Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
File:                     q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft (raw, json)
Hash identifier:          mOWD1lEh5wOMn/dCzH7V8ZcnGaaskm1nALUWG7PHUQc=
Subject key identifier:   1C:CE:25:E1:46:96:F8:5E:D0:43:42:04:7A:BC:90:35:8F:D3:F1:4A
Authority key identifier: AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12
Certificate issuer:       /CN=ababd67e3e108c19f34fc00c76c6005993233512
Certificate serial:       019E1D90A1EF85BF45CACD567AC962EBC21B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
Manifest number:          0133
Signing time:             Tue 12 May 2026 19:01:18 +0000
Manifest this update:     Tue 12 May 2026 19:01:18 +0000
Manifest next update:     Wed 13 May 2026 19:01:18 +0000
Files and hashes:         1: pGugAdUz5p-YAsFMIka9-wuebXc.roa (hash: YdqhZ0Mq4ECgTaBnJBwjKT9BiKBYB9QUoZqYUPVe6yI=)
                          2: q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl (hash: boYGK/cIvlbDtkZPmghdEBOAnZJzJ9NJqpz194GSFiE=)
                          3: sk8j4ooIq_6310cgpT7JHgS__6Q.asa (hash: rnR8JO7Sl7gfRDV7P8yjIvScF3IAyOEjWduQgbXRoFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a1:ef:85:bf:45:ca:cd:56:7a:c9:62:eb:c2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ababd67e3e108c19f34fc00c76c6005993233512
        Validity
            Not Before: May 12 19:01:18 2026 GMT
            Not After : May 13 19:01:18 2026 GMT
        Subject: CN=1cce25e14696f85ed04342047abc90358fd3f14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9f:84:6c:7f:b7:c2:fd:13:df:7b:1c:0c:ff:
                    23:48:83:76:60:5d:65:f2:d0:dc:5d:a2:13:6f:7a:
                    6c:47:36:ed:3c:c9:3e:4f:74:34:44:97:aa:55:57:
                    fe:6c:bc:c3:b3:2f:c5:1a:9d:77:df:61:07:bf:6b:
                    a1:a5:8e:a2:49:72:ff:ad:2b:a8:78:1c:39:25:e3:
                    50:ef:a5:b9:b8:ea:86:24:bd:b0:8e:d0:fa:0f:5c:
                    c6:cb:20:de:63:4d:ea:a6:2b:78:92:4e:93:d5:ae:
                    17:12:70:61:d1:14:be:2f:a5:26:4f:ed:b2:59:90:
                    9a:00:86:76:fe:86:72:51:1b:9b:cb:2f:e8:b8:af:
                    d3:2a:bb:93:ec:f7:7a:66:d3:3a:6c:fd:16:29:7f:
                    af:9d:2d:c6:48:c1:1b:fa:af:09:74:fc:2f:fb:81:
                    26:4d:3a:6e:28:cf:a7:96:90:69:77:78:4f:f1:08:
                    bf:fc:23:63:7e:60:c9:db:ec:ec:75:ec:82:5a:b5:
                    f9:33:a9:e3:85:c4:7a:65:ae:02:ce:ce:80:db:e4:
                    06:f4:fc:05:85:d3:ee:b1:e9:34:0d:19:8f:64:ca:
                    20:a1:bc:45:63:86:01:f5:65:ec:5f:d4:11:7c:ae:
                    74:a5:e7:5d:2e:f7:1e:da:ee:26:72:d2:d9:0c:05:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CE:25:E1:46:96:F8:5E:D0:43:42:04:7A:BC:90:35:8F:D3:F1:4A
            X509v3 Authority Key Identifier:
                keyid:AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:91:b9:3a:fc:b7:30:c6:44:b5:22:90:40:a1:9b:c5:d9:
         8c:14:cb:38:fc:1b:f7:61:e0:7c:26:40:4a:e0:8f:d1:20:3a:
         41:02:3a:86:7c:f5:6f:3b:95:0b:3c:94:4c:69:d2:25:b9:28:
         b0:af:b8:a0:e2:1a:d0:8a:0e:af:01:f0:30:4c:f3:c6:c1:fe:
         6c:b9:51:c5:21:22:ab:e3:7d:40:cd:87:c0:a5:9d:32:ea:73:
         4e:62:f5:7e:ae:37:4f:73:da:ab:19:f7:47:f0:87:f7:23:2e:
         96:b0:fd:1b:3b:22:85:da:da:86:c7:0f:aa:30:45:c1:18:79:
         db:b1:64:1f:f1:94:27:71:0b:68:89:64:2a:6d:88:1b:d2:a3:
         1e:c6:6a:e0:c3:47:62:3d:66:6f:c6:ca:cb:64:6d:fb:a2:24:
         38:26:05:c0:57:df:6f:ad:28:b2:dd:ec:d9:62:0c:60:67:f7:
         28:7a:9a:1b:82:b9:f2:51:ae:93:3f:46:7a:11:18:6e:15:0e:
         d2:60:28:24:eb:40:be:0a:de:94:cb:e5:b9:0d:18:5a:b9:69:
         d5:83:76:e9:4b:0c:a3:f5:22:03:42:cd:c4:4f:61:91:17:43:
         a4:49:01:bc:11:a1:e3:da:9a:37:e9:c9:bb:66:b6:24:a7:50:
         9a:4c:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:37 2026 by rpki-client