Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File:                     QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier:          4uMu93oDeEv84t0K1O9+ODGCetqiKOhIrohaVkfG2DM=
Subject key identifier:   79:30:9B:B2:B0:E4:30:16:EA:A6:FF:AE:11:1B:93:8A:83:09:A9:95
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer:       /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial:       019E1D2225488B0E053B75E534701F5168BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 17:00:37 +0000
Manifest this update:     Tue 12 May 2026 17:00:37 +0000
Manifest next update:     Wed 13 May 2026 17:00:37 +0000
Files and hashes:         1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
                          2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
                          3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: THKXrgVjAVlUJ25wcv9V7r688CS1eM0jaw1lTo1ajhg=)
                          4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:25:48:8b:0e:05:3b:75:e5:34:70:1f:51:68:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
        Validity
            Not Before: May 12 17:00:37 2026 GMT
            Not After : May 13 17:00:37 2026 GMT
        Subject: CN=79309bb2b0e43016eaa6ffae111b938a8309a995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:52:a8:b9:67:73:e2:87:01:48:99:9b:71:
                    7a:7d:cd:27:ca:d6:ec:90:9c:d7:c2:c9:a3:31:e5:
                    7d:d3:e0:6d:c0:9a:5e:9e:45:c2:96:e5:9e:cc:47:
                    81:91:12:40:c9:6a:9c:e2:b0:d4:28:d3:f1:6a:94:
                    d6:e1:94:20:69:8a:ee:7d:58:8c:04:44:75:59:9a:
                    13:58:3d:1f:d4:d2:7f:f5:2b:1e:dd:95:6b:2d:a2:
                    2f:eb:4b:d7:17:29:cb:07:42:3b:85:d6:fb:e5:bc:
                    33:c1:2b:5d:88:cc:8f:b6:de:ec:50:99:bf:b7:ea:
                    ce:91:c9:b2:bf:9d:e9:1d:b4:47:7e:d0:d7:88:1d:
                    a7:8e:c0:82:3e:90:ce:dc:77:15:63:ae:b8:39:d6:
                    4f:f4:90:6c:a0:87:a6:07:b8:ad:62:59:06:a8:c0:
                    b2:00:9e:89:45:c2:8a:b2:3c:7a:99:44:f6:d1:78:
                    af:48:09:8d:06:e2:e1:cd:00:77:ff:a3:9f:13:9a:
                    ca:76:8a:e1:11:7a:22:cf:30:d4:47:d8:87:e6:64:
                    d4:fb:00:d8:a9:b2:ef:a1:0d:6a:37:ea:88:89:40:
                    19:24:6f:9d:34:95:5e:c2:05:38:72:8f:c4:ab:61:
                    f4:dc:52:57:62:75:df:d7:78:c2:ff:26:35:81:48:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:30:9B:B2:B0:E4:30:16:EA:A6:FF:AE:11:1B:93:8A:83:09:A9:95
            X509v3 Authority Key Identifier:
                keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:47:ce:1e:6c:f2:a4:54:a4:87:ed:41:07:28:c7:77:bd:3b:
         9c:ee:80:28:b4:e8:c2:e1:d8:d4:eb:77:99:e4:f7:56:36:4e:
         20:62:1c:cf:66:00:89:2c:ef:28:98:d8:74:eb:bd:26:c9:99:
         a2:84:c6:f2:7c:91:1a:ff:9c:78:cb:a8:5f:f2:26:7b:bf:70:
         45:d9:2c:5d:4d:7f:66:c5:bc:24:18:bf:ad:5d:96:04:60:60:
         9b:54:71:a6:08:ac:26:ce:d6:a2:58:0a:18:de:65:68:38:b1:
         b7:e2:59:16:03:29:08:d3:e9:e1:24:c6:da:70:8c:d5:d2:72:
         f6:00:f5:e1:4c:95:1b:66:98:b6:9d:79:4c:e7:12:22:ad:4e:
         53:53:78:29:e9:a7:75:9e:91:10:25:6a:60:da:06:33:a8:aa:
         2c:eb:ae:c4:4d:a3:93:bb:a9:d3:a3:8a:cc:13:56:06:27:30:
         79:c8:72:8e:c3:f8:aa:7d:98:4e:6b:2b:30:f8:58:a9:43:e8:
         72:3c:d2:84:fd:cc:48:b9:8d:e6:b8:d1:4a:20:cb:b9:ac:5e:
         9e:4c:36:13:37:16:e9:99:fc:cf:6f:4d:9c:01:0c:e7:62:53:
         b1:94:58:09:48:ca:00:5a:e9:f0:94:f2:e7:54:e1:52:20:68:
         35:a1:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:05 2026 by rpki-client