Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File:                     Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier:          nVOl8mi3lj50fosRq5YFHsiHm1ad+x2emRdcKaFWXrU=
Subject key identifier:   9C:4E:49:B1:E9:E7:E8:9D:A0:9F:17:5C:F9:4E:06:28:01:0A:A9:90
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer:       /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial:       019E1E6C1E4C85EAFA4C7CEF0D7BC097ADC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number:          184C
Signing time:             Tue 12 May 2026 23:01:02 +0000
Manifest this update:     Tue 12 May 2026 23:01:02 +0000
Manifest next update:     Wed 13 May 2026 23:01:02 +0000
Files and hashes:         1: DsEiDbdONX-wlDkZ_X-1g9jpCQg.roa (hash: OA/21KHBKcEIJSTWxQCJ0tkhioZ536fK4ENW6PbwjpI=)
                          2: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: f3Jl86T3goF83/Dbzhpk80YgK1dF7hIje3pZgsH4OZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:1e:4c:85:ea:fa:4c:7c:ef:0d:7b:c0:97:ad:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
        Validity
            Not Before: May 12 23:01:02 2026 GMT
            Not After : May 13 23:01:02 2026 GMT
        Subject: CN=9c4e49b1e9e7e89da09f175cf94e0628010aa990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:36:7d:85:94:bd:22:d4:29:f6:ad:3a:4d:
                    8f:39:cc:ad:d9:17:b0:ae:bd:70:cf:b4:18:ca:18:
                    b7:74:8d:57:9f:b0:ea:93:76:ef:4d:df:44:08:79:
                    95:48:81:b5:c7:6a:08:f0:1e:1a:a9:82:ce:a4:9f:
                    d6:c2:26:e0:9d:d9:32:e8:72:3d:e8:97:3d:c6:84:
                    f8:8c:23:a0:49:83:1c:04:1e:90:d0:c5:8f:41:8e:
                    da:3a:c0:99:4f:22:40:b3:4f:b5:94:1c:1b:58:b8:
                    a9:53:35:40:66:4d:dc:5c:42:ea:62:f4:d5:f7:25:
                    e2:1b:98:b2:cf:52:3d:d7:a8:d5:c7:29:7b:fd:fd:
                    44:01:64:40:3e:58:ac:ef:97:fe:d1:61:6a:b2:29:
                    0e:cf:be:56:40:2a:1b:1a:1f:16:c5:d9:36:81:e4:
                    c7:7e:d5:51:3e:1a:38:6f:01:03:ff:30:ec:58:cc:
                    b4:13:2a:24:3a:3d:71:cd:66:93:67:1d:df:f8:83:
                    1c:3f:f7:d0:34:9c:bd:a2:80:56:4c:56:39:37:43:
                    9c:ae:86:a6:9b:aa:3e:84:3e:1c:6f:83:b2:37:41:
                    24:fb:b2:7f:66:a7:27:9c:fe:08:f2:5d:3a:52:79:
                    cc:72:1d:4e:9b:55:7f:2c:90:86:6b:fc:e3:fb:02:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4E:49:B1:E9:E7:E8:9D:A0:9F:17:5C:F9:4E:06:28:01:0A:A9:90
            X509v3 Authority Key Identifier:
                keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:c1:36:36:cc:cd:f9:de:6f:de:72:22:1c:b5:a0:74:66:
         af:98:56:1d:a6:68:19:33:75:b9:05:d5:d0:5a:ab:3b:e9:5a:
         98:04:01:bc:89:0d:be:b5:c6:d1:9e:31:fe:97:71:ac:1e:7f:
         f0:29:04:fe:c5:91:a5:5d:a0:8c:df:46:f1:9b:13:8e:e1:88:
         63:9a:0e:92:35:0e:65:98:fe:d3:56:d0:a0:16:f8:1a:07:db:
         80:85:8b:7b:77:10:eb:a1:cb:81:58:27:35:15:3d:f0:cc:b0:
         c1:fa:10:cd:07:d6:e5:ef:4f:4f:51:45:6c:85:bc:79:52:25:
         cc:49:ae:7d:3e:9b:35:11:90:7f:95:ce:0d:b7:bf:37:c9:64:
         ed:41:b9:13:d3:59:12:6d:4a:d0:05:16:26:37:f6:ee:e7:80:
         c1:67:3d:62:fa:da:10:f8:66:b0:ce:6e:7c:5b:e0:d6:0f:d1:
         5c:8f:d6:30:f9:bd:c6:59:eb:6c:a2:87:ed:32:f4:12:25:d4:
         c0:1e:1a:e3:a7:ad:f4:61:d6:d2:e8:f1:e6:0a:c0:eb:a6:c0:
         a7:f6:5d:fe:27:8c:81:b7:05:d1:06:c1:90:d0:c2:56:4e:d2:
         4d:5c:39:78:ae:83:5c:bd:c3:e1:b8:20:f8:10:02:fc:9a:90:
         13:48:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:30 2026 by rpki-client