Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File:                     QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier:          oOJaW2+t3+Wx13zZ9W5A1A+IoCojRbNI28FghkmMkO8=
Subject key identifier:   D8:0E:74:40:48:A2:95:AA:99:9D:DA:BD:C6:62:41:96:4E:A6:2E:91
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer:       /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial:       019E1F10BB4CCC2C63FEB5B65FF9FED08585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number:          041E
Signing time:             Wed 13 May 2026 02:00:50 +0000
Manifest this update:     Wed 13 May 2026 02:00:50 +0000
Manifest next update:     Thu 14 May 2026 02:00:50 +0000
Files and hashes:         1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: T1ppW2q9Ow13aII/n4furX5RRsIU9LtGKPddvT6zC5o=)
                          2: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (hash: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:bb:4c:cc:2c:63:fe:b5:b6:5f:f9:fe:d0:85:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
        Validity
            Not Before: May 13 02:00:50 2026 GMT
            Not After : May 14 02:00:50 2026 GMT
        Subject: CN=d80e744048a295aa999ddabdc66241964ea62e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9c:4b:a2:18:42:75:48:d7:2e:b2:4c:c4:91:
                    33:ed:33:14:80:7f:14:b1:a2:37:73:ac:7a:47:e8:
                    c7:d7:2d:66:d4:fc:70:6d:22:07:87:c9:05:a1:e3:
                    d8:c3:4f:8f:09:f6:af:86:32:97:50:c3:df:7d:36:
                    33:4b:b9:02:9a:3c:eb:16:1c:77:19:f6:25:02:25:
                    58:9f:c7:67:67:f3:aa:e6:6b:33:0a:12:fd:4d:9d:
                    9a:40:e5:7e:ad:05:7f:65:60:3a:db:e7:d4:93:cb:
                    cc:09:48:35:22:fb:1a:fd:09:13:6b:53:f2:a5:e3:
                    e1:a8:47:5e:d5:2e:38:68:35:bd:22:ca:6b:56:4b:
                    57:7e:10:08:f9:2d:29:ca:14:d5:b5:11:15:98:5d:
                    5c:01:19:91:0d:2e:72:23:93:9b:15:b9:9d:c7:95:
                    1a:4b:8d:af:5c:ae:8f:cd:75:0a:e5:76:a4:00:07:
                    dc:3d:38:2f:72:14:b0:35:69:cf:0f:16:5f:ee:e2:
                    52:43:aa:6d:73:67:e3:c8:9e:4a:bb:18:e1:fa:66:
                    01:8b:fc:a6:24:5c:1d:e0:c2:a3:7b:d6:3e:67:38:
                    35:6f:04:75:75:13:3b:35:3a:c8:49:a5:12:90:71:
                    9d:47:0b:82:fa:4a:07:d5:27:24:bc:91:d3:05:3f:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0E:74:40:48:A2:95:AA:99:9D:DA:BD:C6:62:41:96:4E:A6:2E:91
            X509v3 Authority Key Identifier:
                keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:2d:e9:ec:e8:54:ac:b8:91:2d:6a:19:fb:b2:99:17:67:
         c3:87:96:63:d2:e0:a3:c5:29:f5:40:aa:88:96:3e:8d:a9:21:
         8d:dc:2b:f0:b6:f3:ca:35:7e:cc:1c:11:87:df:fb:25:f8:55:
         a5:12:07:81:8a:41:33:1d:d3:29:f6:e9:7e:23:69:63:30:03:
         3a:e1:33:a1:2f:74:19:29:0c:a7:47:a1:41:3c:ac:11:40:42:
         98:ac:c1:eb:67:53:26:db:f5:bc:df:69:a2:04:06:f9:82:cc:
         37:73:1e:b2:7c:20:91:fa:cc:d3:18:46:25:a5:e1:63:a5:b7:
         a2:f8:15:a2:26:73:5a:96:13:18:71:62:56:87:78:8c:db:b4:
         52:81:db:13:ab:e9:3d:33:c3:94:d1:0c:b6:19:50:d9:74:9d:
         8a:63:9d:40:11:8c:52:d3:04:35:82:45:b7:99:fc:f8:75:fc:
         2f:0c:c1:24:95:18:40:df:0a:31:54:46:eb:65:80:b0:aa:08:
         68:8d:e1:32:30:e3:6c:f3:bd:c1:84:58:04:9b:5e:c6:c0:df:
         31:b0:a8:ae:6c:fb:e3:e5:d7:18:a9:1c:93:e9:ad:bf:a6:0b:
         2b:15:86:a2:cb:7d:3f:c8:cb:52:21:92:76:da:7b:bb:88:54:
         db:f8:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:50 2026 by rpki-client