Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File:                     q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier:          5EgWi9hJOyQdoriwbbCPq07Pt+WORPGmwN7zrPAGrmY=
Subject key identifier:   A0:92:36:04:65:CA:0E:24:FE:11:12:25:E7:9E:79:6E:49:A9:A9:AC
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer:       /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial:       019E1D90256B492386066FD820E8197C2D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number:          1940
Signing time:             Tue 12 May 2026 19:00:46 +0000
Manifest this update:     Tue 12 May 2026 19:00:46 +0000
Manifest next update:     Wed 13 May 2026 19:00:46 +0000
Files and hashes:         1: 9AQTjaHWKJCXsC30oHllY8BTYu0.roa (hash: 7fmthrhoa3IJWK083wDCI4y5oXM7TE8HLdralxn1zCQ=)
                          2: D8zt2B-zZXXGmbmFyYrVgX5VlhE.roa (hash: 7mktpizMJp0UVGb90YuRIUsj5vrCk7DRcIeq+0Shwlw=)
                          3: FR0TMzudRUII0Fa6Jf04w_3WI20.roa (hash: AJPhPEVbqaILZMRzPtnEJF9G4HZjyUJiNfN1jrcINf4=)
                          4: buqYzFTyi7wPpzd9BAt1N0qAHXU.roa (hash: 7fssqNhBi5yImjk1Vr2WL9ol/xv6RFd9KhgAwqTB6Mg=)
                          5: cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa (hash: iFLFl7A8YTDlZs6b2ZtDXNK2nv2uM/FdHMVOEy9wgkc=)
                          6: ffozWOJhdYTlZsYd3LUTrpAH84g.roa (hash: LqRzq5DyTPzo0AG3Z9lInY0bhS/P0365y/30CPyVkNM=)
                          7: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: cmMYUl3z1WHc2MoPSkXMhWDPktmrPY9ujewYWPznj6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:25:6b:49:23:86:06:6f:d8:20:e8:19:7c:2d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
        Validity
            Not Before: May 12 19:00:46 2026 GMT
            Not After : May 13 19:00:46 2026 GMT
        Subject: CN=a092360465ca0e24fe111225e79e796e49a9a9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:12:57:73:82:b8:74:2f:ee:23:2c:e5:b7:15:
                    f9:37:14:01:4e:3a:a1:8f:9f:96:f3:51:c0:30:c8:
                    5b:4e:56:bd:bc:a7:a9:40:95:1a:5e:bd:cd:58:01:
                    f2:39:08:09:0e:0e:0f:89:26:04:ab:a9:15:90:e1:
                    51:f7:48:a2:d6:b5:8e:7a:b6:8f:ef:e0:ac:90:6c:
                    d8:5b:8c:d6:a9:6f:81:d8:dc:f2:4f:c4:03:0d:8f:
                    a0:11:cf:78:28:8f:d3:b4:98:ce:75:98:9e:24:94:
                    3f:c0:ba:0c:76:fe:59:52:aa:57:4f:3d:46:f5:84:
                    a6:9e:e6:cd:08:a5:b2:99:81:98:c5:a1:50:15:fc:
                    cf:3c:97:1f:0f:b2:96:59:50:2b:e2:3b:1f:10:e5:
                    8e:4c:82:99:ad:26:43:11:99:fc:79:50:e8:4d:2e:
                    a4:e8:c1:b9:eb:b0:0d:ab:49:64:da:ad:d6:b4:5b:
                    ad:03:6c:99:f3:d4:7b:53:eb:ab:ff:bc:5e:af:93:
                    18:51:4e:ac:d3:a8:8a:fb:63:fc:31:1f:4f:ac:67:
                    29:10:fb:fc:dc:ba:55:65:0b:90:bd:4e:2b:36:29:
                    aa:c7:7f:94:34:87:d6:c5:9c:6f:3d:26:c9:5d:7a:
                    46:d3:2a:c4:a2:0d:02:01:2b:cc:ab:5c:86:ff:65:
                    92:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:92:36:04:65:CA:0E:24:FE:11:12:25:E7:9E:79:6E:49:A9:A9:AC
            X509v3 Authority Key Identifier:
                keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:be:7d:e5:26:44:7f:f2:e4:6a:25:e9:f1:0d:b3:75:dc:d8:
         b1:7b:96:15:fd:66:ec:e2:25:db:4d:3e:3c:34:50:47:41:cf:
         31:0f:93:c2:12:0f:18:bd:74:0a:cf:8d:b4:3a:49:06:7b:b0:
         3c:e2:f4:07:47:84:08:6e:10:3a:83:08:00:b5:32:84:18:2c:
         2c:a7:85:e4:d2:71:2a:48:92:bf:22:5a:ac:65:37:f4:6a:93:
         e2:6e:8f:3d:84:e4:21:85:68:b0:27:c1:96:13:ef:47:15:c1:
         90:1b:81:32:55:a0:6f:2c:8a:bb:8f:a9:29:e2:dc:d5:07:8e:
         a6:64:ca:c9:ce:2d:21:cb:96:3f:1d:01:2c:1b:4b:b1:0d:50:
         88:02:aa:90:dc:e4:e7:d3:30:70:a3:0b:ba:3d:4d:6f:2f:d3:
         bf:75:6e:e5:64:a5:60:b4:3b:e9:fe:32:c9:84:21:e3:7a:5f:
         a0:66:02:94:c8:2e:b0:5c:af:b1:12:00:01:7c:18:91:7c:48:
         75:72:6d:54:f5:99:51:50:d2:ff:41:bf:ac:ad:cb:89:97:a3:
         3a:22:c2:8c:0e:f5:7f:a7:72:8c:0b:fe:4d:92:47:d6:b8:fd:
         0b:93:74:87:2e:1e:7f:d8:d2:df:9d:c6:18:bc:56:a4:1f:35:
         4b:f2:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:58 2026 by rpki-client