Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File:                     QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier:          /XLdzRYml7gZ1NTFYFxAmYKU28wnt1QWB2p6wbkTwbA=
Subject key identifier:   2B:18:56:2E:59:81:8D:08:76:A7:2D:28:15:F6:A6:2F:25:65:A7:78
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer:       /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial:       019E1EA34B35106240B9477A5BFF4D712F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number:          185B
Signing time:             Wed 13 May 2026 00:01:18 +0000
Manifest this update:     Wed 13 May 2026 00:01:18 +0000
Manifest next update:     Thu 14 May 2026 00:01:18 +0000
Files and hashes:         1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: fglkfIYEaOdHggaTI9oyhezaP3xKLQJfpZTCgNOHOi0=)
                          2: vUZltBKcGS-PyNExw351SsPo8f0.roa (hash: R88L+/UM9Ub6dUxPG9JUIXyMGiUf8ahmjgxxPz1xB4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:4b:35:10:62:40:b9:47:7a:5b:ff:4d:71:2f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
        Validity
            Not Before: May 13 00:01:18 2026 GMT
            Not After : May 14 00:01:18 2026 GMT
        Subject: CN=2b18562e59818d0876a72d2815f6a62f2565a778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:4e:03:81:17:39:14:b1:0e:28:7a:bb:d8:
                    0e:89:4b:df:ec:1c:4a:5c:5a:fa:78:33:fd:df:dd:
                    76:68:12:1c:85:06:16:db:34:47:3e:34:bb:ae:03:
                    c3:a7:d6:ee:6a:d9:d8:cf:e0:e2:2a:f3:73:8c:7d:
                    2d:84:08:b2:3c:1b:d5:97:30:51:29:6f:48:79:5c:
                    a9:a1:b4:b3:2b:5d:07:e6:b1:76:d2:7a:c3:c1:e4:
                    71:49:89:f9:9e:83:e5:2b:c0:a8:89:77:17:33:a2:
                    db:a7:31:88:5b:20:94:f9:fb:30:27:9d:18:03:bf:
                    73:0f:67:b2:5c:e8:df:d2:d4:9c:2b:a1:41:2b:a5:
                    f5:f7:8d:1b:93:03:f6:65:7a:8a:2d:d8:d4:9d:b9:
                    90:02:8e:e1:a7:e5:fd:fd:aa:9b:5a:9e:35:90:98:
                    7f:a7:42:38:0f:99:56:6a:a1:33:2b:00:b3:9b:2c:
                    c2:67:1a:20:8b:8d:d1:94:37:a1:d6:e2:a4:f7:8c:
                    c3:3d:d7:d4:24:c2:83:65:ff:cc:8f:41:bd:eb:fb:
                    1b:f6:f5:0a:43:7d:3a:e9:02:d2:7c:4a:de:ef:cd:
                    4d:8a:c8:cf:9e:1d:b2:53:4a:17:b8:bf:3c:e6:9a:
                    e4:1b:d2:35:0d:28:da:0f:81:3b:c0:f1:40:13:cc:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:18:56:2E:59:81:8D:08:76:A7:2D:28:15:F6:A6:2F:25:65:A7:78
            X509v3 Authority Key Identifier:
                keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:37:2a:17:b3:fa:d4:e0:a1:16:f2:d5:67:ad:0a:0c:c7:47:
         a4:92:ff:67:0e:64:25:79:d7:f9:c4:19:54:54:f2:e6:e1:21:
         5a:8c:47:ff:44:7e:2f:4b:be:c5:2a:1a:34:25:ce:33:2b:89:
         17:7e:77:12:27:3b:8f:33:07:80:84:26:62:a9:23:64:2c:86:
         89:5c:29:a8:53:b5:6b:db:4b:e1:19:3e:b7:94:c8:df:99:f0:
         30:de:4c:e9:03:5d:1b:e5:c5:c3:c7:5a:3a:49:eb:30:3b:c7:
         9d:7c:c8:b4:22:42:3e:c4:55:b3:4c:10:cd:af:ab:c0:b2:ca:
         d7:f6:b1:cc:c3:07:b6:a6:ea:12:5f:3c:09:09:39:cf:4c:9f:
         fc:ab:c8:b9:5e:d6:69:93:79:af:05:46:89:74:e2:ad:2e:e9:
         60:8f:65:b4:96:d0:50:b1:35:dd:69:e6:d4:78:14:0e:4b:22:
         cd:0c:25:1c:0c:b2:fa:aa:35:98:7d:e0:ea:0f:e8:db:f6:b8:
         44:fa:de:eb:48:54:92:bf:35:2a:d4:1d:72:4c:b8:52:cb:ed:
         2b:b7:86:8c:59:c3:fa:af:e8:4c:c8:79:5b:a9:97:6b:03:45:
         71:da:99:d9:e5:2d:f2:84:06:f3:00:a2:18:01:a4:c8:26:29:
         3c:20:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:43 2026 by rpki-client