Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File:                     QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier:          FdumG+HPYmkSwdtSAlPEmGQd491WqDELYa+dIHDK2/o=
Subject key identifier:   F9:97:A2:42:44:F3:20:33:7C:5C:7A:AC:5B:27:22:65:7D:46:53:15
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       019E1DC75DDB59D35C91524CC2FF4BCA0CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number:          191B
Signing time:             Tue 12 May 2026 20:01:05 +0000
Manifest this update:     Tue 12 May 2026 20:01:05 +0000
Manifest next update:     Wed 13 May 2026 20:01:05 +0000
Files and hashes:         1: 27SRv4kmqs6pneHFx0Jvv7-afbs.roa (hash: GdoyF3TCd32qIt/ZdGo18CsxbH4m2C2R+bXGYdNvXFg=)
                          2: PbfQXR-baDZPQCV3KzmFSl3NBu0.roa (hash: d7QUcrvXmkMs7NU8766otUgeBhwhhAhea+tgCx1SFO8=)
                          3: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: LdtD8t9kqxhaUHWNcxeOi/I3prSB5gRLm9GevlE8i5g=)
                          4: d5zbDuD6_9LjcfZkId4hxvt1vj4.roa (hash: ZYiw9Hsu2VrLrhn15y2nDiSVR8cInjrGsKv7dwvsgMg=)
                          5: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=)
                          6: rnT-D71hKsFDJKjFEFYnlozS1Dg.roa (hash: AgdtDv7sgN51LaNxnC0HMX+MBlYlEKsyJBfZ7QzvWWQ=)
                          7: zOhOt3SPCz5Zu7LyM7-Bd8VLrB4.roa (hash: PIAfbyfbKoy/IJJGD/Tv2EYSuAXUaHIR8E6fc2UOY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:5d:db:59:d3:5c:91:52:4c:c2:ff:4b:ca:0c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: May 12 20:01:05 2026 GMT
            Not After : May 13 20:01:05 2026 GMT
        Subject: CN=f997a24244f320337c5c7aac5b2722657d465315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a0:41:98:fd:55:c1:a6:f1:1c:2e:9e:51:7f:
                    87:4d:bd:5f:d4:42:ad:1a:f2:cb:7a:23:9b:be:51:
                    03:d1:42:63:d9:fc:48:6c:2b:7d:e1:31:15:eb:31:
                    74:23:dd:7a:8e:f3:96:46:07:2a:27:33:e9:cd:60:
                    a1:14:e8:e2:3c:7e:04:99:55:8f:a3:d9:2a:6a:09:
                    44:d6:f3:07:d8:b5:11:9a:f0:eb:28:7a:61:8e:df:
                    21:ae:21:ca:85:0c:72:81:45:92:3d:dc:81:71:7d:
                    c5:40:5e:78:26:32:24:e0:72:c0:9c:e1:8e:76:24:
                    ce:42:f3:cc:6b:59:99:2d:55:34:41:cb:3a:66:ad:
                    8f:31:ac:8e:5a:de:3b:d5:43:33:27:26:f0:a9:f8:
                    ca:a1:55:c0:74:dd:48:a4:c7:0e:db:ce:08:43:69:
                    12:24:c1:67:2f:30:7f:f7:95:b7:29:4a:fb:24:37:
                    a3:1c:ae:1b:35:24:1a:6c:d2:96:27:66:d5:3d:ae:
                    de:9c:b7:1d:e6:7c:99:aa:fb:c1:11:6e:85:35:5a:
                    a5:16:9f:13:8b:e5:03:5b:d8:3e:37:cf:ca:ee:33:
                    e8:2c:f1:50:5c:08:ba:bd:26:e6:16:e6:0f:c5:da:
                    b0:b2:fd:0a:6e:3f:df:cc:14:ff:e0:d2:6e:04:7a:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:97:A2:42:44:F3:20:33:7C:5C:7A:AC:5B:27:22:65:7D:46:53:15
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:21:43:b8:8d:08:3c:6a:c7:a8:00:1f:c6:3a:4a:33:21:f2:
         93:91:c8:4c:ec:7f:94:92:8e:54:a0:2c:8a:50:ec:0b:b4:96:
         6b:f6:27:69:b9:0f:38:d6:ce:d2:5b:04:29:9a:26:49:b5:10:
         ff:77:26:fd:e2:e4:af:35:af:c6:ac:09:25:d1:c4:f6:e1:47:
         b7:9f:dd:e4:62:53:07:1d:ca:45:85:23:27:2a:e8:79:14:d4:
         17:2b:cf:4c:45:38:8e:b0:80:44:c7:85:31:a2:86:21:cd:88:
         db:9a:c0:fc:50:84:84:6e:82:80:5b:98:fe:5f:46:29:6d:97:
         09:69:15:a1:fe:c5:b3:20:77:4a:a7:57:23:4a:88:a8:02:d3:
         ed:61:45:71:cf:83:7f:e7:33:c9:17:0e:9c:19:c5:f7:c0:4f:
         51:6f:38:f4:42:a2:96:5c:4f:3a:40:fe:8d:76:ab:64:13:b5:
         4d:99:23:ef:fd:13:3e:d8:63:27:e7:a5:c2:94:d0:f4:5c:64:
         a3:0e:de:93:c9:64:d2:de:aa:21:94:88:14:76:63:b0:2f:66:
         bb:0c:3b:da:13:2f:c4:7c:87:3c:b7:0b:76:5c:3a:e4:7b:fc:
         de:87:51:c8:5b:17:67:49:fa:ae:2e:a1:f6:54:9d:f1:73:ec:
         dd:3d:c4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:04:58 2026 by rpki-client