Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File:                     qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier:          R5u2pt9A25hn7m5XdF3afrjK7cMQoMT7f4kp02PpQHQ=
Subject key identifier:   DC:58:2A:F2:BB:31:81:47:F3:F8:78:07:64:AB:DB:85:BB:F4:9D:58
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer:       /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial:       019E1DFE5407C2F2558C4A352DFB5A064D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number:          0734
Signing time:             Tue 12 May 2026 21:01:07 +0000
Manifest this update:     Tue 12 May 2026 21:01:07 +0000
Manifest next update:     Wed 13 May 2026 21:01:07 +0000
Files and hashes:         1: bLk88x2HL-2GICyBNcP5Qc7qD64.roa (hash: 4cgQdkwpHUEmwJaaIvwsSgvpblfNuKKSJZKxTdOD8Wk=)
                          2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: l3fkiQI6S2ONdci/PKA3hnWwBI7lR5iwAM+8jT1SOmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:54:07:c2:f2:55:8c:4a:35:2d:fb:5a:06:4d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
        Validity
            Not Before: May 12 21:01:07 2026 GMT
            Not After : May 13 21:01:07 2026 GMT
        Subject: CN=dc582af2bb318147f3f8780764abdb85bbf49d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:88:9f:7c:50:2b:be:c7:33:08:32:73:27:
                    64:43:a9:15:ba:1f:7f:ac:f7:6a:67:71:bd:f3:4c:
                    58:f7:9d:da:55:03:09:17:ca:7e:74:48:91:67:70:
                    11:4d:28:08:3b:13:60:4d:14:68:15:53:93:29:f1:
                    3b:e0:4b:57:e2:8f:3a:2a:ff:07:3b:27:ab:55:3e:
                    2f:a7:39:dd:19:96:d4:8a:35:e4:3b:e5:3a:53:23:
                    05:10:ff:aa:af:05:a4:88:38:3b:99:e4:b7:a3:a3:
                    30:8a:ca:4c:f6:d6:d1:75:cf:a0:73:ea:c1:20:01:
                    1f:ec:c0:57:1b:80:12:a8:98:f0:9d:a6:ef:88:3e:
                    32:b1:0f:85:40:de:4a:47:2a:8e:0e:2c:89:b9:1d:
                    04:92:fb:b0:26:96:fc:9f:60:3a:ba:7c:1b:49:09:
                    04:0d:f4:87:f1:c8:ec:dc:96:b2:4f:5b:ab:aa:08:
                    1b:e3:83:98:05:00:0e:0d:10:62:56:35:e9:7d:d8:
                    36:65:20:2d:72:02:e4:0b:3e:cc:e7:c5:eb:9b:3f:
                    48:22:aa:a0:82:81:bb:70:ea:3f:ac:4e:df:fb:83:
                    c2:94:c7:f1:e8:79:56:06:f3:cc:f4:64:18:af:c9:
                    f4:eb:7c:cf:ee:92:3a:2c:c8:30:30:3a:32:f5:4d:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:58:2A:F2:BB:31:81:47:F3:F8:78:07:64:AB:DB:85:BB:F4:9D:58
            X509v3 Authority Key Identifier:
                keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:63:2b:b9:98:77:0b:aa:62:17:ac:5d:1c:94:05:fa:16:cc:
         fb:bb:d4:43:da:eb:10:3a:25:ad:44:84:c6:64:96:09:af:01:
         69:3c:09:14:b8:bd:58:45:d2:db:26:f3:bc:1c:30:da:a5:4e:
         bb:e9:f5:28:a2:2e:ea:ad:04:a5:84:a0:62:c4:04:d0:53:eb:
         fc:4f:6f:38:b1:ee:7f:cb:97:e7:78:a8:51:26:6f:61:97:1b:
         26:16:34:90:13:22:1f:71:77:54:92:95:b3:23:6a:68:73:1b:
         74:89:f8:c3:55:14:62:f2:20:0e:84:89:10:02:73:ee:0c:8d:
         64:8d:d6:bc:80:91:51:44:b6:5d:6b:bd:66:c6:1d:99:64:03:
         30:5a:e8:bc:b6:4b:41:9f:28:88:52:a4:45:31:e9:22:2b:3f:
         27:32:d7:9e:1a:e8:63:30:24:c1:03:7a:8c:11:ba:5b:60:3d:
         61:fc:52:9c:85:91:78:42:fb:34:34:1e:8c:f0:76:53:50:9c:
         70:93:a3:19:b5:ba:18:4f:b0:52:68:c7:cb:00:54:e9:ff:d8:
         b5:94:ab:ad:5d:41:3b:49:65:ac:d7:21:a0:50:c5:53:15:15:
         ce:2f:ef:64:94:86:1a:33:e8:3c:cc:40:bf:59:5a:2e:d4:b3:
         15:66:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:48 2026 by rpki-client