Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File:                     QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier:          P8MiI6DHKbdiNyow/CEXFnQV+wiXEapG90BgPa63pS0=
Subject key identifier:   45:F6:60:D5:1A:58:99:2B:10:44:B8:40:86:AD:BA:61:A5:6C:2E:47
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer:       /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial:       019E7D43C26B3F413E0248A47CB180E2A89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number:          193F
Signing time:             Sun 31 May 2026 09:00:53 +0000
Manifest this update:     Sun 31 May 2026 09:00:53 +0000
Manifest next update:     Mon 01 Jun 2026 09:00:53 +0000
Files and hashes:         1: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: UvPJHDuZUGMOiN6kL4fJtKI5/kmsMAr0hhBiBMUtkNE=)
                          2: mTYFd1745jhrZ9TtN2i23HR2pUI.roa (hash: ydADvfnj2q9V4OlnDPfNddiaxsr5Yrl3BEkKtbnsrx4=)
                          3: nOreBNvB9sHvjaOwA-7mkOrWqLI.roa (hash: PolGTwJfcBCQ5ul8B/u+HLxsm0nGBzqvFUKDQhFP6Lk=)
                          4: pPjzGwxRrQB5-40BluFsbIPRays.roa (hash: sQ+RWTCTmzmCdnVJPlVfZs+TlcOrO5vdITrduRsIAW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7d:43:c2:6b:3f:41:3e:02:48:a4:7c:b1:80:e2:a8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
        Validity
            Not Before: May 31 09:00:53 2026 GMT
            Not After : Jun  1 09:00:53 2026 GMT
        Subject: CN=45f660d51a58992b1044b84086adba61a56c2e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dc:2a:bc:9d:34:59:c8:7e:7e:24:19:85:85:
                    5d:2f:f5:b8:90:f4:63:bb:65:11:a5:e0:d5:f7:35:
                    f5:16:90:cd:5a:60:82:fd:78:3c:68:12:f9:21:1f:
                    8b:f7:61:b3:e9:48:11:6f:85:f2:81:82:76:35:51:
                    76:c8:7d:d5:c4:c8:48:8c:17:a5:43:a0:56:4e:06:
                    7a:07:fb:e1:c2:e7:2a:29:01:62:4f:a2:8c:5c:fa:
                    c5:20:00:00:80:c4:f7:26:bc:8e:b2:53:19:c0:c1:
                    70:09:55:2d:9b:33:b0:44:52:fb:8b:a0:5f:16:97:
                    07:f6:a2:2e:92:e2:e3:77:c0:7f:ee:b7:13:cd:25:
                    80:e8:9d:6e:a5:e2:48:cc:09:21:53:06:0d:41:53:
                    78:c5:01:28:4d:4b:bb:12:21:1f:36:49:6e:82:55:
                    3b:2d:c3:cf:da:b1:72:9c:79:ff:97:40:9b:fc:7e:
                    6c:e2:c4:33:13:47:13:00:71:eb:59:7a:b4:8b:0b:
                    ee:69:c5:f3:0b:c3:34:cf:25:40:b2:ed:64:f7:af:
                    2c:2a:30:78:7c:ba:4c:8f:07:5d:89:62:be:96:0f:
                    45:6f:d8:86:fa:7f:df:5a:66:61:dd:a8:ee:58:17:
                    6f:14:03:c5:4b:c0:2e:62:a9:db:0f:99:bd:45:1e:
                    fc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F6:60:D5:1A:58:99:2B:10:44:B8:40:86:AD:BA:61:A5:6C:2E:47
            X509v3 Authority Key Identifier:
                keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:18:30:14:36:20:cd:c1:95:64:9e:05:eb:97:f1:33:cc:2f:
         94:d9:19:8f:0a:92:c9:67:c3:16:9a:b9:22:9c:4a:2f:42:14:
         b1:67:af:d0:dd:2a:07:82:72:84:c7:a6:91:dd:e9:90:1f:ac:
         e6:a3:fa:36:be:82:82:44:9e:58:0b:d1:f5:9e:0a:70:91:b6:
         1a:c9:d4:6e:a1:ce:15:07:be:96:12:09:ec:71:f7:f4:85:03:
         93:1c:8c:cb:c9:68:05:72:be:43:f9:2f:f0:cf:c9:08:73:89:
         65:08:63:af:a8:e1:5c:11:36:31:8c:1f:a5:54:57:ff:15:71:
         61:ce:57:99:81:25:c3:4f:ef:27:dc:c3:78:4d:fe:4d:67:62:
         58:f6:e4:1d:3d:56:a1:93:a1:1e:cb:3f:c7:93:6e:4d:19:62:
         96:cf:05:75:04:fb:3a:d2:0a:7a:78:17:fe:24:51:86:17:75:
         23:2e:10:ab:00:a8:17:b4:f2:b3:02:92:36:c6:56:cd:c4:da:
         c0:4c:bb:25:1d:e3:75:62:52:f4:ff:03:88:82:7a:e6:71:c2:
         1f:0d:d0:ec:8d:9b:65:1b:d5:29:7b:68:be:34:72:27:39:6d:
         32:d4:a5:68:07:37:db:6e:0a:05:5d:bd:eb:58:aa:e2:ea:62:
         97:47:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:42:49 2026 by rpki-client