Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File:                     QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier:          nsVCysooxQ5M+Ld5mJz1i6qAzw8g+kU8IWHETh1gwLw=
Subject key identifier:   3C:B0:86:FF:E6:37:2F:00:02:A6:25:A0:47:B8:7F:3B:4B:A7:D5:C3
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer:       /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial:       019E1EDA5902639392581AC8146BE39B0384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 01:01:26 +0000
Manifest this update:     Wed 13 May 2026 01:01:26 +0000
Manifest next update:     Thu 14 May 2026 01:01:26 +0000
Files and hashes:         1: COcuQD28TY4ZqHPvGBIq2LU3DXk.roa (hash: sGBU4PQ1UIgFaLuANN/BNFi8JnXaw9XHPOkCM2vz3ZQ=)
                          2: K_paFEQGcD7Dwb0KkGKaMQdIqNM.roa (hash: ivJfY98y3w5lIdblfpjkHHl9Y491gAGuVUxW2bbSNrk=)
                          3: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: 6ZI+nazmUJk9NT1rtBl5O6s7UY0jXh4dhGZUvLA7h5M=)
                          4: SLqudbuR-X_G17PVNpWnd2oSWUg.roa (hash: D231831UXSiNe5nD27nyCz/MyBN0j+z0R+T49a0xy84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:59:02:63:93:92:58:1a:c8:14:6b:e3:9b:03:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
        Validity
            Not Before: May 13 01:01:26 2026 GMT
            Not After : May 14 01:01:26 2026 GMT
        Subject: CN=3cb086ffe6372f0002a625a047b87f3b4ba7d5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:b0:2d:61:fe:03:16:31:9f:8f:ab:25:1c:
                    d0:b9:41:5b:b5:61:d6:71:5d:70:cf:37:a8:05:96:
                    77:fe:74:8e:1d:a0:de:d3:20:8b:3b:e8:93:a4:da:
                    07:25:f5:0c:f6:1d:b9:24:85:1c:dd:97:2a:97:21:
                    dc:f7:33:7c:72:4e:65:21:06:60:ec:bb:ef:5d:f6:
                    b3:63:68:f0:ab:43:8b:b2:90:f3:cf:96:6d:9e:69:
                    81:c0:4f:25:1b:fe:fb:53:f5:2e:88:3f:d5:a3:ea:
                    5e:7d:6c:01:af:7e:3e:28:88:03:4d:a4:cd:6b:31:
                    79:7e:19:dd:fb:f4:e4:78:e7:c7:d8:8b:8d:e3:c8:
                    1c:18:5f:b7:1d:a7:05:69:ac:cf:90:11:01:6d:0c:
                    74:a4:94:a4:82:e5:76:3b:35:90:a1:c4:d7:ac:38:
                    07:61:a6:8b:93:56:b4:0e:c9:7f:db:40:8b:2c:da:
                    66:c3:78:5b:39:6a:7e:54:56:3e:19:ea:c2:49:db:
                    03:90:c1:f0:99:93:4a:df:13:6b:e2:19:4f:7c:42:
                    5f:5f:65:65:da:8b:f9:d2:1b:cf:92:bf:55:57:77:
                    75:b3:8b:6a:51:5d:68:21:2a:8f:17:61:2a:c7:51:
                    12:a3:04:12:49:c8:df:2a:e3:04:24:f6:ac:fb:57:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B0:86:FF:E6:37:2F:00:02:A6:25:A0:47:B8:7F:3B:4B:A7:D5:C3
            X509v3 Authority Key Identifier:
                keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:63:57:2d:7e:0c:9f:b3:1e:13:5d:17:7c:e9:6c:e3:67:
         f2:d4:30:fd:b7:36:a2:61:89:ba:42:14:ca:43:63:d6:5f:75:
         a3:39:de:15:3a:76:27:3e:b8:2f:28:67:f5:6e:2c:1e:4c:20:
         57:ea:da:90:c5:97:9d:e3:29:fd:b4:f2:b3:03:18:08:2a:92:
         0e:ce:6d:92:a4:6f:12:74:72:b8:3f:db:f2:1b:b0:6e:a0:38:
         d6:4f:98:2d:30:e3:e0:dc:7c:b2:1b:a9:32:a8:61:0e:c1:0b:
         e1:1a:64:fe:c6:80:48:64:d7:5d:b2:e8:a4:ad:44:b6:c7:89:
         ef:dd:0b:8f:9d:2f:3c:4a:53:90:45:81:8d:d4:e2:34:92:8d:
         62:f2:7e:1a:d8:1e:21:68:b1:49:a0:a7:72:81:18:c7:78:77:
         8f:aa:f3:36:3a:97:a0:11:56:d7:38:ef:6b:be:4b:e4:ac:46:
         d5:1b:68:54:b3:27:b5:cd:97:a0:a9:78:6f:3a:e3:c7:08:06:
         37:3e:11:25:34:ac:0a:b2:69:96:0e:0d:d8:8b:bd:c6:e4:24:
         28:64:f6:bc:a5:e0:8c:73:00:37:99:d9:37:ee:32:fd:ca:8b:
         b0:fe:f8:bf:c3:49:e4:fe:87:41:3f:50:a8:81:c4:b2:cb:de:
         4d:79:86:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:41 2026 by rpki-client