Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File:                     Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier:          kiQqmW+qx3UXEEhNHuXufSg8Hr3APBbcjxoDhH04RYw=
Subject key identifier:   35:26:A5:B3:3F:F1:FD:F4:89:8E:F2:C8:97:E5:E6:7C:D1:7B:09:07
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer:       /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial:       019E1FB599066CFDDDAFA9F592821D15C4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 05:00:55 +0000
Manifest this update:     Wed 13 May 2026 05:00:55 +0000
Manifest next update:     Thu 14 May 2026 05:00:55 +0000
Files and hashes:         1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: piqgVHgI/jHDERkKiayXup7OVQq/qgopFhBUDPqIrKw=)
                          2: ksaatSaKxA-y0WXvpifwAI5WkmY.roa (hash: FBqVdV7XXAfAEJJwTss1e7NjG8kEmROWtZrVwbWVdUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:99:06:6c:fd:dd:af:a9:f5:92:82:1d:15:c4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
        Validity
            Not Before: May 13 05:00:55 2026 GMT
            Not After : May 14 05:00:55 2026 GMT
        Subject: CN=3526a5b33ff1fdf4898ef2c897e5e67cd17b0907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:19:5e:d1:3c:0a:73:60:07:12:70:b9:a2:
                    71:09:6c:43:95:c2:89:ab:58:13:e2:df:67:52:32:
                    74:63:bf:e0:5e:80:2b:74:52:12:d4:1e:84:aa:0d:
                    9e:20:ae:0a:64:ee:97:85:00:6d:33:06:16:6d:85:
                    50:71:df:81:b9:ed:ab:fa:ee:11:18:80:d8:43:c1:
                    f2:ab:89:78:a8:0b:c9:93:c3:8b:af:05:ea:58:23:
                    2e:de:ba:18:95:4e:3f:4a:30:d1:de:3c:f4:ad:e3:
                    9b:7c:32:c5:16:05:83:fd:9c:a5:2b:59:db:41:fe:
                    89:de:66:88:30:af:b0:80:5e:f4:5d:57:f9:85:b8:
                    a7:e3:1e:cb:d7:c0:cf:a9:c2:cd:c6:33:99:b1:da:
                    d3:f9:d0:4e:94:60:78:a6:34:5b:1e:37:3c:65:8e:
                    e3:4f:27:24:5f:c7:83:69:87:75:f2:11:4f:80:d2:
                    a2:04:a4:71:5e:92:de:d2:93:3b:cc:f4:b9:f0:ad:
                    0e:60:c7:0c:62:f2:f1:d3:e7:b1:ec:9b:fc:2b:96:
                    dc:71:2c:10:39:61:de:f9:ae:6d:26:0e:92:36:30:
                    10:31:fc:8c:1c:6c:25:1c:ad:16:98:91:6a:b2:a3:
                    89:ba:b8:d0:a7:10:21:54:7c:b4:71:32:97:a3:3e:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:26:A5:B3:3F:F1:FD:F4:89:8E:F2:C8:97:E5:E6:7C:D1:7B:09:07
            X509v3 Authority Key Identifier:
                keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:8b:df:93:d5:d5:8e:bc:cb:90:a0:c3:c9:df:4e:49:6e:fb:
         7e:da:ce:a6:27:f8:3a:f8:fe:ae:ae:13:8a:9c:04:8f:47:72:
         93:ea:55:98:43:82:ac:26:fb:3a:85:b5:07:68:d1:cb:3a:40:
         c5:1f:28:01:2c:bc:83:e3:f8:71:bc:d8:68:9d:59:69:b8:44:
         76:ad:c3:32:5f:22:de:cc:1f:1f:1c:08:5c:42:8b:7f:b0:03:
         00:f5:9a:62:dc:7e:6e:38:09:82:20:63:e8:5b:49:fa:1f:6e:
         c1:55:6c:b2:88:e5:f9:f0:d9:90:37:b2:da:ea:21:51:0b:d1:
         d4:50:08:6c:dc:8b:ec:5e:78:f2:4a:63:f7:5f:e3:c9:75:98:
         6c:bd:45:39:42:25:67:c8:32:95:45:bd:36:c2:b6:11:8d:f4:
         f4:f5:ed:9f:fa:35:24:b1:10:d9:db:37:db:1f:74:ba:67:db:
         b3:fa:21:3d:86:04:98:1c:dd:c1:65:2a:70:0e:cc:b4:2c:47:
         28:1e:87:1c:9d:d5:1a:d9:cf:af:f1:95:c1:52:a2:cb:5d:8b:
         67:01:6f:67:3a:e4:dc:c3:61:d3:af:58:3e:47:f9:c4:7c:88:
         e6:85:7b:81:6a:5d:58:f3:cd:1e:f4:78:c7:91:47:40:62:4b:
         d8:12:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:11 2026 by rpki-client