Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File:                     qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier:          DyCijSHIf/Syh1sizxq9L40MdL2Ayt3jDlfaHivsELo=
Subject key identifier:   CA:89:4C:06:93:10:5B:0A:D8:0F:9B:00:97:40:59:F2:B7:C6:05:1C
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer:       /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial:       019E1FB607F884E99C3A960CBD695661A51E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number:          1492
Signing time:             Wed 13 May 2026 05:01:23 +0000
Manifest this update:     Wed 13 May 2026 05:01:23 +0000
Manifest next update:     Thu 14 May 2026 05:01:23 +0000
Files and hashes:         1: gCXrBFLxOw6kqjD16CuMsL6zWgE.roa (hash: v9RU6FPgMI/ClMLp92GPHhi/v35/JkjC+Xjyrv6zdv8=)
                          2: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
                          3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: BcuV+uEWY+VjLPSwEJCyYgErmyMZiyqe9H79e1oHmq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b6:07:f8:84:e9:9c:3a:96:0c:bd:69:56:61:a5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
        Validity
            Not Before: May 13 05:01:23 2026 GMT
            Not After : May 14 05:01:23 2026 GMT
        Subject: CN=ca894c0693105b0ad80f9b00974059f2b7c6051c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:6b:12:23:a5:74:ea:5c:49:6d:cf:21:c6:
                    7e:7b:22:d9:5d:47:06:4f:bb:2e:80:1e:c2:a9:6b:
                    d2:36:eb:42:0e:a4:d7:d0:a9:c2:ca:1d:c2:dd:b7:
                    12:2e:d1:1b:4b:14:9b:f3:dd:e3:51:e5:1f:46:a0:
                    12:8f:e5:53:89:f0:a3:86:62:3c:37:83:72:8f:78:
                    09:15:e0:74:fc:06:72:ec:db:84:b7:1b:4c:e2:8a:
                    25:df:86:4c:4a:d6:1e:13:e5:f7:d2:7b:1d:8f:15:
                    c4:89:35:69:9d:7a:f3:27:63:e9:25:75:bc:4c:bc:
                    1d:8d:0a:35:30:14:c9:34:fc:36:73:5f:65:c7:10:
                    80:c1:4d:76:67:9f:cb:e3:15:1d:f2:1e:ce:8e:68:
                    91:f0:e2:55:8d:e0:64:43:8e:ad:68:4b:62:dc:91:
                    57:18:01:ff:03:71:af:ad:af:1d:3a:c8:ca:7a:9d:
                    d0:98:79:20:7b:31:11:d2:8a:f9:98:bd:e9:02:cc:
                    62:69:bb:43:84:39:33:61:b7:97:79:cb:bc:8a:42:
                    e4:85:ed:d1:20:b8:66:1a:00:48:37:6d:88:de:a2:
                    a7:55:56:9f:d7:56:55:d4:77:0a:1d:3c:b3:e5:0c:
                    cb:00:25:fd:d1:14:73:59:f5:e2:d6:87:89:b4:dd:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:89:4C:06:93:10:5B:0A:D8:0F:9B:00:97:40:59:F2:B7:C6:05:1C
            X509v3 Authority Key Identifier:
                keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:96:cb:e0:65:b9:60:bf:f9:2d:27:26:7d:3e:bc:4b:2e:db:
         ee:b5:3b:34:75:4c:dc:02:7c:c5:25:60:97:6b:76:fe:1f:62:
         f0:57:0b:0c:79:7e:cc:d8:ea:df:b6:75:63:1c:98:79:79:cf:
         86:7a:d8:82:f1:3a:f0:9d:bc:c7:e3:21:b0:99:d1:26:03:e7:
         c9:01:48:a3:0d:d6:1a:c0:bf:22:56:c7:72:2d:95:ea:0d:d7:
         3c:f4:14:8c:c3:b2:1f:9a:b4:c8:43:b5:76:54:76:11:e7:08:
         0d:a4:93:78:2d:e5:c8:3c:8c:04:9d:d5:62:bc:50:b3:d3:41:
         9a:80:47:9a:64:83:40:47:3e:fe:99:70:9a:92:e4:0c:17:65:
         10:d9:89:be:84:e1:39:36:66:8d:b0:a6:06:6e:26:2a:33:ef:
         40:8d:f5:fb:49:99:48:2e:8a:7a:35:3a:d7:23:44:83:0e:22:
         1a:40:97:23:e0:7d:e1:83:cd:6f:c9:a9:b2:2c:ba:6e:3b:ef:
         97:25:99:f2:a5:45:b1:1a:69:b9:6b:22:75:8d:53:cf:68:92:
         28:a1:86:53:b3:6c:c2:f8:e4:41:2b:88:a3:d5:52:5f:bf:a0:
         48:d2:fc:81:f6:ce:6e:b6:1e:49:ed:49:00:b0:1b:7a:0f:41:
         da:df:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:39 2026 by rpki-client