Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File:                     Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier:          OpDueqFtifd/7sMQNjSH297Ah2wOcCZh8FHRT3YQSoo=
Subject key identifier:   74:82:8D:AE:89:67:EE:6A:30:61:B0:29:87:14:32:90:B6:C6:D7:33
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer:       /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial:       019E31BC3F48AE7AA5F1C100877D21DD6CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number:          0575
Signing time:             Sat 16 May 2026 17:01:20 +0000
Manifest this update:     Sat 16 May 2026 17:01:20 +0000
Manifest next update:     Sun 17 May 2026 17:01:20 +0000
Files and hashes:         1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: n6i1TeI7ZtykN+5C7Bg7Hx8qGwnx5GZdsitcRJufgHs=)
                          2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:3f:48:ae:7a:a5:f1:c1:00:87:7d:21:dd:6c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
        Validity
            Not Before: May 16 17:01:20 2026 GMT
            Not After : May 17 17:01:20 2026 GMT
        Subject: CN=74828dae8967ee6a3061b02987143290b6c6d733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:49:f2:e5:ad:80:92:30:e9:a5:21:93:5e:
                    6c:04:29:5b:d4:92:70:25:70:dd:b3:b8:10:69:d9:
                    33:66:12:36:16:49:37:af:d7:73:95:af:eb:7b:cf:
                    a5:d8:5a:02:eb:bb:4c:45:d9:e3:7e:59:82:3f:a9:
                    3f:39:c1:08:ed:d1:50:9e:ec:17:c5:d9:03:9f:e8:
                    25:09:b7:e9:57:fd:3d:28:16:44:be:d6:a9:9a:65:
                    15:5f:a5:81:96:43:f4:25:39:7f:ce:ff:06:c4:3f:
                    35:83:a2:f9:15:5f:c9:54:5a:b6:0a:11:c3:7a:48:
                    ab:92:7a:eb:ef:b4:2e:cb:00:39:3d:7a:78:b4:e7:
                    1f:5d:5c:3e:4f:7f:c9:22:97:bc:28:07:a6:06:2b:
                    2a:8a:04:0e:4f:f3:ba:2e:71:ba:91:9e:24:07:3e:
                    4f:84:81:1e:4c:1f:54:67:20:54:2a:2f:61:7c:2f:
                    df:ad:b1:eb:c6:67:85:af:2f:68:60:95:71:db:2f:
                    e4:aa:9f:76:5c:f8:e2:65:f4:de:de:07:31:93:15:
                    f9:88:2a:a6:fd:2e:00:49:17:48:9f:86:3e:9d:ee:
                    9e:24:ae:b4:7f:68:af:13:d3:98:b0:ef:38:66:e1:
                    b0:bf:db:32:d3:cb:c4:8c:6b:59:e4:dc:23:4c:21:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:82:8D:AE:89:67:EE:6A:30:61:B0:29:87:14:32:90:B6:C6:D7:33
            X509v3 Authority Key Identifier:
                keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:99:6d:c7:27:f2:1c:27:cc:fe:60:a1:af:c6:3b:6e:be:5a:
         b8:23:5f:a5:d4:1e:ac:9b:20:94:48:b3:94:2e:9e:ae:4e:27:
         07:89:58:61:93:59:b3:d1:87:2a:b9:4a:6b:3e:73:51:7c:4f:
         48:ac:b1:ab:de:aa:b5:4d:6e:4e:06:f1:24:31:da:f4:73:f7:
         07:eb:5f:2c:f7:1a:5f:81:8f:da:a7:dd:14:df:65:1e:23:c7:
         b0:cb:37:13:4b:88:46:a9:91:17:90:2a:32:27:84:3a:0d:d9:
         84:d1:13:61:5b:c1:de:6c:2d:b0:4a:3a:3e:1e:39:2e:fa:68:
         af:65:87:ae:02:e7:e7:a5:fb:ce:57:e7:c4:02:38:2d:09:c8:
         b5:12:be:cc:e0:c2:f8:30:b8:7b:c4:a8:08:7b:3c:50:54:c2:
         53:1f:ca:32:88:28:d7:17:44:a4:ef:42:47:9b:a5:9c:ba:38:
         e4:a5:55:ce:85:a8:41:9c:7a:90:88:d0:a2:57:71:99:96:65:
         5b:10:14:d2:ab:9b:93:50:56:6b:e4:ac:79:d8:47:a4:21:a1:
         23:7e:ae:ec:ca:b8:18:fe:db:24:6d:ef:7d:21:c7:3f:51:59:
         61:c8:db:a9:b4:66:26:2b:56:52:d3:e5:e2:46:8f:ef:a5:51:
         40:a5:ac:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvD9Irnql8cEAh30h3Wz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3
NmQ3NGUwHhcNMjYwNTE2MTcwMTIwWhcNMjYwNTE3MTcwMTIwWjAzMTEwLwYDVQQD
Eyg3NDgyOGRhZTg5NjdlZTZhMzA2MWIwMjk4NzE0MzI5MGI2YzZkNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPBJ8uWtgJIw6aUhk15sBClb1JJw
JXDds7gQadkzZhI2Fkk3r9dzla/re8+l2FoC67tMRdnjflmCP6k/OcEI7dFQnuwX
xdkDn+glCbfpV/09KBZEvtapmmUVX6WBlkP0JTl/zv8GxD81g6L5FV/JVFq2ChHD
ekirknrr77QuywA5PXp4tOcfXVw+T3/JIpe8KAemBisqigQOT/O6LnG6kZ4kBz5P
hIEeTB9UZyBUKi9hfC/frbHrxmeFry9oYJVx2y/kqp92XPjiZfTe3gcxkxX5iCqm
/S4ASRdIn4Y+ne6eJK60f2ivE9OYsO84ZuGwv9sy08vEjGtZ5NwjTCGzdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSCja6JZ+5qMGGwKYcUMpC2xtczMB8GA1UdIwQY
MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt
YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl
LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpltxyfy
HCfM/mChr8Y7br5auCNfpdQerJsglEizlC6erk4nB4lYYZNZs9GHKrlKaz5zUXxP
SKyxq96qtU1uTgbxJDHa9HP3B+tfLPcaX4GP2qfdFN9lHiPHsMs3E0uIRqmRF5Aq
MieEOg3ZhNETYVvB3mwtsEo6Ph45Lvpor2WHrgLn56X7zlfnxAI4LQnItRK+zODC
+DC4e8SoCHs8UFTCUx/KMogo1xdEpO9CR5ulnLo45KVVzoWoQZx6kIjQoldxmZZl
WxAU0qubk1BWa+SsedhHpCGhI36u7Mq4GP7bJG3vfSHHP1FZYcjbqbRmJitWUtPl
4kaP76VRQKWskg==
-----END CERTIFICATE-----
Generated at Sat May 16 22:01:13 2026 by rpki-client