Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          UClzbvCIoE0yYEXx3S2LlK3YEauKy63UhQcULRzJSkU=
Subject key identifier:   C1:32:22:3D:C2:39:3B:A7:70:CB:0D:59:D2:9F:95:8B:89:B1:B5:45
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       019E1E354F371779001BE32ACA928AA4EB1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          13E4
Signing time:             Tue 12 May 2026 22:01:10 +0000
Manifest this update:     Tue 12 May 2026 22:01:10 +0000
Manifest next update:     Wed 13 May 2026 22:01:10 +0000
Files and hashes:         1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: 5NApeiYiyDpI0PS6ZKkJAx/oyd+ij/9YBekjXQUYq6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:4f:37:17:79:00:1b:e3:2a:ca:92:8a:a4:eb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: May 12 22:01:10 2026 GMT
            Not After : May 13 22:01:10 2026 GMT
        Subject: CN=c132223dc2393ba770cb0d59d29f958b89b1b545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:43:f4:de:d2:0f:70:5a:45:96:2e:08:63:80:
                    5d:fe:68:0e:93:ce:5a:8a:50:b9:ba:fd:67:bd:b7:
                    20:67:4f:1f:a4:84:a4:92:d5:2e:6b:74:74:cf:28:
                    65:57:d0:27:94:4d:bf:7a:d6:57:21:fd:7c:c9:77:
                    8e:69:c3:0b:04:89:d2:5a:6a:12:90:ba:11:31:4c:
                    f8:a7:bf:45:f6:9d:fe:fa:eb:1f:bf:7f:6c:86:31:
                    bf:34:29:7f:6d:e8:bb:a8:df:03:11:17:a9:b4:e6:
                    3c:13:87:d7:93:2d:87:23:eb:4d:9f:2c:3d:19:8a:
                    a0:51:a2:e7:db:28:9e:27:d3:ce:96:a9:ec:27:53:
                    03:1e:0f:ad:6f:fb:bc:31:ed:82:0e:3f:ad:fd:f1:
                    d1:1b:a7:90:03:cf:55:7c:3d:44:cc:98:c7:6b:b9:
                    74:4a:a1:0e:a8:5b:62:b1:f2:31:9c:f3:cd:da:06:
                    6e:6b:8a:4e:0c:d0:9f:af:ce:57:d9:34:06:bf:0d:
                    eb:9e:c0:6d:e9:80:bd:10:50:0a:1a:da:9b:02:85:
                    5d:d1:d5:19:a3:88:b2:00:f6:5e:41:8f:4b:4a:bf:
                    31:ce:62:12:e2:69:03:ff:06:f8:53:ed:d7:f5:49:
                    ee:88:15:98:4d:15:97:60:c6:95:40:8c:b2:0d:54:
                    fb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:32:22:3D:C2:39:3B:A7:70:CB:0D:59:D2:9F:95:8B:89:B1:B5:45
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:b6:7b:ab:1f:40:d3:ac:cb:57:50:d5:d3:0c:f6:3a:b5:
         3b:28:36:73:13:ff:18:2d:aa:9d:9b:af:bc:34:58:9a:db:f1:
         e5:a9:8e:8c:ad:73:ad:9a:57:e3:a4:66:90:e5:4a:6f:70:e7:
         d9:80:7b:0b:d7:8a:c9:2b:33:0d:1a:d7:45:d1:99:e1:e3:5e:
         9a:fc:2c:4e:bc:dd:45:40:d1:75:b0:9b:d0:d0:e5:eb:f8:bf:
         2f:64:5a:94:b9:be:ae:60:77:a2:42:6e:e2:c4:fa:de:95:d0:
         67:4d:47:8e:46:fc:46:eb:48:1f:51:6a:95:b7:cc:11:74:10:
         6a:c1:66:98:71:52:0c:1c:ca:05:47:a2:b0:66:bb:05:90:e5:
         f8:99:05:cf:6f:af:4c:9d:16:e4:4e:8c:1e:16:70:3b:6b:fe:
         cb:03:0b:34:30:82:a7:13:73:f0:32:fb:57:f1:45:15:a9:01:
         ed:e5:fc:cc:05:17:88:d2:21:26:c3:52:04:ea:08:5d:3d:4a:
         9e:76:41:96:a2:e8:f7:6d:24:d7:cd:07:d0:cf:85:cd:a6:36:
         9d:cd:32:73:34:d1:8c:2f:d8:96:6c:01:bc:3f:d1:4b:71:0e:
         a1:e6:10:11:ea:99:d1:df:88:25:83:89:e5:35:ba:ce:10:64:
         79:00:7c:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNU83F3kAG+MqypKKpOsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzYxNjM2NTY5M2ZiNjUwMmNiNGQ2ODdiYjY2NzQ3YjFh
MmZkNzQwHhcNMjYwNTEyMjIwMTEwWhcNMjYwNTEzMjIwMTEwWjAzMTEwLwYDVQQD
EyhjMTMyMjIzZGMyMzkzYmE3NzBjYjBkNTlkMjlmOTU4Yjg5YjFiNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UP03tIPcFpFli4IY4Bd/mgOk85a
ilC5uv1nvbcgZ08fpISkktUua3R0zyhlV9AnlE2/etZXIf18yXeOacMLBInSWmoS
kLoRMUz4p79F9p3++usfv39shjG/NCl/bei7qN8DEReptOY8E4fXky2HI+tNnyw9
GYqgUaLn2yieJ9POlqnsJ1MDHg+tb/u8Me2CDj+t/fHRG6eQA89VfD1EzJjHa7l0
SqEOqFtisfIxnPPN2gZua4pODNCfr85X2TQGvw3rnsBt6YC9EFAKGtqbAoVd0dUZ
o4iyAPZeQY9LSr8xzmIS4mkD/wb4U+3X9UnuiBWYTRWXYMaVQIyyDVT7bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEyIj3COTuncMsNWdKflYuJsbVFMB8GA1UdIwQY
MBaAFKk2FjZWk/tlAstNaHu2Z0exov10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMt
MDkxMjk4NzJlMTQzLzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMtMDkxMjk4NzJlMTQz
LzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9e2e6sf
QNOsy1dQ1dMM9jq1Oyg2cxP/GC2qnZuvvDRYmtvx5amOjK1zrZpX46RmkOVKb3Dn
2YB7C9eKySszDRrXRdGZ4eNemvwsTrzdRUDRdbCb0NDl6/i/L2RalLm+rmB3okJu
4sT63pXQZ01Hjkb8RutIH1FqlbfMEXQQasFmmHFSDBzKBUeisGa7BZDl+JkFz2+v
TJ0W5E6MHhZwO2v+ywMLNDCCpxNz8DL7V/FFFakB7eX8zAUXiNIhJsNSBOoIXT1K
nnZBlqLo920k180H0M+FzaY2nc0yczTRjC/YlmwBvD/RS3EOoeYQEeqZ0d+IJYOJ
5TW6zhBkeQB8kw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:11:07 2026 by rpki-client