Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File:                     Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier:          cA+e3gLxI6TZdAnmxnQ1ExyOjE1G9AN0GwS/pcKQBIE=
Subject key identifier:   CD:33:23:A8:BB:39:07:84:3C:8D:6E:15:08:D6:7F:0F:D4:1A:96:DB
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer:       /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial:       019E20FF06CAA44F3EC72A858090338C8B67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number:          1853
Signing time:             Wed 13 May 2026 11:00:44 +0000
Manifest this update:     Wed 13 May 2026 11:00:44 +0000
Manifest next update:     Thu 14 May 2026 11:00:44 +0000
Files and hashes:         1: 6yATERdiX2wk0GFwUGUYwsoJuDI.roa (hash: KtrtZMXlX/Ho5Lrtg2Wv7jNJ8tmVGjU+3M5mJcyVobY=)
                          2: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: E5AiWxLqrmQBxmNVqXPZAorWXhKub9cjxI/ZTUVhqQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:06:ca:a4:4f:3e:c7:2a:85:80:90:33:8c:8b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
        Validity
            Not Before: May 13 11:00:44 2026 GMT
            Not After : May 14 11:00:44 2026 GMT
        Subject: CN=cd3323a8bb3907843c8d6e1508d67f0fd41a96db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:bb:ad:44:86:3c:9d:c8:76:96:26:49:c5:
                    54:fb:c1:74:85:51:75:d1:7d:9c:3e:e2:91:da:fa:
                    8d:80:d6:40:8a:3c:7e:7b:0d:01:98:7e:d0:b5:e3:
                    d6:fa:e0:7f:92:1f:8f:49:10:58:32:df:09:65:fa:
                    b8:48:cb:a7:ef:8e:60:57:9b:ff:4a:a8:35:2b:23:
                    d0:2c:62:c9:3a:25:cc:29:ae:b5:a1:06:5b:3f:8d:
                    ff:48:45:df:42:79:7d:8b:a5:ae:3f:16:29:78:06:
                    45:52:c5:7e:bd:85:0b:f3:12:f2:f1:4e:19:7b:92:
                    d1:35:06:9b:6b:b3:f5:f3:a5:70:78:60:66:78:e2:
                    2f:68:49:bf:5b:c5:37:8b:f1:e9:1d:1a:ed:2f:33:
                    ae:c0:b4:b6:0f:34:f7:fc:0c:0e:22:fd:13:e4:70:
                    d7:db:84:41:28:52:25:29:e1:14:de:ad:47:16:99:
                    a3:d6:35:b6:e5:4f:3a:ca:e8:a5:7d:c1:b2:93:c6:
                    50:80:43:5b:b5:50:9f:85:0a:c3:8c:24:9e:c1:48:
                    01:0e:22:04:ef:de:e4:95:0b:b2:c0:34:30:21:20:
                    19:c1:a1:76:a0:0e:94:92:f6:22:8d:f6:49:e0:ef:
                    d3:21:59:54:4c:2e:c0:f5:a3:3b:fc:84:3e:ab:ff:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:33:23:A8:BB:39:07:84:3C:8D:6E:15:08:D6:7F:0F:D4:1A:96:DB
            X509v3 Authority Key Identifier:
                keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d7:8f:45:8e:a4:8c:66:73:c2:aa:39:a1:a2:4e:f7:6b:a1:
         03:c0:42:be:19:f6:69:7d:d3:6e:65:ac:e7:17:07:a9:85:f7:
         54:3f:eb:e8:81:35:5c:50:35:af:56:6f:14:6b:25:18:d1:3a:
         07:26:d5:0e:03:1a:1e:54:90:04:1f:cc:71:95:25:5a:ba:79:
         3e:81:93:4c:64:e3:6a:39:a6:1c:19:9c:d5:30:f8:28:84:76:
         b9:6a:ab:cd:fd:3c:47:c5:50:1c:fc:75:4b:9a:d3:37:6f:25:
         7d:10:81:82:4a:e6:8f:94:d3:ad:bc:84:0f:01:c6:ce:87:1d:
         f1:e0:3f:0e:18:f7:15:6b:bd:9b:a4:24:01:1a:cb:eb:b9:bf:
         18:b3:29:31:f6:39:d8:da:10:4b:d6:45:c3:5a:4e:d1:76:c4:
         17:1b:fd:2a:86:b4:01:70:1d:19:70:e7:65:8c:d6:0e:94:64:
         d3:c6:0c:2b:b1:21:a5:79:dc:85:f6:98:a3:6d:9b:56:f5:a7:
         01:ef:42:d8:67:9d:9b:01:1d:1c:ce:e7:c8:e9:b0:43:95:c6:
         96:0d:ae:4c:71:a3:98:fc:51:13:64:40:1c:e6:55:3b:ae:b4:
         cf:97:c3:15:ae:40:42:50:e5:16:b1:34:92:f4:db:ef:5c:a0:
         d4:8a:af:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:19 2026 by rpki-client