Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File:                     QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier:          qrvlhRyOoRb4PIhzRakjQu2SrhL2JZa1/HuCQ/1aoo4=
Subject key identifier:   44:C7:D0:36:65:1B:A4:FA:0B:65:2D:3D:85:DB:7E:47:4B:58:91:7C
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer:       /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial:       019E1E6C502376F6D74CF2B9895DF7E2C862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 23:01:15 +0000
Manifest this update:     Tue 12 May 2026 23:01:15 +0000
Manifest next update:     Wed 13 May 2026 23:01:15 +0000
Files and hashes:         1: 9talkSrwDgnaCxDO4CeVrwCobYU.roa (hash: YP25gB5idoPvdLAQ6DcYcc8fU/wCBS3MFRk7Mh6hG84=)
                          2: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: 7KyAME9D3fvjuZKpv5H1K0Qi5QqP03SqyH2zSs9/mlE=)
                          3: pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa (hash: lD1kQU1t2awKdohr2NZ+PC7BmU3yOJRyp13CGfdz+Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:50:23:76:f6:d7:4c:f2:b9:89:5d:f7:e2:c8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
        Validity
            Not Before: May 12 23:01:15 2026 GMT
            Not After : May 13 23:01:15 2026 GMT
        Subject: CN=44c7d036651ba4fa0b652d3d85db7e474b58917c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:e2:05:e7:2f:9c:44:81:65:eb:a7:7b:be:
                    49:33:10:d3:d9:f5:7e:10:32:eb:53:e7:6e:8f:d2:
                    79:89:f4:13:03:f2:98:57:9d:33:ae:a3:4a:59:de:
                    bc:bf:31:94:40:71:52:85:67:58:63:51:6e:69:30:
                    b9:dd:4b:8f:cf:e1:c6:2e:95:1d:20:4b:de:40:36:
                    64:7b:9d:33:61:5c:42:c4:16:02:61:19:26:05:a0:
                    e0:18:59:3a:1d:d3:26:2d:db:89:b6:96:35:f8:76:
                    18:38:a5:20:f4:90:7c:98:84:46:ff:a8:af:df:9a:
                    76:41:c8:ee:72:5c:80:63:c0:5d:15:0c:86:1b:1c:
                    2c:e0:2d:8a:4f:75:8a:bf:58:18:f8:84:72:fa:2d:
                    4a:e7:56:29:a9:b0:88:4d:7f:dc:88:ee:c4:38:f5:
                    55:70:2a:ab:eb:93:60:d1:62:ee:c5:b6:8f:29:fb:
                    59:63:ea:c4:e9:1c:60:58:e2:5b:5f:ce:ab:ce:5e:
                    3d:67:ed:2d:5a:58:a8:70:9c:85:a9:40:d9:1b:b5:
                    79:96:00:9b:28:47:7a:ef:7a:66:57:f8:88:5f:c7:
                    88:e0:52:48:9c:17:dd:df:31:9c:e5:35:87:db:bb:
                    c1:0c:8f:fc:97:a6:d8:a8:df:2c:01:f1:85:da:6d:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:D0:36:65:1B:A4:FA:0B:65:2D:3D:85:DB:7E:47:4B:58:91:7C
            X509v3 Authority Key Identifier:
                keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:40:dc:3b:59:c5:15:06:a3:2c:7b:56:19:0c:2b:fb:33:38:
         d9:87:9c:ff:9c:10:3f:87:af:1a:a0:b8:22:8e:d0:6d:f2:7c:
         20:f1:3c:d0:a7:04:10:14:33:a0:a9:e8:51:b5:5f:ce:e7:8c:
         84:60:da:9a:26:6d:62:d4:a5:3d:fc:54:e0:cc:e1:24:b2:6b:
         36:16:b9:02:b9:2f:ec:c2:c1:9b:9c:91:7c:e9:53:1a:10:87:
         93:0a:64:d5:7d:48:94:a4:58:57:20:3d:e0:0a:14:c0:50:49:
         12:f0:27:c1:c9:17:7a:67:71:da:92:db:9d:b7:57:0e:f1:67:
         38:86:96:73:4b:e1:be:03:52:22:15:e5:d3:0e:f0:83:f7:f0:
         0c:02:a3:e4:19:6a:78:3e:a8:4d:9d:0a:87:8f:1d:78:b2:5f:
         10:69:f9:93:ae:db:14:30:ff:05:1d:b1:1b:50:60:9c:41:67:
         ee:c8:1f:60:03:07:30:b3:37:0d:da:2c:87:fd:bf:12:ae:b4:
         07:52:97:97:95:a8:2c:a2:aa:c2:ca:ad:45:87:cd:ad:e7:50:
         44:a6:d2:08:a4:5e:5f:d3:20:e7:e4:87:3d:6e:31:a5:b4:af:
         78:a2:fa:0c:b7:9d:41:7a:fa:c2:ee:3d:4f:e0:1d:70:db:36:
         59:17:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:27:31 2026 by rpki-client