Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
File:                     Q94YPxSj8k-bhtBE-HcphoC1Ers.mft (raw, json)
Hash identifier:          i+Z0Ak5qq3dCsEJidtC/lHDIciQlcrbIotp+T52Zl9Q=
Subject key identifier:   F1:E6:10:DE:65:0E:A0:6A:78:66:D0:B0:A6:93:3A:AD:80:07:6E:1D
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Certificate issuer:       /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial:       019E1DC75969AB58A5B5A7B7C9CC927CD5E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
Manifest number:          0770
Signing time:             Tue 12 May 2026 20:01:04 +0000
Manifest this update:     Tue 12 May 2026 20:01:04 +0000
Manifest next update:     Wed 13 May 2026 20:01:04 +0000
Files and hashes:         1: Q94YPxSj8k-bhtBE-HcphoC1Ers.crl (hash: YTiD0Glni0l3PUxUIY8/yw6fmYsxkhqruQT/CF40pww=)
                          2: eRzoAPCehzYUsTKWzumpWnRkGv4.asa (hash: XuGTrIZBYEhP0vD01NV66qn1i9p1ktzdlWy+jaqHixE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:59:69:ab:58:a5:b5:a7:b7:c9:cc:92:7c:d5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
        Validity
            Not Before: May 12 20:01:04 2026 GMT
            Not After : May 13 20:01:04 2026 GMT
        Subject: CN=f1e610de650ea06a7866d0b0a6933aad80076e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:68:d3:54:36:17:f3:7b:ba:11:60:df:9a:
                    bd:d1:8b:a3:f3:36:24:46:64:67:b2:5d:7f:93:19:
                    96:31:c9:d6:1c:25:8f:a8:30:b1:1e:34:ef:16:fd:
                    bb:98:9e:b7:c5:e5:91:43:62:06:5f:9a:31:2a:b5:
                    fa:77:72:fe:e2:73:b2:0c:e7:8c:67:1f:99:4b:db:
                    ed:88:0f:81:39:2c:52:76:7a:e7:bc:7d:b0:46:af:
                    2e:ef:50:e5:a1:99:28:6a:3a:3d:39:98:54:c9:eb:
                    4c:77:70:7a:de:98:a8:f6:eb:e9:12:36:6d:b4:23:
                    cb:b8:40:e7:98:82:8d:4e:02:9c:53:33:49:46:cf:
                    30:63:52:76:c1:63:44:bd:c8:26:87:f3:3f:3f:e8:
                    a6:94:b8:bf:f8:5f:92:8b:1e:00:fa:01:ea:72:e2:
                    4b:94:9d:19:45:87:b2:1b:2e:4f:6e:4f:c2:f7:32:
                    bf:65:21:22:95:61:e1:4d:d8:1b:a4:3a:10:ad:58:
                    30:00:49:9e:00:10:a8:96:1b:92:88:2f:6e:9f:ec:
                    10:59:a6:a0:d1:3f:c7:2b:21:b6:d7:d3:00:fa:09:
                    bb:2b:b4:0f:fa:f7:65:f7:86:45:b6:63:2f:71:ee:
                    96:15:af:5e:1f:db:f7:7e:39:03:59:6a:cb:f8:7a:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E6:10:DE:65:0E:A0:6A:78:66:D0:B0:A6:93:3A:AD:80:07:6E:1D
            X509v3 Authority Key Identifier:
                keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:f5:c2:2d:77:ac:14:01:17:db:12:b4:6f:59:57:9d:64:
         d0:c2:be:5c:f0:97:35:a6:98:55:ad:d1:31:50:4f:9e:ba:53:
         7a:fa:d3:2c:4f:cb:3e:f2:a2:08:b2:1b:50:9b:53:79:60:f9:
         19:54:0a:94:3a:b6:fe:b9:f5:d7:ac:f8:2b:59:ce:42:9d:6c:
         c7:9c:f8:c0:d5:4b:82:f6:c6:a4:92:b4:38:55:fe:f1:07:34:
         ce:f9:c8:61:c8:de:26:24:5a:cf:0d:46:95:ea:7b:39:00:66:
         32:52:8f:96:6b:38:ac:d4:5b:a1:cf:6f:fe:60:f2:ce:77:cc:
         9b:fe:52:20:31:f6:65:28:35:09:e8:60:57:90:48:a9:8c:98:
         cc:83:c4:82:57:1d:a9:d4:38:4a:72:fc:d7:8b:69:cd:92:66:
         37:88:2b:ed:a7:88:1f:56:a7:ae:7f:35:8c:5d:b7:d9:49:04:
         28:32:18:98:b6:ab:f2:cc:31:b2:45:99:3c:b1:db:a8:fa:64:
         84:43:3f:4e:a2:44:60:2c:d4:88:d4:55:92:10:c4:48:42:54:
         ac:7c:4c:aa:25:5d:48:1e:4e:5f:4f:3e:8e:e9:28:ee:40:ea:
         47:23:88:38:f9:af:cf:9f:1f:58:11:38:68:60:9b:6f:ad:f2:
         27:29:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:56 2026 by rpki-client