Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File:                     Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier:          vhrjgnlBDdK+wfB+uGNpmAEOriFklMl/fNwsPJXZm0c=
Subject key identifier:   03:4B:C2:50:EE:13:37:1E:CB:06:FF:83:03:FF:5E:10:D9:36:EB:B7
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer:       /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial:       019E21DB102263F61B645160A3479672C5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number:          0B1B
Signing time:             Wed 13 May 2026 15:01:05 +0000
Manifest this update:     Wed 13 May 2026 15:01:05 +0000
Manifest next update:     Thu 14 May 2026 15:01:05 +0000
Files and hashes:         1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: 8UKTocvxfgSfuNHpsgZ0Js/AKj7I+oAyp+VadmKnQyE=)
                          2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:db:10:22:63:f6:1b:64:51:60:a3:47:96:72:c5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
        Validity
            Not Before: May 13 15:01:05 2026 GMT
            Not After : May 14 15:01:05 2026 GMT
        Subject: CN=034bc250ee13371ecb06ff8303ff5e10d936ebb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1a:2a:65:42:9c:ce:a4:2c:f3:0e:9a:81:87:
                    25:50:e9:30:c9:51:4a:94:f1:64:31:e1:e6:12:d7:
                    d5:b7:7d:f1:fd:43:ea:68:f2:dd:a3:48:4c:bb:c6:
                    75:c8:35:b6:ea:86:cd:8e:bd:c8:4f:5a:88:d0:6d:
                    7d:60:54:3b:e1:81:69:d0:c1:3d:59:e8:84:1b:49:
                    0b:eb:2d:39:6d:b1:9c:44:1b:01:15:bc:7d:a3:13:
                    55:d9:ea:c8:75:1b:29:17:ec:c2:09:88:ee:e8:d0:
                    34:2f:b2:2d:65:a9:33:b1:e8:9b:b0:7e:cb:f7:e2:
                    a0:8f:41:e6:46:6c:92:3b:1f:ba:80:63:bc:b7:ef:
                    92:7a:19:27:59:cb:f8:70:43:e6:9e:90:62:da:d0:
                    df:03:f9:39:b9:c8:1d:c0:a9:af:72:15:36:d7:9c:
                    ad:7d:3f:f5:69:67:22:3b:87:49:9e:10:47:57:e3:
                    e7:d6:9e:dd:4d:1d:df:5f:71:32:56:d4:ff:6d:2f:
                    3b:74:d4:cc:fd:81:6e:57:38:9f:66:ce:26:4a:54:
                    ca:65:8a:44:a3:c0:1e:6d:f7:b2:bf:6d:5d:5b:c5:
                    95:b6:bc:61:63:95:ca:53:74:87:27:67:83:47:c6:
                    e9:8a:e9:d0:aa:d6:a7:96:cd:44:2a:02:de:70:87:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:C2:50:EE:13:37:1E:CB:06:FF:83:03:FF:5E:10:D9:36:EB:B7
            X509v3 Authority Key Identifier:
                keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:22:66:97:ad:3f:1b:cd:e2:a0:36:7a:54:e8:1a:2a:bf:cf:
         b1:9f:6c:aa:1f:68:5c:12:74:14:dc:38:3a:eb:98:8e:b7:f2:
         98:35:a9:f2:f9:1e:bf:a4:71:2c:42:74:9f:6c:35:a0:ae:c4:
         35:a1:24:e9:28:d4:41:10:3c:f3:e8:a2:4f:02:bd:cb:91:60:
         04:7f:5d:47:b3:3e:d3:37:c0:6b:b4:af:c5:0e:d9:80:dc:56:
         5e:5c:d2:77:e5:59:0a:6c:6c:98:59:e1:51:cd:4f:ad:38:04:
         a2:a1:d3:0e:8c:39:77:ec:03:c3:b9:be:44:63:27:37:bd:00:
         ba:2a:5b:96:ae:24:03:6b:65:0c:9a:96:b4:ac:60:fe:4f:c2:
         1e:eb:d7:f4:e4:e4:fd:7a:5d:73:45:35:d6:31:16:d6:da:7d:
         63:c1:4b:8b:f3:6a:43:51:50:00:1d:30:79:5b:2d:c6:4e:99:
         ed:e6:54:ce:40:35:4d:93:38:ec:de:bd:5a:a7:e5:9d:1b:56:
         a3:69:f9:3c:de:83:be:29:75:a6:f8:1f:49:d7:d9:be:2e:34:
         cb:ef:20:13:23:f1:5c:6b:5a:11:e4:c1:1c:91:90:5d:fa:df:
         1a:5b:3c:d1:a6:b2:c8:a7:e2:4b:ff:3c:7f:ae:77:a7:bf:78:
         ac:55:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:48:57 2026 by rpki-client