Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          DpErgI/zYYlr84aM1gRrUzJnworomxnpIoaz9O/mnLI=
Subject key identifier:   74:A0:04:12:45:C9:BA:D1:55:FB:40:44:08:15:FE:88:BF:07:9E:21
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       019E1FB5AB0841D30F765275B78EAB027893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          05EE
Signing time:             Wed 13 May 2026 05:00:59 +0000
Manifest this update:     Wed 13 May 2026 05:00:59 +0000
Manifest next update:     Thu 14 May 2026 05:00:59 +0000
Files and hashes:         1: btFTz2r_BesZJN2u_oCmJMOAwZk.roa (hash: 0LBuX7o2jR543EQsgYTaLGtgZY2hOEDSxDyt/nU6qa0=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: IyWQt14JLWMUsqwUnyXq/RprNNlSPSHsmJZR+DUQ20A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:ab:08:41:d3:0f:76:52:75:b7:8e:ab:02:78:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: May 13 05:00:59 2026 GMT
            Not After : May 14 05:00:59 2026 GMT
        Subject: CN=74a0041245c9bad155fb40440815fe88bf079e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:28:fd:0c:99:97:a9:39:c2:dd:5e:dc:ef:
                    ab:30:f6:8b:b2:5c:6b:1f:5e:a6:c4:72:6c:54:53:
                    90:bb:58:42:7d:1d:48:c4:10:29:fd:76:6f:84:18:
                    1c:0d:ac:db:89:03:3d:d6:1f:1a:fa:89:7b:2a:17:
                    a2:87:f9:0b:06:e0:5d:dc:b6:4a:f9:bc:af:3f:d5:
                    af:3d:55:6c:94:aa:1b:ae:5f:a9:e3:cf:48:43:16:
                    7f:bb:23:e1:f6:7d:4d:0c:30:49:7f:a1:39:17:3e:
                    27:5e:27:9d:ad:8e:1f:ed:18:1a:78:83:be:dc:d8:
                    aa:aa:6c:72:c9:3e:02:c8:cc:3a:38:90:32:ed:19:
                    a6:cf:bf:9a:c4:a4:5c:90:a2:62:c7:3f:79:27:5c:
                    58:9c:d5:d8:28:80:a2:9f:f9:4c:b4:31:04:06:5f:
                    42:5e:57:b2:87:91:31:6f:98:09:ae:ef:41:28:7e:
                    fa:88:25:f0:4a:c5:60:e9:d4:15:8b:00:0f:fe:38:
                    3d:bd:66:5d:36:95:e3:67:09:46:7f:6e:89:a1:01:
                    28:d8:5c:66:b8:d3:11:d2:73:db:d0:52:c2:d2:71:
                    fb:6c:fa:a0:28:ce:ca:b7:c0:f6:fb:f4:82:6d:98:
                    56:e0:bf:f8:1f:17:9e:e8:73:3f:cc:5f:89:34:aa:
                    a5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A0:04:12:45:C9:BA:D1:55:FB:40:44:08:15:FE:88:BF:07:9E:21
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:b1:c0:e7:bf:86:07:73:b2:76:89:4b:5e:9a:94:66:1e:a7:
         67:15:6b:01:57:da:48:2f:31:fb:8b:80:bd:22:83:a6:7a:88:
         c7:fd:f4:3e:1c:a5:a2:16:b6:26:b7:86:33:fc:e1:9c:ef:cf:
         8e:bd:ff:24:36:f5:47:fa:4a:2a:66:f5:5f:f4:7b:63:8b:0a:
         69:82:1d:1f:42:12:8c:9c:ad:f5:9c:c2:74:81:ca:0c:c2:0d:
         77:dc:de:43:11:7c:f8:b0:a9:dc:08:0c:4d:3e:f8:65:3f:75:
         59:dc:24:39:a0:04:65:7d:99:ab:8c:62:b0:f7:e7:2c:55:d8:
         da:95:6e:66:1b:42:0c:39:c8:3c:c8:31:87:ef:4b:cc:df:db:
         1b:76:b1:24:c1:af:fa:a8:d9:5b:9f:39:2d:11:da:2e:84:f7:
         44:2d:74:1a:3b:0f:f5:ae:ee:09:bd:50:51:99:0a:bb:0a:5e:
         6f:b3:f5:f2:93:2c:52:56:8e:37:3d:ea:bb:46:22:47:96:0b:
         35:c3:88:c2:63:7c:13:5e:84:07:cf:e8:35:ce:1d:f5:e1:3b:
         c2:28:25:18:e2:e3:cb:72:a7:24:a5:3e:b2:7f:b0:a9:35:85:
         ae:96:5e:5c:7d:8c:e7:5f:d2:63:22:6d:4f:56:be:3c:50:c6:
         83:b7:4d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:36 2026 by rpki-client