Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File:                     qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier:          Fj71ABXkIX5ruw3H76o4dOdLb0Q5bS/mDdjzPHyBgCY=
Subject key identifier:   8F:E2:33:7A:B9:26:57:B0:E0:2B:DF:A2:74:35:98:58:BB:CA:0B:B0
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer:       /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial:       019E1F7EAEBBC44529D78A417BB7928444B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number:          189B
Signing time:             Wed 13 May 2026 04:00:56 +0000
Manifest this update:     Wed 13 May 2026 04:00:56 +0000
Manifest next update:     Thu 14 May 2026 04:00:56 +0000
Files and hashes:         1: HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa (hash: VJAIFmjRG0CrMBQmMTvTyvzSn9UbCMce42aoZ7KBzXY=)
                          2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: lu+Gsd952LCasfLLpxx67nWooNh3eqwVyTD+0eSO5aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:ae:bb:c4:45:29:d7:8a:41:7b:b7:92:84:44:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
        Validity
            Not Before: May 13 04:00:56 2026 GMT
            Not After : May 14 04:00:56 2026 GMT
        Subject: CN=8fe2337ab92657b0e02bdfa274359858bbca0bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:9f:d1:11:4d:18:cc:15:13:52:2b:f8:6f:
                    83:22:6e:44:52:d8:22:d3:f6:5e:21:60:d0:1d:66:
                    b1:74:39:9a:9b:b2:f3:b3:5a:1e:0e:fe:f9:4b:56:
                    e9:18:ad:e0:8d:0f:af:eb:d8:8e:de:28:eb:c6:34:
                    6b:22:eb:44:53:14:a9:76:a7:35:6d:7c:20:ec:0b:
                    eb:d3:da:de:1b:ce:fa:67:b1:d1:00:40:c2:95:cb:
                    07:5c:57:4c:5e:b1:17:49:f9:89:a3:65:16:95:54:
                    f3:3e:cb:69:99:f6:e3:5e:0b:64:56:87:4c:f5:79:
                    af:fc:13:10:2d:0f:80:6c:44:67:ce:b5:b0:82:46:
                    33:a5:b0:e6:af:37:c7:a8:3a:a6:22:f1:ad:4a:3b:
                    31:f0:ce:f7:f8:d2:d6:b0:24:05:2f:d9:72:c2:6c:
                    1d:d3:fb:cb:d7:9c:ec:91:7d:c1:f7:8d:5c:ad:25:
                    31:ad:1b:16:65:f3:1d:8f:f7:1d:83:b7:16:ca:d4:
                    22:ba:d1:24:a2:c5:d7:ef:19:a3:5d:31:ab:83:42:
                    a5:d8:b0:1d:9e:45:57:8f:ea:d3:60:57:3a:b8:89:
                    96:bc:2c:42:1b:3c:25:d7:8b:4d:07:3e:ef:60:1a:
                    18:54:1a:e0:07:7c:c7:50:77:c2:a9:fd:2d:87:bf:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E2:33:7A:B9:26:57:B0:E0:2B:DF:A2:74:35:98:58:BB:CA:0B:B0
            X509v3 Authority Key Identifier:
                keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:75:17:03:dd:57:5e:b9:de:f8:eb:2f:5f:37:ad:16:28:6d:
         ef:6f:d5:62:bf:ba:ac:18:d8:35:d1:ba:59:1c:9a:39:b0:1e:
         47:4a:71:a5:bb:e8:52:5d:9d:d8:bf:40:cc:55:fc:d0:0b:db:
         0a:08:27:a2:ef:60:ba:a8:f0:f9:72:74:06:6a:ae:ef:91:18:
         3a:2c:9a:1e:4b:db:c4:34:d3:9f:d2:b8:84:90:9b:cc:43:9d:
         ac:00:55:99:49:47:e2:bb:3b:fc:af:a6:89:42:0d:df:53:07:
         b7:53:0c:89:c0:26:dd:5c:cc:59:5a:86:d3:a7:0a:ec:20:56:
         bd:04:b1:5a:1f:b8:46:3e:38:81:e7:9e:81:e5:4f:f3:a4:1c:
         3c:9c:0d:34:fa:c2:93:39:5f:2f:f9:4b:d0:d8:3a:ad:65:60:
         7c:e4:90:f4:e0:cf:cf:9f:ae:04:80:37:09:45:17:a2:20:64:
         67:2a:86:fa:b8:c1:33:3b:97:e7:ec:33:5b:e9:eb:00:f8:62:
         ae:fc:5b:21:ca:bb:89:32:85:55:63:bf:42:8d:ef:73:98:3e:
         77:f0:59:a1:80:93:b8:50:13:f6:bf:f4:77:97:37:8d:6f:34:
         3c:e5:f4:e3:7d:6c:15:56:ab:a6:6c:63:cb:88:1e:37:72:1a:
         68:c2:2f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:55 2026 by rpki-client