Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File:                     QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier:          uLDLYvF+/w/jxOxrxnHoCM6xRoXgWJcBl8mBfwsjztw=
Subject key identifier:   8B:D4:9D:79:D3:B7:34:00:88:37:E8:5F:99:8F:C9:A0:3A:61:34:26
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer:       /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial:       019E1F479346F1F047F7C941806D4A537F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 03:00:44 +0000
Manifest this update:     Wed 13 May 2026 03:00:44 +0000
Manifest next update:     Thu 14 May 2026 03:00:44 +0000
Files and hashes:         1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: WMui3qS1ZJWeA0iTTV+W0Co2hvDrXmUnpIGqI4fvm8s=)
                          2: R8G1L5YZFoXqf9gMiTpM3wiCF5E.roa (hash: iGaxDBxbx1MC3MNbPezJIeAw0C567dpwIT9cPctlVlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:93:46:f1:f0:47:f7:c9:41:80:6d:4a:53:7f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
        Validity
            Not Before: May 13 03:00:44 2026 GMT
            Not After : May 14 03:00:44 2026 GMT
        Subject: CN=8bd49d79d3b734008837e85f998fc9a03a613426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:47:6f:71:14:d0:54:16:45:02:e1:dd:31:
                    88:b6:6c:04:fe:eb:6d:5b:7b:71:41:2b:5a:48:81:
                    b4:57:cc:57:1e:d6:6e:70:81:ae:ee:f0:7c:21:71:
                    c3:54:72:43:5b:76:53:2a:07:8a:f5:cb:bc:cd:d6:
                    b9:40:3e:30:ae:79:80:fc:4d:c2:59:a0:90:d4:40:
                    fc:07:cc:0a:b8:84:43:a3:0e:7a:1c:e0:b2:65:67:
                    ae:43:d5:3d:6d:1e:8d:9c:d2:81:be:43:e3:fb:b0:
                    db:0b:73:d2:39:d6:a8:70:bc:f9:90:fa:59:de:00:
                    e1:07:f0:b5:78:3e:e0:81:d0:fd:2e:90:62:12:1b:
                    08:9e:61:c5:09:ac:40:dc:74:d0:43:9d:61:4b:58:
                    d8:72:22:32:d2:30:4d:45:d0:f0:6b:5d:c7:86:d0:
                    00:c1:d9:80:4a:aa:2c:ea:27:33:4b:a8:e6:f8:51:
                    35:a1:0b:ef:8f:0b:c2:81:65:e6:3d:8a:1d:38:e4:
                    21:4c:65:06:e3:f9:51:1f:82:20:e0:94:05:da:fb:
                    46:76:f9:fd:3b:52:f2:dd:20:f7:fa:9a:23:59:12:
                    d5:da:9f:cb:d0:de:c9:cd:78:0b:87:af:c9:ae:17:
                    e5:1a:08:ea:4f:7c:0f:4d:93:ae:50:8a:d9:8b:4a:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D4:9D:79:D3:B7:34:00:88:37:E8:5F:99:8F:C9:A0:3A:61:34:26
            X509v3 Authority Key Identifier:
                keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:bf:69:02:db:3d:57:67:83:fd:f2:fe:d6:0d:2f:7c:95:
         8f:19:2a:43:b5:22:c1:e2:2f:32:58:9e:4c:3e:4c:90:89:0b:
         58:fd:de:33:c8:ab:94:9d:52:c6:6f:e2:82:59:40:c1:c5:b3:
         50:2f:04:bd:59:28:2d:f3:f9:83:8c:a1:31:df:43:11:df:9b:
         6b:c1:7b:05:50:3c:ad:e6:fb:aa:b5:b8:ef:14:83:2d:24:ef:
         52:e3:b4:f6:0e:ee:f3:b9:ca:ee:99:98:b3:37:08:34:ba:c7:
         e9:44:2f:34:ae:1e:09:53:ad:57:da:91:7d:4e:a8:7c:1c:1e:
         85:6f:96:7e:c9:05:5e:32:27:4e:7e:72:69:8c:3f:23:1c:1b:
         34:97:15:cf:75:23:ae:01:d9:72:60:f7:08:95:58:8a:46:49:
         c1:60:f2:ca:aa:66:65:5f:3d:02:b2:05:02:bd:04:84:53:64:
         f4:d1:ca:c3:39:8a:03:10:a7:8f:ad:8e:3e:3d:e5:be:32:33:
         c7:fc:27:f5:2b:56:68:50:c1:ff:de:ce:a6:17:0b:2d:3a:72:
         30:ed:28:76:0d:65:2b:f7:3d:bf:70:cf:94:93:4d:ec:45:18:
         2f:8f:69:58:79:ab:a5:b4:3a:1a:45:49:82:77:54:45:bd:cc:
         20:5c:5a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:18 2026 by rpki-client