkWWM/k
Ap6PWfWIZ1r9Q4NK3TBTjYVLEJLhuH/kNo2kOm3JUSU6mU+jX+5X1hzPtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSgAmYcowAo/1bdsBOUoemqWQ7UMB8GA1UdIwQY
MBaAFEMuvgtguuLsvyHvFPxf3J3bmj8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NGM3MGQtZjU3YS00YTU2LWIyMGMt
MTM5OWFkMzdjNGUzLzEvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NGM3MGQtZjU3YS00YTU2LWIyMGMtMTM5OWFkMzdjNGUz
LzEvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAequtDGJI
fpxPBmuXVTBdrC2DJ3QPrOsA6ZOWnwPQDGbtEGvJA2ugngAA6iSltfiqOKujN8BG
mT6dGwK5awtShWEz6rPceRggRZmHQ9a/Q6KZkbCeojf7nb7TgH3c6vJ9+TjkDjp/
GvZYTdFTA0gbyOyc5z4JHTfonI27FvUzYlND8CCyU+BgtgAwUH4Ba5iqGqfERErj
wGa6NtxPRcZYrJbnCfH82i7IjgncK8HiaIL8h0Wdk9MchB2MEOTbmWxWzh968VXS
GoQJVUYzTqwsxLyxBdV3knZRMgk51R4WpC95Ecn+7ZiZqqnSraqTVErCGtR5wuD0
oupo0mhuMXyCrQ==
-----END CERTIFICATE-----
Generated at Sun May 3 15:33:11 2026 by rpki-client