Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File:                     q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier:          Qn4koEEXWKVIhRNRCzQJ0djgJV5Y8MtGetwnHwCMNaA=
Subject key identifier:   B1:E1:5D:DA:DF:A5:12:3C:41:41:FE:C4:2D:40:D4:79:AE:E2:AC:90
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer:       /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial:       019E1E3503574417D4FD2168839D1BF278C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 22:00:51 +0000
Manifest this update:     Tue 12 May 2026 22:00:51 +0000
Manifest next update:     Wed 13 May 2026 22:00:51 +0000
Files and hashes:         1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=)
                          2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: o7zWyUvlUltOCLegfo1chIRwTXZzUCWzE9LwxLjeNFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:03:57:44:17:d4:fd:21:68:83:9d:1b:f2:78:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
        Validity
            Not Before: May 12 22:00:51 2026 GMT
            Not After : May 13 22:00:51 2026 GMT
        Subject: CN=b1e15ddadfa5123c4141fec42d40d479aee2ac90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:05:af:40:f6:da:34:75:14:bf:bc:39:58:
                    19:3a:f1:ad:99:15:99:1b:7d:9d:cc:6b:08:03:d3:
                    48:44:f1:1a:db:a7:9c:9c:cc:40:86:61:aa:56:a2:
                    34:3e:9b:c8:15:e4:cf:5b:ce:40:d2:21:a4:e1:14:
                    16:88:36:b3:51:c6:a4:7f:bc:5a:a9:3d:66:8a:46:
                    be:d4:65:78:84:b9:58:6d:00:0f:fd:e2:40:c4:ae:
                    73:6f:8a:8f:e1:95:de:a9:b6:d2:62:a8:da:2f:cc:
                    b7:27:1e:0b:23:c1:24:f7:be:b3:87:ff:ac:ed:d7:
                    50:16:72:7f:e9:31:27:f8:d0:8e:4c:4f:78:88:fe:
                    b9:a8:ea:11:c1:40:5a:2b:25:83:23:aa:02:c0:63:
                    16:0c:6a:59:c4:d7:89:26:b6:30:2d:dd:71:bd:45:
                    e5:57:26:fa:af:55:40:20:d0:c1:00:ae:bb:f4:17:
                    e4:3d:c1:cf:e0:da:c7:cb:de:22:c1:3e:30:a1:a8:
                    da:4e:c9:8b:4b:22:7d:0a:ea:f4:1d:b7:59:20:f9:
                    40:9b:58:cb:ca:45:e9:cc:92:51:6f:ad:0e:0d:19:
                    6c:ca:d7:3b:ea:e3:04:c3:58:12:6c:6b:99:af:9d:
                    4c:d3:76:ba:7c:d0:8f:7a:3a:8c:64:1d:6c:b1:32:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E1:5D:DA:DF:A5:12:3C:41:41:FE:C4:2D:40:D4:79:AE:E2:AC:90
            X509v3 Authority Key Identifier:
                keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:92:86:31:5a:97:7a:87:f7:fb:eb:25:0f:8f:ab:10:03:23:
         19:49:59:77:b1:92:46:e8:a7:4e:98:c2:ae:f7:93:7f:f5:18:
         79:91:61:d0:c5:bd:a7:8f:62:7c:29:c3:99:52:be:00:2b:50:
         2b:51:c5:60:d9:c9:7a:15:b5:6f:f4:48:b4:1a:78:c6:26:8d:
         4e:87:c9:f3:3d:30:d0:ef:01:d7:5f:bd:72:a3:33:7a:3c:dd:
         be:0e:82:cf:33:72:fc:8f:81:0b:10:83:aa:b8:c5:46:e8:f8:
         47:af:ef:b6:5a:80:7d:28:48:8f:c2:aa:a7:55:21:83:c0:39:
         b7:25:86:a3:6d:8a:7a:8c:08:67:d8:9f:6d:86:d6:c1:81:f6:
         eb:b9:6c:bd:22:ce:54:aa:6d:10:3c:6c:41:64:6c:23:38:a0:
         01:b7:56:11:43:65:7b:c3:b1:49:38:fd:e6:c1:5e:ce:d1:28:
         44:6f:d4:a1:20:50:40:4f:c7:4c:b7:5f:ad:ac:80:ea:1f:8c:
         ba:73:f0:f8:3c:1a:ed:00:4a:65:38:99:7e:45:b5:8d:56:52:
         0f:09:22:57:63:07:d5:6d:b5:37:a4:20:88:60:40:8a:31:67:
         00:45:f4:d3:bf:52:e7:ee:81:f0:cd:e3:c3:38:aa:39:0f:d6:
         a4:47:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:17 2026 by rpki-client