Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          Q4ja7Bz5czh/EJEZWBKIClxuj/9Z2NiHKhaO7N4re2o=
Subject key identifier:   7B:B9:E2:7C:3F:76:AC:08:11:73:FA:8B:31:6A:47:8C:FB:A2:54:EB
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       019E1F47AFDD2A30317EB249A18DBD919CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0FC2
Signing time:             Wed 13 May 2026 03:00:52 +0000
Manifest this update:     Wed 13 May 2026 03:00:52 +0000
Manifest next update:     Thu 14 May 2026 03:00:52 +0000
Files and hashes:         1: Nl-NwJXgg_mKvSjTnftPWLYBToY.roa (hash: UM5uAdr1m30XVEMiULWnarxQCPhDPuMKS+lBMXBG4Ls=)
                          2: Rohs0EQIAoIUkwGS6XtjnDouO8g.roa (hash: EcZk5ZFiNKSus0TYnUyIuUuGvRBAlAnVxdbmm6ttv7A=)
                          3: ihu7RSF9d_o474O74_XHNiBLq8Y.roa (hash: zWFbywvFotfCwUcEIQ2DvsebZNFghPy/L/dQzBScQnk=)
                          4: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: rr1IlbIjtRLh0kMJGf0fDDJRqlvCDJwQJ0AEB7FrjVU=)
                          5: yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa (hash: bp0xhjE5IUPvG68ZkNNK1uC8wEizknIYbPwTcDbU+cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:af:dd:2a:30:31:7e:b2:49:a1:8d:bd:91:9c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: May 13 03:00:52 2026 GMT
            Not After : May 14 03:00:52 2026 GMT
        Subject: CN=7bb9e27c3f76ac081173fa8b316a478cfba254eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:ac:49:83:1f:ad:46:24:5e:c4:55:10:46:
                    d5:17:18:30:5b:65:3c:74:1c:8e:74:3e:b4:5f:ef:
                    09:b9:2f:5f:a0:0b:00:48:23:f2:87:0f:9b:c9:6d:
                    ec:1b:c5:5e:8b:f5:0f:60:a6:11:9a:b4:74:cb:a4:
                    64:5e:58:44:91:26:0e:01:49:b0:51:43:0f:df:74:
                    44:95:b3:c2:f0:73:1d:e8:4d:3d:19:ec:a3:c1:2c:
                    e6:64:18:b5:a5:6f:86:ad:02:17:04:f9:4e:5f:83:
                    1e:bd:e0:d1:b5:a4:1e:d3:37:6e:46:0c:d3:6e:ba:
                    64:41:23:3a:7b:ca:66:72:93:b5:7e:d9:42:75:73:
                    a3:d8:61:de:06:57:c5:fa:61:63:fd:aa:1a:8d:59:
                    41:2c:01:db:d9:50:57:54:9f:69:1a:1c:53:c7:0d:
                    c5:34:bd:f8:fc:fd:f1:02:2d:10:36:c6:f4:8a:e8:
                    49:7b:3f:19:68:1b:32:35:44:13:53:f2:88:9f:0a:
                    e9:f7:a9:da:ea:03:74:e3:82:d5:fd:74:b0:c8:77:
                    ed:64:b5:82:6e:63:00:de:eb:45:2e:c9:57:8e:0a:
                    a1:f8:6d:6d:c6:be:91:e6:10:ff:6a:30:ff:1d:9d:
                    b4:93:10:3d:ba:3f:82:bf:97:4f:8a:76:30:e7:0f:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B9:E2:7C:3F:76:AC:08:11:73:FA:8B:31:6A:47:8C:FB:A2:54:EB
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:52:c1:68:be:b9:b9:99:e6:5a:36:67:d5:3f:84:90:c8:43:
         ed:47:ea:ca:4a:a0:b9:9c:b0:49:b1:fa:c0:52:90:f7:2d:d6:
         2c:ad:b6:bf:a8:78:08:c2:95:f3:2a:b6:d4:b6:bb:9c:2b:9b:
         47:dc:ff:04:f5:e0:62:fa:06:b6:23:4e:91:fe:a6:33:09:8e:
         6e:dd:18:80:47:ac:2d:54:2e:48:da:1f:6c:11:06:5d:b7:a4:
         a1:4d:66:11:2d:75:89:14:21:3f:95:82:dc:41:af:34:93:36:
         e9:5e:6f:45:1b:f8:58:1e:14:3c:2f:1b:1b:94:0e:fc:3a:30:
         da:a2:ef:46:86:27:08:7c:28:23:aa:54:4a:f3:bc:83:ef:9b:
         32:75:06:c9:f4:37:2b:dd:0b:56:ee:43:21:51:29:e8:58:48:
         b7:33:0d:43:1a:ae:dc:8f:b5:03:a1:1f:7e:49:02:04:07:cf:
         ed:f1:f0:1c:9d:50:c2:02:25:86:f4:76:ed:e2:76:28:30:d5:
         44:23:05:61:46:f1:bf:9c:e1:13:c7:a4:d1:7c:04:79:ab:63:
         7f:1c:10:b0:55:52:bc:9d:4a:ae:69:c7:2e:90:79:8f:aa:58:
         e9:c3:55:85:c6:3d:06:af:ee:c0:7f:33:40:8e:ce:f3:e1:2c:
         1c:86:cb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:58:07 2026 by rpki-client