Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File:                     qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier:          rXHdIOIgva3GdmhGzmkHAsNeUigq3hQOv4FRmQV9sAU=
Subject key identifier:   E7:3B:2B:A8:28:16:05:0F:D3:B3:DE:FC:1A:AA:82:2D:DF:4E:D1:0A
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer:       /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial:       019E205AB8E9E6EBFACDA140A24824EECBDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number:          1564
Signing time:             Wed 13 May 2026 08:01:16 +0000
Manifest this update:     Wed 13 May 2026 08:01:16 +0000
Manifest next update:     Thu 14 May 2026 08:01:16 +0000
Files and hashes:         1: IWErWVtspulYBc2P0UkO-q5egfs.roa (hash: lBRwxz9Xohtldef78/SXShaF/JL3thmNLA+SU9F6qTI=)
                          2: dFq--4OMc9Rjg5-mNAsJIFvbJME.roa (hash: KdydhQpjZ/9bUOR6cl5ITO2afuDxYiCJCh8ZvZyKzpE=)
                          3: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: fA8av+1X+19MOWpkhQOVxKMybdoWKDnUKCuB4ZIcGVc=)
                          4: yRUaitnmXUxZxGbULPkZbaJ4rlQ.roa (hash: C+dkviU9NULiViFs9l9KMMoHApjfQiWaRWnrAEZ92P0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:b8:e9:e6:eb:fa:cd:a1:40:a2:48:24:ee:cb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
        Validity
            Not Before: May 13 08:01:16 2026 GMT
            Not After : May 14 08:01:16 2026 GMT
        Subject: CN=e73b2ba82816050fd3b3defc1aaa822ddf4ed10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:ff:49:40:6b:d5:02:06:37:6b:ac:41:94:
                    17:65:c9:ef:3f:ea:c8:00:39:5d:ce:31:57:86:6f:
                    dd:0a:a9:65:d4:0c:21:54:ac:e1:b5:81:59:d4:ed:
                    2a:52:49:5c:8e:2e:fc:30:e4:b5:de:27:b9:b9:d0:
                    96:44:e2:78:7b:7c:41:28:ab:c3:fd:d7:8f:04:13:
                    d1:68:38:3f:88:98:a6:0a:26:70:65:f5:35:14:90:
                    1e:12:24:45:c1:56:bc:81:56:be:44:3a:9e:d3:99:
                    c8:a8:bf:2a:ab:e7:2f:0f:50:05:75:34:6d:4e:cf:
                    ef:20:00:88:c1:62:8a:6a:d4:f8:2e:82:9e:7f:b0:
                    af:4c:10:a3:8d:61:ae:16:b1:43:c6:2c:bb:e3:c1:
                    34:34:26:54:77:42:30:5e:1e:b3:1d:ba:c0:37:51:
                    a4:56:b0:05:df:f9:d3:60:fd:72:2f:0d:fa:1e:55:
                    51:07:eb:98:2e:c7:3f:61:69:0c:33:e4:40:34:3d:
                    d2:e6:a1:46:c0:08:7e:9d:2b:e4:cb:ed:af:bf:c1:
                    d4:c9:61:c9:f6:9d:91:2b:54:87:dd:82:1c:30:31:
                    97:ac:72:99:79:4f:3a:ec:b3:83:bb:57:8c:f9:fa:
                    80:9a:c7:46:16:49:82:ce:bf:0e:bb:ce:aa:5e:88:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3B:2B:A8:28:16:05:0F:D3:B3:DE:FC:1A:AA:82:2D:DF:4E:D1:0A
            X509v3 Authority Key Identifier:
                keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ac:69:62:e8:cb:bb:52:e9:ff:7f:74:ad:50:34:90:f0:74:
         d9:d1:80:57:c6:36:c3:ec:48:b2:f3:b5:89:de:8e:d6:68:f5:
         7c:f0:e5:b7:09:87:03:34:27:2f:69:ae:cb:84:99:c0:5f:7e:
         b9:3d:3c:ea:27:2d:29:14:7b:d1:5c:3e:3b:4d:f4:56:82:96:
         2e:da:d2:36:55:b5:bd:c7:18:37:2f:ef:12:09:b5:4f:c8:80:
         78:39:2b:ab:11:58:a3:e1:f7:9a:fc:e1:24:14:4c:af:47:34:
         84:52:7d:ab:45:b4:2e:de:5d:c8:9f:7e:17:d2:5f:49:ce:7e:
         36:1c:a2:fd:cc:63:63:27:78:23:20:07:38:1e:24:b4:ac:d7:
         56:77:01:40:34:02:e6:9b:7b:a5:aa:2c:fb:40:95:7b:be:37:
         30:fc:e3:f9:1f:ca:92:b2:50:5c:ff:8d:c3:7a:79:af:b3:ca:
         2e:d0:83:2b:1d:f8:c3:31:11:e8:6f:b0:d1:72:f9:9b:2e:c6:
         1b:af:d8:24:be:a3:20:d7:97:82:79:a4:a4:86:c7:e0:ac:a3:
         47:0c:3e:21:f5:97:c8:58:67:f5:2b:15:a6:7d:2e:b1:03:47:
         5c:18:bc:14:fd:2b:14:df:3f:9b:c7:df:82:65:cf:42:59:dd:
         3a:91:a2:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWrjp5uv6zaFAokgk7svaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh
NjVjYTMwHhcNMjYwNTEzMDgwMTE2WhcNMjYwNTE0MDgwMTE2WjAzMTEwLwYDVQQD
EyhlNzNiMmJhODI4MTYwNTBmZDNiM2RlZmMxYWFhODIyZGRmNGVkMTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMD/SUBr1QIGN2usQZQXZcnvP+rI
ADldzjFXhm/dCqll1AwhVKzhtYFZ1O0qUklcji78MOS13ie5udCWROJ4e3xBKKvD
/dePBBPRaDg/iJimCiZwZfU1FJAeEiRFwVa8gVa+RDqe05nIqL8qq+cvD1AFdTRt
Ts/vIACIwWKKatT4LoKef7CvTBCjjWGuFrFDxiy748E0NCZUd0IwXh6zHbrAN1Gk
VrAF3/nTYP1yLw36HlVRB+uYLsc/YWkMM+RAND3S5qFGwAh+nSvky+2vv8HUyWHJ
9p2RK1SH3YIcMDGXrHKZeU867LODu1eM+fqAmsdGFkmCzr8Ou86qXojzxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc7K6goFgUP07Pe/Bqqgi3fTtEKMB8GA1UdIwQY
MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt
ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2
LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaxpYujL
u1Lp/390rVA0kPB02dGAV8Y2w+xIsvO1id6O1mj1fPDltwmHAzQnL2muy4SZwF9+
uT086ictKRR70Vw+O030VoKWLtrSNlW1vccYNy/vEgm1T8iAeDkrqxFYo+H3mvzh
JBRMr0c0hFJ9q0W0Lt5dyJ9+F9JfSc5+Nhyi/cxjYyd4IyAHOB4ktKzXVncBQDQC
5pt7paos+0CVe743MPzj+R/KkrJQXP+Nw3p5r7PKLtCDKx34wzER6G+w0XL5my7G
G6/YJL6jINeXgnmkpIbH4KyjRww+IfWXyFhn9SsVpn0usQNHXBi8FP0rFN8/m8ff
gmXPQlndOpGigg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:38:29 2026 by rpki-client