Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File:                     QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier:          bMVlmU72bEdrlpCWGfx/rK/qNBRsf4PUyUIuVsMKtRs=
Subject key identifier:   6B:CC:7E:73:E2:AD:D5:20:12:36:EB:31:2B:B8:02:91:5C:0D:49:57
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       019E1F478256FE851BFF4FF130B3B83EF50C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number:          15FF
Signing time:             Wed 13 May 2026 03:00:40 +0000
Manifest this update:     Wed 13 May 2026 03:00:40 +0000
Manifest next update:     Thu 14 May 2026 03:00:40 +0000
Files and hashes:         1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
                          2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
                          3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
                          4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
                          5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: Ag81Iohyl81BbiKfCp1pMC59zbyGZIaMuaHJ9Z/u+90=)
                          6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
                          7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
                          8: lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa (hash: RTDdcV/67H1P8/R68XrIpR/Fz3ncNmWbnwOYUbaK6Y8=)
                          9: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:82:56:fe:85:1b:ff:4f:f1:30:b3:b8:3e:f5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: May 13 03:00:40 2026 GMT
            Not After : May 14 03:00:40 2026 GMT
        Subject: CN=6bcc7e73e2add5201236eb312bb802915c0d4957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:a7:9e:ce:f0:c0:1e:58:b6:0b:9c:22:38:
                    a3:50:5d:34:15:fc:6b:0f:1b:3b:15:90:7d:44:c9:
                    ac:5b:c2:37:8b:a7:ca:ad:b1:68:97:ba:b8:ac:8b:
                    f8:1e:70:83:bd:87:2c:d6:7c:a1:9a:7e:6d:d5:17:
                    a0:fc:62:14:95:cc:3b:7e:a2:ac:42:3f:5b:d2:e9:
                    86:81:e5:70:51:02:d3:d3:35:ca:ae:a5:78:f8:86:
                    0a:53:bf:ea:3b:df:c7:bb:ea:cb:a3:16:bc:4c:27:
                    82:31:91:2b:79:60:2a:26:d4:1c:e9:cb:e9:88:fe:
                    8d:c8:e6:1c:28:94:e9:32:63:14:91:ea:e8:f4:8b:
                    96:3f:03:f8:0d:90:93:e8:99:fe:52:d3:4a:38:0f:
                    42:6b:11:1b:2b:d5:b0:25:08:89:14:55:d0:2c:2c:
                    db:31:59:1f:bb:a9:50:d6:26:55:91:fa:3c:c3:14:
                    a8:8d:37:59:9c:72:d3:90:10:cd:29:3d:91:08:00:
                    28:72:93:af:6b:95:7a:c5:40:bf:9f:f3:cd:3b:d5:
                    67:46:29:af:c7:66:17:da:d9:24:e9:c7:6f:bf:40:
                    a8:a4:6a:89:67:46:40:3e:e7:af:91:a1:08:41:f4:
                    ce:d3:94:c0:2c:27:f5:24:67:c3:c4:f9:21:67:83:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CC:7E:73:E2:AD:D5:20:12:36:EB:31:2B:B8:02:91:5C:0D:49:57
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:a3:f4:7e:e7:7d:d0:7f:c2:9d:37:b1:00:35:20:c2:cc:
         4f:34:31:38:71:d9:19:a8:9c:f2:d9:1a:30:be:65:6b:1b:ac:
         77:a3:89:bf:82:d3:4f:38:2e:b7:db:03:46:05:11:74:18:f2:
         a9:b7:21:9a:1f:fd:fc:68:57:2c:9d:eb:3b:2a:cd:0c:e5:80:
         60:22:90:2b:01:70:79:7e:02:94:11:ca:18:69:2e:4e:97:19:
         9a:60:55:b5:5d:6d:69:4d:34:8e:dc:b4:0c:72:8d:c7:b9:34:
         a6:c2:31:3e:73:a3:ae:90:ce:c0:af:f7:14:1b:a9:f5:86:dd:
         9b:8f:fb:ca:d0:09:9f:cd:c6:50:d2:95:2b:90:4c:84:14:70:
         6c:e6:f6:80:cc:76:01:7c:7b:6b:34:36:5d:26:a8:3e:6e:c7:
         a4:3b:07:76:99:51:9b:ec:c5:cd:76:45:b7:7a:36:e8:bb:3b:
         f7:52:e4:59:81:cb:6b:f9:56:bc:f1:da:a4:f2:dc:c5:2e:a7:
         d8:f4:fc:75:c2:a9:27:b7:df:a4:2d:29:c2:22:35:b0:0a:db:
         0d:bb:84:0e:1b:1c:2a:ad:1f:f6:dd:9a:93:68:67:44:54:0d:
         0a:28:45:cc:22:95:29:02:20:2c:e9:13:3d:9f:be:6d:0f:2f:
         9a:85:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:11:41 2026 by rpki-client