Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          PA660ihMpli4u/4/R+PJYQqNbhKP7P7YRjZ/9CngSkI=
Subject key identifier:   46:44:AC:BA:7C:F5:D4:CA:93:B5:6D:0C:77:9A:CE:9A:A9:F9:F1:DB
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       019E295E298B955283F68496683F03FA6BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          1911
Signing time:             Fri 15 May 2026 02:01:37 +0000
Manifest this update:     Fri 15 May 2026 02:01:37 +0000
Manifest next update:     Sat 16 May 2026 02:01:37 +0000
Files and hashes:         1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
                          2: 6wrwVwIOmyHRFv2kHnVse0hIMz0.roa (hash: 3Bl4eyRcujw6eiEUMKOOuOVx73Mu069CKt56gjYDvno=)
                          3: MaMuRhJpZN3sUs2ReczUrxtPqog.roa (hash: CIDmAVgYtghMXGXHEdC7pvKkJAeXg2JMbpBDZ4AJ2O8=)
                          4: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: G93ov/OGLPJhAv27vjDRNYxLMTV5rhhnueXWD3z7XrA=)
                          5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5e:29:8b:95:52:83:f6:84:96:68:3f:03:fa:6b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: May 15 02:01:37 2026 GMT
            Not After : May 16 02:01:37 2026 GMT
        Subject: CN=4644acba7cf5d4ca93b56d0c779ace9aa9f9f1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:b5:74:ac:e1:1d:f0:a2:2e:8f:df:a2:0c:
                    d4:56:c5:ac:12:25:74:ee:57:3a:a9:4c:9d:56:97:
                    b8:64:38:c1:e5:c1:a8:63:8d:d0:df:ed:a5:b5:50:
                    4c:60:2b:8b:18:6c:d8:9f:7c:56:85:58:a8:19:92:
                    d1:cc:7a:f3:df:bc:20:a3:c0:40:97:3c:07:46:0f:
                    d9:6e:39:d2:ea:d6:0a:3a:de:7a:91:33:fa:2f:cd:
                    f2:d3:03:28:55:38:a3:e9:62:e1:5f:b7:66:b8:ef:
                    8e:63:f7:8b:ca:3e:6f:1c:61:ce:a9:bd:7e:5d:b3:
                    03:f0:13:2e:75:77:ef:4e:66:05:f4:ac:40:3d:b9:
                    3e:fe:17:ec:45:ea:86:79:d1:9c:a2:9e:be:1b:8f:
                    77:7d:f0:10:d7:7a:07:6d:4c:00:c6:d6:82:7a:88:
                    7e:0a:7c:66:ee:78:d5:d6:4c:66:26:de:55:63:1c:
                    a0:a6:8f:ff:b8:66:9a:75:e5:a0:f2:40:ba:83:94:
                    dc:1a:5b:ea:d5:f9:21:15:64:ee:8d:7c:39:db:53:
                    b4:5e:b7:dd:1b:d6:1f:28:01:da:2c:cc:a4:15:e4:
                    9b:ac:48:52:ea:fc:d0:6f:76:fc:97:a7:52:85:ba:
                    9f:76:3c:18:95:f5:9a:25:64:1e:3b:e8:a9:f5:4b:
                    84:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:44:AC:BA:7C:F5:D4:CA:93:B5:6D:0C:77:9A:CE:9A:A9:F9:F1:DB
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c1:3b:81:5f:94:19:a0:00:4e:75:e5:1a:8f:5a:1f:18:a1:
         2a:f0:2d:c0:68:c1:68:34:62:1e:11:2f:fb:d5:f5:79:f1:5b:
         cc:5c:d1:c1:25:b0:2d:7c:76:db:36:4a:3c:c2:b0:32:3e:ef:
         ee:a6:de:88:d1:d2:4d:b3:12:0c:5f:b0:f2:ef:67:fa:a8:e3:
         48:37:93:ad:25:5d:3f:9f:d7:e0:79:1d:41:c0:93:cb:07:a7:
         1b:c6:ea:b1:f6:94:e9:22:96:4d:b4:2c:de:40:49:fe:4d:de:
         19:68:54:ff:64:97:b3:f3:6b:d0:cd:fa:1e:be:15:85:d7:49:
         b8:05:8f:7c:5e:59:b5:ba:bb:88:14:1d:a6:e7:7d:f7:49:92:
         d4:7e:b7:b6:fa:12:05:f2:6e:52:d4:76:97:8a:08:37:de:d6:
         2a:83:53:81:64:e9:36:54:d9:49:f2:24:29:ab:f6:04:b0:54:
         a5:ec:c6:67:a6:ea:7e:aa:42:11:6d:47:df:b3:5c:0c:a5:68:
         ff:d0:13:53:df:3a:4d:09:bd:62:0c:9d:c5:83:63:80:74:12:
         d9:f3:2e:f3:a9:3d:79:fe:e0:18:cc:7e:b1:ca:2c:ee:09:70:
         b4:1c:0d:75:d7:f1:7b:1e:0c:e6:2f:31:d2:a9:a3:27:44:79:
         99:15:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:53 2026 by rpki-client