Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
File:                     qS3HvbydCXM23mJDtVCrFzN16jk.mft (raw, json)
Hash identifier:          o/W+vQjGumxbVQhs+ltGxugdTTibDxNoil3DxIIVX6M=
Subject key identifier:   02:21:59:2B:04:66:22:4F:84:EA:42:C9:EC:1E:24:23:61:1A:61:AF
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Certificate issuer:       /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial:       019E1D22FC18343712E6557E861A4B7DCB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
Manifest number:          102F
Signing time:             Tue 12 May 2026 17:01:32 +0000
Manifest this update:     Tue 12 May 2026 17:01:32 +0000
Manifest next update:     Wed 13 May 2026 17:01:32 +0000
Files and hashes:         1: 1-Ty7nHprcve9vsYQ96HHmH_jrn0.roa (hash: Lp5p688sS4VmSs0h9xl5NhAvHxt6zU/ln7WnYTne3/w=)
                          2: IiB2Ip_gTRGoGLtey3T0wEW1PVk.roa (hash: Tq+XRxnu1ThRmbGiwUw9q6C8TgZ2g/E+FVDArVJteLs=)
                          3: qS3HvbydCXM23mJDtVCrFzN16jk.crl (hash: QduKHIv8Mp0dpaaz+KHnEkZLWtIxKJ4IYQss657D3AQ=)
                          4: rVy-EArmTwTvF4lNpYbhnPQG_qs.roa (hash: zs/KIT3kYT9IMK9eNhSYD1TaujdAGeA5UeKvsJ3/T+E=)
                          5: xJC0DlbyZI1NuaWwAq4qQ5WaU7c.roa (hash: KuVc7uaamRTiDNcGOqyk3HELKRHYallBMYu1OzhhX88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:fc:18:34:37:12:e6:55:7e:86:1a:4b:7d:cb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
        Validity
            Not Before: May 12 17:01:32 2026 GMT
            Not After : May 13 17:01:32 2026 GMT
        Subject: CN=0221592b0466224f84ea42c9ec1e2423611a61af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:22:8e:b7:ed:1e:8d:b7:fd:ab:c3:3c:10:
                    06:d7:7b:df:11:4a:30:02:36:aa:a5:c7:ce:c9:d7:
                    c8:91:fe:81:9e:b4:b5:59:61:d3:c9:59:44:c8:b0:
                    3c:4c:44:75:94:c1:4a:1d:24:08:3f:92:c9:a0:ea:
                    f2:ee:42:c2:c2:ea:8e:1e:57:3a:23:f3:65:66:19:
                    a4:bc:83:65:f9:e0:e7:2f:6d:59:74:54:f5:7f:3c:
                    f8:19:1a:13:a5:38:43:eb:12:95:af:f2:ea:6c:f1:
                    01:35:45:82:ca:f1:04:ea:61:4c:6e:4a:ca:89:36:
                    62:63:4d:b9:72:aa:43:5d:ce:5c:15:61:fe:e3:72:
                    0d:78:e5:61:57:34:ab:62:cf:9e:fc:c0:94:6b:64:
                    61:33:3a:41:65:4e:fb:3a:0d:d6:f7:a7:7e:c8:cd:
                    2e:82:16:fc:c8:3d:d5:5b:67:48:d6:51:3f:85:4e:
                    9b:73:bf:5b:be:34:74:33:5f:e7:d5:53:6d:d3:10:
                    87:34:ee:59:a3:fd:64:e7:58:1c:d5:8d:ab:73:77:
                    b3:3e:9b:cb:e2:97:f9:99:83:d0:e1:ee:d1:3a:25:
                    dd:ff:e0:06:a5:20:56:68:ba:ea:80:9e:32:ca:4d:
                    e1:42:72:31:bf:e1:9b:78:57:86:4e:2d:a5:d0:28:
                    03:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:21:59:2B:04:66:22:4F:84:EA:42:C9:EC:1E:24:23:61:1A:61:AF
            X509v3 Authority Key Identifier:
                keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:19:5e:71:55:1f:ac:00:9f:c1:a3:2b:f6:74:5d:b0:fa:de:
         c3:28:d7:6e:f7:fe:10:f7:71:61:1a:b9:66:4b:29:0c:84:31:
         72:58:e6:7c:e4:bb:42:d8:3d:19:66:f3:39:e3:31:32:5d:e9:
         28:dd:e8:c4:56:15:44:e9:4b:d1:82:87:49:61:c4:7f:f8:ad:
         fb:8d:5e:95:1d:f7:d1:fa:eb:bd:12:0c:d2:66:a0:93:d5:dd:
         9d:f7:ae:d2:b7:7d:2b:ab:c8:32:e7:7f:7c:ec:fb:84:36:2a:
         8d:f9:e2:00:1c:48:ed:ee:1f:86:8f:46:3f:b0:8a:14:bf:6d:
         88:7a:6d:fc:01:ae:af:37:52:b5:36:32:17:08:88:d4:59:14:
         e1:c3:d5:c9:9a:6b:54:c3:01:de:d5:13:8f:64:8e:c4:b4:c8:
         1d:a8:8d:af:7d:e6:07:b8:d2:4e:6a:41:e6:d1:d5:56:e3:4d:
         2b:5e:c4:11:f1:be:d3:fb:ca:8d:e8:17:2b:af:8d:a5:26:17:
         36:a4:97:c5:b9:b9:4f:59:f3:87:f5:d3:0a:09:97:fa:8c:32:
         3d:49:f0:51:4d:49:d3:9c:ed:3f:06:6b:fe:12:2d:f0:eb:5d:
         ce:ec:da:5a:ac:80:8d:95:e2:1b:16:70:42:18:c5:1e:e6:82:
         f1:89:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:26 2026 by rpki-client