Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File:                     q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier:          3fH+PLpn+sP/eWtFt5d5wMckP0XMpbKNhAAJBqLES8Y=
Subject key identifier:   65:59:B8:5F:CF:59:A9:B3:53:B3:12:E0:41:C8:23:11:01:8F:22:8B
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer:       /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial:       019E1F4815C1D8749D63EFC0D0164F0FC01C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 03:01:18 +0000
Manifest this update:     Wed 13 May 2026 03:01:18 +0000
Manifest next update:     Thu 14 May 2026 03:01:18 +0000
Files and hashes:         1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: 4Z2A6MLYwADbY5EXxWHXo81h/QCm+ucWW+k7SVVF2yk=)
                          2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:15:c1:d8:74:9d:63:ef:c0:d0:16:4f:0f:c0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
        Validity
            Not Before: May 13 03:01:18 2026 GMT
            Not After : May 14 03:01:18 2026 GMT
        Subject: CN=6559b85fcf59a9b353b312e041c82311018f228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:5f:b1:e3:31:0e:30:bf:f7:42:48:5c:65:
                    0c:66:b5:70:af:95:51:14:69:37:ec:27:65:48:4b:
                    8d:9b:8a:cc:1c:fc:5c:a9:71:6a:9b:1a:24:2d:9c:
                    5c:7f:19:f0:d7:4d:d4:70:1c:8f:af:e3:a7:c5:9a:
                    af:01:17:27:35:0c:a4:17:04:a8:fb:99:76:50:60:
                    6c:c3:65:91:95:4f:80:04:81:e8:8f:80:1e:84:8e:
                    e2:d3:e7:3f:8d:83:fa:20:63:2b:34:ef:8e:0d:b3:
                    82:6f:f7:7a:06:8c:5f:90:e0:90:43:0f:76:b5:34:
                    1f:c2:23:46:16:7d:4c:fb:11:7f:e2:43:c2:4d:b7:
                    4f:9c:5a:5d:57:0c:eb:09:92:dc:83:51:4d:70:b5:
                    91:63:f6:2d:4d:7c:d8:f7:86:7b:1c:03:4a:84:43:
                    56:b2:70:f7:97:6f:1d:0f:a0:a9:c9:84:8e:57:9e:
                    e6:40:67:88:d9:37:31:79:93:d9:3e:d9:6a:31:9b:
                    df:9b:cc:57:52:11:42:20:8f:80:b2:b5:6f:a5:93:
                    0a:f3:71:21:ef:2c:09:45:4f:e4:de:a8:09:d9:5c:
                    50:63:5d:6e:ef:4c:92:d6:40:9c:61:e5:55:ec:1e:
                    cc:1a:65:62:cb:a5:82:13:a5:35:c7:63:db:33:0d:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:59:B8:5F:CF:59:A9:B3:53:B3:12:E0:41:C8:23:11:01:8F:22:8B
            X509v3 Authority Key Identifier:
                keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:aa:82:68:89:79:a6:79:e0:1e:06:91:19:e9:c1:0e:fb:7e:
         f2:25:01:38:23:0b:ec:bd:1c:e2:52:c2:d6:bb:23:3d:6c:18:
         75:12:e9:06:43:ed:d7:7b:08:a9:25:77:5b:bc:37:46:c3:38:
         16:ab:6d:44:99:38:00:be:f6:3c:67:fe:6f:93:62:eb:9b:8e:
         ef:12:33:5f:29:9c:24:fb:21:cf:a5:42:2a:fe:4a:04:9e:0d:
         c5:0b:4e:19:c3:4f:69:cc:c9:fb:f3:75:88:88:de:bd:7f:97:
         93:ee:a9:cd:4d:15:fc:24:63:57:82:34:e5:b6:5a:33:d3:78:
         bc:00:e6:87:3d:81:f4:73:9f:9b:02:52:b3:24:dc:74:14:6c:
         72:cf:2c:e0:f3:9d:bf:41:4a:fc:7a:68:c1:44:21:c9:84:d5:
         d7:48:7e:e8:82:ad:4d:1b:d7:a7:10:d6:d5:14:42:d2:79:0a:
         c1:27:f6:8d:49:ee:43:cd:a2:96:05:75:e6:e5:cf:58:94:19:
         b1:18:4f:c9:f7:71:30:24:fc:9e:95:dd:c3:13:37:e1:a7:e6:
         ae:ab:00:e2:99:7c:0f:d4:52:39:ca:f0:1b:bf:73:16:20:98:
         9a:21:20:e3:0e:aa:8e:d3:24:19:48:4e:3f:05:31:12:57:05:
         e3:53:da:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSBXB2HSdY+/A0BZPD8AcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw
ZTk0MTgwHhcNMjYwNTEzMDMwMTE4WhcNMjYwNTE0MDMwMTE4WjAzMTEwLwYDVQQD
Eyg2NTU5Yjg1ZmNmNTlhOWIzNTNiMzEyZTA0MWM4MjMxMTAxOGYyMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi9fseMxDjC/90JIXGUMZrVwr5VR
FGk37CdlSEuNm4rMHPxcqXFqmxokLZxcfxnw103UcByPr+OnxZqvARcnNQykFwSo
+5l2UGBsw2WRlU+ABIHoj4AehI7i0+c/jYP6IGMrNO+ODbOCb/d6BoxfkOCQQw92
tTQfwiNGFn1M+xF/4kPCTbdPnFpdVwzrCZLcg1FNcLWRY/YtTXzY94Z7HANKhENW
snD3l28dD6CpyYSOV57mQGeI2TcxeZPZPtlqMZvfm8xXUhFCII+AsrVvpZMK83Eh
7ywJRU/k3qgJ2VxQY11u70yS1kCcYeVV7B7MGmViy6WCE6U1x2PbMw0T5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVZuF/PWamzU7MS4EHIIxEBjyKLMB8GA1UdIwQY
MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt
NDA3MzViMmY4NDgxLzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx
LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6qCaIl5
pnngHgaRGenBDvt+8iUBOCML7L0c4lLC1rsjPWwYdRLpBkPt13sIqSV3W7w3RsM4
FqttRJk4AL72PGf+b5Ni65uO7xIzXymcJPshz6VCKv5KBJ4NxQtOGcNPaczJ+/N1
iIjevX+Xk+6pzU0V/CRjV4I05bZaM9N4vADmhz2B9HOfmwJSsyTcdBRscs8s4POd
v0FK/HpowUQhyYTV10h+6IKtTRvXpxDW1RRC0nkKwSf2jUnuQ82ilgV15uXPWJQZ
sRhPyfdxMCT8npXdwxM34afmrqsA4pl8D9RSOcrwG79zFiCYmiEg4w6qjtMkGUhO
PwUxElcF41PapA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:22:38 2026 by rpki-client