Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File:                     qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier:          +ZjsCFE5LLGRLJL4ZAaae/ok2Q+KAuduXsZgfQqa4mg=
Subject key identifier:   E5:D8:19:8B:47:4A:FF:BB:36:72:BA:1D:75:85:DF:E4:95:A4:7B:EA
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer:       /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial:       019E1EA335A3B3AEFFC66A3A680D5003527E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 00:01:13 +0000
Manifest this update:     Wed 13 May 2026 00:01:13 +0000
Manifest next update:     Thu 14 May 2026 00:01:13 +0000
Files and hashes:         1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
                          2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: S5yT4TQI7mXxsjxuh81jMikXLj402fWNjkBoncaDzjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:35:a3:b3:ae:ff:c6:6a:3a:68:0d:50:03:52:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
        Validity
            Not Before: May 13 00:01:13 2026 GMT
            Not After : May 14 00:01:13 2026 GMT
        Subject: CN=e5d8198b474affbb3672ba1d7585dfe495a47bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:d8:4f:b9:b6:c8:f3:6c:7d:bd:a5:d2:52:
                    b6:19:0d:c9:63:7f:ce:ef:12:26:70:87:6a:38:4d:
                    a3:9c:20:17:1e:dc:56:5e:84:c5:e9:6e:43:0e:bd:
                    17:2d:64:5b:35:82:53:da:5c:53:e9:ac:f4:13:35:
                    97:19:16:08:a1:30:22:03:e7:7f:a2:fd:65:a5:bd:
                    76:39:8d:6c:1c:70:d1:cb:c0:99:84:53:aa:f5:5b:
                    ac:fc:74:6c:b6:14:ee:3b:01:82:b7:53:6a:04:20:
                    dc:5a:12:69:d9:56:01:8b:48:bd:62:3d:d0:eb:f7:
                    03:99:8d:7f:2c:e1:86:f9:e5:6c:30:f7:c6:da:89:
                    c6:79:45:87:2f:5e:99:c4:e4:29:2e:a6:f1:3c:b2:
                    e8:b2:39:05:00:54:50:e3:24:4b:91:13:4d:23:5e:
                    ce:1b:44:07:0d:dc:33:92:7a:d5:1a:7b:0b:af:1c:
                    99:e3:6e:cd:4c:35:8e:8b:ae:78:27:de:8f:24:2d:
                    51:e9:aa:02:30:e6:7e:d9:05:08:e5:99:6c:47:66:
                    82:36:39:41:d9:ce:53:f2:fc:10:7c:43:35:6a:84:
                    3d:22:d4:ec:07:4a:a2:9b:c3:18:92:2b:6d:47:cb:
                    dc:f2:b4:53:6d:94:bb:7e:fd:de:63:aa:1d:4d:99:
                    21:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D8:19:8B:47:4A:FF:BB:36:72:BA:1D:75:85:DF:E4:95:A4:7B:EA
            X509v3 Authority Key Identifier:
                keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:75:af:fb:79:b6:60:e0:98:58:62:70:b6:a3:ca:a2:b7:da:
         54:f1:e0:ab:4e:d6:30:67:12:75:4e:86:8e:49:14:b4:04:57:
         f5:03:8c:c9:43:5a:a4:69:ee:8c:43:17:6e:14:36:29:b2:1e:
         b4:c9:f4:e3:2b:41:48:f9:de:a8:65:ff:f5:c4:89:13:dd:2a:
         fb:24:a0:fa:15:c0:83:88:69:2c:f1:10:82:99:13:e2:55:08:
         10:eb:df:a9:f3:5d:2f:09:a6:91:da:c5:b6:45:21:ec:e7:51:
         4b:6e:fc:c4:6c:90:8b:b4:57:3c:ac:84:63:18:7f:46:1a:8b:
         98:b9:2d:a3:a1:83:9f:37:14:bb:ac:88:df:12:0e:53:d9:ba:
         85:ee:28:81:1d:fa:d4:a1:e3:79:dc:c1:5d:17:f2:fd:e1:af:
         10:c8:20:11:9a:bd:d3:0e:b0:d4:80:b7:72:2c:25:c8:3a:15:
         7b:cc:85:63:a1:9d:c7:0e:54:20:b4:75:3c:44:6c:26:08:61:
         2e:b5:94:d0:24:65:3a:79:78:4b:8a:9e:82:31:2f:dc:41:8e:
         a1:c6:ce:a0:82:b4:4f:be:55:d9:96:90:b6:4d:69:3f:ed:58:
         6e:55:a8:2b:16:32:cf:d4:0c:3c:da:63:fd:21:bd:31:ce:9a:
         71:d1:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:52 2026 by rpki-client