Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
File:                     QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json)
Hash identifier:          ACSWueZ9pQtyYuIqCZAcnNC/sJ8gWObO3zOM/hVgPWc=
Subject key identifier:   BA:EE:B5:65:EE:4D:80:93:77:92:25:B9:CB:DC:C0:3F:E2:03:44:77
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Certificate issuer:       /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial:       019E1F47B9C4727259564246915B87869F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
Manifest number:          0BD0
Signing time:             Wed 13 May 2026 03:00:54 +0000
Manifest this update:     Wed 13 May 2026 03:00:54 +0000
Manifest next update:     Thu 14 May 2026 03:00:54 +0000
Files and hashes:         1: M2qWTH73NkMquwfzQJVxK2FVK8I.roa (hash: 5PswSRa1E9ITddc7NsFeNUg4nkAmj5HsnCX0ziwfNao=)
                          2: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: QUchh5ZT9GPm0jtLblcH0B5CExaX+eazQv5kupuIDB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:b9:c4:72:72:59:56:42:46:91:5b:87:86:9f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
        Validity
            Not Before: May 13 03:00:54 2026 GMT
            Not After : May 14 03:00:54 2026 GMT
        Subject: CN=baeeb565ee4d8093779225b9cbdcc03fe2034477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:6a:77:a0:ab:e8:de:96:13:bc:03:89:19:
                    87:37:ce:eb:59:c2:29:eb:ac:e0:47:e1:9b:27:1c:
                    f4:9d:3e:6e:8e:66:2a:7c:7e:6e:61:02:22:18:ba:
                    d8:37:0e:15:59:f1:63:98:5b:a8:5d:e9:0e:16:d5:
                    9d:5a:54:23:b6:4b:74:e7:f2:f7:65:5f:93:e5:f1:
                    9a:20:81:34:fd:7a:c0:60:20:14:fa:b2:ea:e5:df:
                    0a:b3:ef:86:8f:b2:cd:6e:2a:4a:2e:aa:9d:e9:a1:
                    da:e0:50:7c:53:0e:85:02:46:5a:b4:62:fb:58:e6:
                    37:d6:04:1f:96:b8:d9:d2:83:94:5a:f7:4f:7e:4b:
                    13:30:ac:11:2e:e7:15:69:ae:10:b4:65:fa:10:b8:
                    c1:ab:27:d2:65:60:7d:37:79:8c:dc:cf:fe:17:30:
                    5b:d3:0b:c1:d1:c2:51:ef:94:15:cf:8d:29:93:6f:
                    2d:49:b6:93:26:3f:51:e8:7b:ab:65:5b:09:03:46:
                    bf:17:85:30:8c:52:75:06:9c:c6:aa:c4:01:6a:e0:
                    d0:12:d4:e8:0b:09:04:26:40:b6:59:d7:b1:25:13:
                    d8:ef:c2:c3:bf:73:69:1c:92:20:8f:13:d1:03:7d:
                    ee:cb:41:26:b6:8f:45:ad:d9:bc:5c:f9:50:39:4d:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EE:B5:65:EE:4D:80:93:77:92:25:B9:CB:DC:C0:3F:E2:03:44:77
            X509v3 Authority Key Identifier:
                keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bd:0d:de:18:4d:32:56:90:55:9a:ab:c3:5f:c5:2e:c1:8d:
         1c:25:38:a3:b0:dc:14:f3:61:9a:b7:4a:bf:1c:fc:a2:69:3a:
         08:4a:02:6a:f1:6f:8b:b6:e9:08:9c:e7:8c:6e:5a:7e:ee:10:
         aa:a1:d3:76:58:d8:db:1e:4b:f1:9b:f0:36:72:b2:e0:e0:8a:
         4b:22:7e:f2:31:b1:62:06:80:2c:fd:73:3b:31:4c:8e:9f:3c:
         5d:98:27:51:45:ef:2a:93:de:ff:e0:0f:05:12:94:ca:2a:40:
         89:e6:52:da:7e:b3:c5:48:dc:f9:13:78:76:be:23:33:2c:c3:
         27:49:c9:61:aa:cf:09:47:87:c4:76:d9:89:aa:18:26:40:65:
         fd:9d:32:d8:41:aa:5a:60:7b:cb:e0:fe:15:32:a5:6d:1c:10:
         98:27:20:41:8b:a4:d9:0a:f1:5b:60:a9:a5:0e:86:de:ca:f7:
         7f:63:3b:3e:7c:09:6e:47:fe:17:23:49:d8:c8:15:75:42:56:
         af:74:29:36:31:a5:3f:6a:ac:46:ac:c9:c7:87:80:66:28:16:
         d1:43:f3:fa:40:21:74:7b:50:f5:89:9f:e4:b4:86:00:17:6c:
         07:3e:e0:d9:77:5c:47:8e:5a:9e:f6:c0:10:f4:88:f1:50:b3:
         0a:00:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:31:28 2026 by rpki-client