Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File:                     qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier:          ZhWJZXhvcj2fDwfqxARPsuTM9PHbVZfBnTk4lpxO544=
Subject key identifier:   43:3A:DC:37:76:AD:61:BD:D0:4F:C1:07:26:CB:E2:6D:68:4C:1E:01
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer:       /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial:       019E1D2326B5A544F161578C3E285EBD7E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 17:01:43 +0000
Manifest this update:     Tue 12 May 2026 17:01:43 +0000
Manifest next update:     Wed 13 May 2026 17:01:43 +0000
Files and hashes:         1: blLvX2-SqKRxgzfg9csWt9Te5CU.roa (hash: Nyn58GOogqZkbGAVvyp/qEbfXu/9YSuSkYbo5ZUxKIg=)
                          2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: uV5twGAMUn8WtRvvUiQodIMFMACpTekmENYXFiGv4OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:26:b5:a5:44:f1:61:57:8c:3e:28:5e:bd:7e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
        Validity
            Not Before: May 12 17:01:43 2026 GMT
            Not After : May 13 17:01:43 2026 GMT
        Subject: CN=433adc3776ad61bdd04fc10726cbe26d684c1e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:7f:6d:02:6e:c4:24:57:47:7b:d1:77:73:
                    80:2a:5f:a2:49:10:53:15:1a:96:ae:7e:f2:a8:04:
                    d6:32:bf:ee:9b:07:00:64:a7:07:c1:6d:a1:0d:8b:
                    7a:fe:a7:90:1c:2e:fe:92:51:e9:58:d3:41:40:a8:
                    74:78:7f:85:15:01:74:37:d7:cf:dc:00:6b:4e:b5:
                    81:30:a8:e8:d5:af:31:8a:22:c8:20:68:49:dd:80:
                    52:4c:6d:f4:5a:de:04:58:50:d2:a2:3e:73:71:b9:
                    f3:8f:2c:2b:c3:d2:c7:c2:00:ad:c4:6d:e4:dd:30:
                    49:b8:e1:8b:dc:0f:61:0d:9e:5b:fd:ea:63:9f:da:
                    82:bc:6e:d8:a7:e6:ba:1d:0b:fe:4b:00:f6:bb:82:
                    ae:a4:5c:49:99:fe:cc:af:2a:bf:0b:27:2c:2c:02:
                    05:52:b0:3c:9f:7c:bb:09:7f:3e:ef:74:18:8f:25:
                    84:66:42:ba:d1:da:79:fb:1c:8f:88:f8:2e:c2:4b:
                    be:2d:9a:7c:f0:70:86:eb:5d:eb:ce:b2:9a:ed:37:
                    0c:f9:ae:bb:89:92:6a:5c:f5:f7:27:43:39:fe:ee:
                    b9:d1:38:f8:ef:88:a2:5f:98:68:da:67:f1:44:be:
                    01:8d:d4:b5:9a:b3:61:73:cc:95:4d:14:aa:bc:b6:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3A:DC:37:76:AD:61:BD:D0:4F:C1:07:26:CB:E2:6D:68:4C:1E:01
            X509v3 Authority Key Identifier:
                keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:e9:17:a9:a2:7a:0f:e2:05:97:20:76:c4:6e:b7:6f:b0:
         23:b1:64:39:80:91:8a:8e:dc:03:b1:e5:d7:4c:42:38:32:33:
         56:70:6d:35:80:0e:2c:bb:8d:48:67:99:26:03:6b:2e:f2:d5:
         d1:8f:86:4b:94:df:16:f6:cf:f5:5e:a1:28:a9:6f:c1:26:2e:
         3e:c9:4d:61:bd:f9:63:2d:68:83:52:09:d2:f9:49:06:b6:3c:
         a1:cf:4e:c9:c3:eb:9b:7d:c2:8f:54:86:d0:3a:42:29:fd:5f:
         f0:0b:15:fc:27:ae:54:34:e0:e5:81:6a:30:56:ef:66:e9:41:
         44:04:ea:1a:c7:76:54:00:f8:d7:d1:e2:7f:0c:c3:32:00:9e:
         3a:4a:28:b3:82:1a:a2:e2:62:e3:1c:64:38:91:0d:e2:5b:78:
         54:51:b1:d0:72:dc:19:59:09:b7:52:37:39:a7:41:0b:bc:67:
         23:7b:07:80:1c:ca:b0:ed:cc:4c:74:b5:66:c7:8b:f2:73:6e:
         49:c5:dd:7b:50:14:e6:08:54:29:d3:af:47:89:32:85:66:85:
         fe:83:29:30:e5:f9:50:75:f9:8f:6a:eb:17:87:a9:98:a6:0f:
         43:e3:9a:6f:2a:d6:1e:8a:bb:68:67:5f:9f:5a:f2:bb:a1:02:
         be:d2:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:59 2026 by rpki-client