Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File:                     Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier:          QeiwKpE6eR94XLV+gW4WsPrRfwc2P0jkO0jzOA5ld0Y=
Subject key identifier:   5C:E7:39:88:C0:3B:48:B3:B6:3C:02:05:30:0B:3E:7B:46:B2:53:97
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer:       /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial:       019E20922682D69CFBEA308F9437AC2852F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number:          083D
Signing time:             Wed 13 May 2026 09:01:49 +0000
Manifest this update:     Wed 13 May 2026 09:01:49 +0000
Manifest next update:     Thu 14 May 2026 09:01:49 +0000
Files and hashes:         1: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: QnywvATVRpcpySz+3uTb1VPHqrLmNCfokgmqofByIoE=)
                          2: Wj_qItvZ8nCv6IAqTKi7edGF_J0.roa (hash: g40LtFFYkGRLTg/R02uueeyuMPwHWbYTIxLpfiRgOHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:26:82:d6:9c:fb:ea:30:8f:94:37:ac:28:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
        Validity
            Not Before: May 13 09:01:49 2026 GMT
            Not After : May 14 09:01:49 2026 GMT
        Subject: CN=5ce73988c03b48b3b63c0205300b3e7b46b25397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:75:3a:0b:e2:37:60:ed:70:2f:e3:60:ca:
                    f0:f7:ae:38:43:37:9e:49:b4:80:e5:d1:ea:fe:3c:
                    13:a1:df:76:d3:b7:f4:7a:86:9a:ea:8e:44:e7:bc:
                    ec:a3:d1:13:0e:f8:d3:46:a7:be:12:df:3f:73:b8:
                    4c:13:58:fc:6c:8e:bc:a2:dc:e7:76:6f:2e:6b:75:
                    ad:d9:d3:e3:53:54:46:fc:63:5a:e0:b5:54:b9:b6:
                    ad:b4:59:72:08:00:19:63:e1:c5:e6:bb:5e:8f:bb:
                    3d:70:4d:df:0b:7a:82:f2:af:94:09:ae:16:31:0d:
                    23:b5:c3:73:0d:d7:1a:0a:ba:f6:b7:ab:dc:2a:5a:
                    de:5c:49:4a:f8:30:d3:9f:73:19:f9:54:be:45:b5:
                    b8:3b:3f:25:43:7f:5f:67:e3:4c:fd:d6:1c:19:d9:
                    61:cc:b2:d1:cb:60:a6:d3:1a:ab:df:6d:98:0e:51:
                    d4:62:7e:6b:2f:83:ad:d0:5c:15:19:8d:11:dc:8c:
                    74:c1:74:6f:05:f6:de:75:71:b9:c9:4e:1a:fa:8c:
                    51:2d:4a:d3:c7:bf:aa:ac:20:a3:01:25:e6:b1:9a:
                    9a:f3:25:ae:d1:42:c9:be:53:dc:2e:f0:f7:1d:36:
                    5c:26:6d:5d:c9:30:e2:b9:b4:62:d4:d7:dd:fc:3c:
                    91:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:39:88:C0:3B:48:B3:B6:3C:02:05:30:0B:3E:7B:46:B2:53:97
            X509v3 Authority Key Identifier:
                keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:75:80:90:92:4a:89:f6:74:4a:fb:5e:17:11:b3:f7:ae:5a:
         52:a1:75:73:27:82:c5:71:c3:14:3e:f4:b0:2d:0a:5d:0b:4c:
         67:06:ec:26:5a:7f:33:31:f0:e2:9a:5b:99:5e:3f:1d:f5:47:
         a9:db:b4:e9:c4:79:13:15:38:94:0c:62:9e:71:46:3c:38:28:
         da:a3:ea:e1:bc:ce:ac:67:63:46:20:ba:e0:9c:28:67:6c:69:
         fc:b6:3e:e0:ea:b9:3a:71:c8:c1:9e:a3:f5:49:9d:13:56:e1:
         cd:c2:a5:3d:fd:69:4b:d7:bd:e7:38:ac:f7:7f:98:d8:25:04:
         2a:c2:a1:bb:37:6e:24:73:eb:7f:1b:7b:76:0e:f6:9c:a6:dd:
         1e:81:32:b6:2e:91:98:2e:bc:98:35:18:d4:a2:5b:02:b2:49:
         1f:85:dd:98:0c:a9:22:87:5f:ea:bf:da:46:a7:5e:fc:07:3a:
         a1:b8:9b:e1:b4:06:28:d7:e8:5c:eb:f6:06:3c:f2:aa:0e:9e:
         d4:c2:de:19:db:0e:f8:2f:3b:08:c6:cc:20:5a:8d:2c:55:1c:
         f1:18:63:f6:e3:7f:a0:0c:90:2a:4d:f0:3f:64:41:65:51:8b:
         98:a9:05:60:f5:2b:cb:2a:39:58:b4:d5:a4:a0:9d:ae:97:d4:
         ce:b2:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:50:09 2026 by rpki-client