Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File:                     QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier:          W4WRXWMb8Xdqb9fu77759H+wgZQWIVLGuRAhzc98oZA=
Subject key identifier:   E8:D3:06:03:63:BD:FE:9E:19:BA:A9:4B:EB:F5:28:3B:99:9A:F6:DD
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer:       /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial:       019E1DFDF832A9C36E1E81000569A5D63A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number:          15E1
Signing time:             Tue 12 May 2026 21:00:43 +0000
Manifest this update:     Tue 12 May 2026 21:00:43 +0000
Manifest next update:     Wed 13 May 2026 21:00:43 +0000
Files and hashes:         1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: HCNFVvoyQ2YbeNM0Ti0gYrb9mY78G7gcVCEZOl6sonY=)
                          2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:f8:32:a9:c3:6e:1e:81:00:05:69:a5:d6:3a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
        Validity
            Not Before: May 12 21:00:43 2026 GMT
            Not After : May 13 21:00:43 2026 GMT
        Subject: CN=e8d3060363bdfe9e19baa94bebf5283b999af6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:b7:cc:ff:b2:19:19:6d:50:38:c7:b5:89:
                    0b:50:59:96:55:0e:18:27:6c:c7:d1:c9:10:77:da:
                    98:bf:97:01:51:b7:6a:78:08:65:9e:ba:59:cd:ca:
                    72:de:a4:53:c4:5c:8b:86:23:14:56:d6:2d:1f:ee:
                    2b:29:25:d1:43:5a:2b:76:a6:07:d5:d0:1f:e4:5b:
                    53:7b:5b:c3:91:c9:c0:88:64:2e:b6:d7:dd:0e:e7:
                    56:7c:eb:cf:87:d9:45:35:db:1b:f3:c7:78:eb:50:
                    3a:a0:10:f2:aa:69:7d:83:8d:d9:1c:f0:f9:3f:3d:
                    f5:63:8b:3e:e0:66:96:71:42:41:82:08:d4:8c:1f:
                    8e:27:cf:ae:f9:7b:d7:44:cb:08:60:40:3c:95:71:
                    6e:a0:40:3f:9f:94:60:b7:de:22:f5:d5:b9:0e:4c:
                    f8:20:35:b1:af:2e:13:54:c4:7f:d6:70:ff:0c:a9:
                    0d:90:e8:21:0b:60:ea:2d:39:b9:df:ca:42:fc:82:
                    a2:a7:91:a6:d6:19:94:81:82:a3:9e:a9:52:af:b6:
                    4e:d5:a2:d8:b8:61:a8:6a:16:e1:3e:0b:9c:f9:42:
                    c8:5f:1d:fd:7f:c2:44:d9:14:b6:82:e4:22:a1:19:
                    de:5f:59:7e:cb:27:8f:a1:57:7b:a1:2d:6d:9d:be:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D3:06:03:63:BD:FE:9E:19:BA:A9:4B:EB:F5:28:3B:99:9A:F6:DD
            X509v3 Authority Key Identifier:
                keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fa:33:db:c8:e9:43:dc:7d:42:10:65:99:46:96:12:4b:b7:
         d4:47:e5:64:50:56:f4:a5:77:10:86:05:47:7a:6a:e3:3e:4f:
         09:b3:b6:ef:68:d2:ec:04:4d:94:70:f5:2b:87:8b:b5:46:88:
         d8:9b:73:9b:bf:e8:d1:d3:4e:8d:fb:b5:4e:fe:c2:aa:47:2b:
         23:57:1e:8d:a2:13:1f:3f:d1:e6:d8:18:a9:c9:12:fa:26:85:
         0e:f9:33:6d:c8:38:ab:2d:cc:bb:2a:4b:01:cb:52:5d:e1:e4:
         5a:70:ed:bc:8a:c1:8d:56:e3:26:77:82:d0:a0:21:0b:d3:50:
         cb:8c:ba:91:e8:81:18:ef:d2:ce:45:93:ee:bb:1e:92:54:b5:
         7a:fd:cf:a5:cb:1c:53:98:48:96:9c:a0:6a:1d:f6:10:f4:51:
         24:68:ef:44:59:fb:bd:fd:c4:06:ed:f1:a5:a5:db:42:fe:a9:
         f1:63:ef:03:5d:da:d8:48:61:8c:d8:46:51:2e:9d:95:f8:47:
         fb:2f:0a:bf:cd:91:d0:c3:bc:44:ec:98:81:7b:b5:85:f8:45:
         14:9b:95:42:5c:9a:45:39:69:ee:0d:71:96:3d:89:e2:38:28:
         62:4a:f9:c5:6b:53:15:32:a1:98:17:a3:7f:d5:95:7b:aa:b6:
         91:17:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:03 2026 by rpki-client