Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          84F4d4e0qeq5OCwCogGwDRdBhuKYNtwWdqOupybCfkE=
Subject key identifier:   A7:CD:F5:96:1B:8C:45:86:96:16:C3:0A:1E:9F:32:06:E3:22:EC:3A
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       019E20916A555027CCC594B3622588E56573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          1899
Signing time:             Wed 13 May 2026 09:01:01 +0000
Manifest this update:     Wed 13 May 2026 09:01:01 +0000
Manifest next update:     Thu 14 May 2026 09:01:01 +0000
Files and hashes:         1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=)
                          2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: KPgOxQOHO92gGckfbyEr1LGgRjVkDAweIfSlbLqqKA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:6a:55:50:27:cc:c5:94:b3:62:25:88:e5:65:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: May 13 09:01:01 2026 GMT
            Not After : May 14 09:01:01 2026 GMT
        Subject: CN=a7cdf5961b8c45869616c30a1e9f3206e322ec3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:99:24:9c:47:39:0b:86:b2:5b:39:9c:db:
                    84:98:d3:2f:2d:ae:b4:98:14:41:8a:66:5c:ed:91:
                    3c:65:62:f5:a7:6e:47:56:39:fe:ad:e7:07:79:3d:
                    38:4e:8b:10:6f:3c:b6:4d:4a:63:ba:25:17:52:fd:
                    8b:9c:70:00:23:81:d1:47:36:c9:13:57:d3:87:2d:
                    46:44:56:77:76:c3:99:44:d4:b9:95:b6:a8:49:71:
                    73:de:ba:61:d8:42:0c:b5:55:7c:12:7c:77:1e:73:
                    ad:6d:3f:ba:5e:a5:5f:c1:24:01:f1:96:27:73:c6:
                    ff:75:e4:9b:47:93:7b:b6:4c:72:76:c1:5a:c4:14:
                    12:ba:5f:6a:98:cd:7a:16:ec:d0:53:58:d6:13:9e:
                    76:d3:6b:88:36:ae:e5:bb:5b:3f:00:9d:4f:0e:ba:
                    89:51:15:39:af:5b:f8:c3:57:ed:bd:dd:c9:d1:54:
                    18:a8:84:77:fa:c9:fd:6c:1f:dc:42:35:df:c2:3b:
                    98:b8:92:2b:73:0d:e0:35:8f:dd:cc:94:d3:30:72:
                    a2:d8:72:26:59:8f:67:59:e1:8d:f3:ad:f1:7c:45:
                    0f:d3:c7:03:70:1d:c5:3e:f7:d0:95:cb:22:63:ac:
                    25:d5:31:82:4c:33:41:a5:b7:82:35:7f:89:94:d2:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CD:F5:96:1B:8C:45:86:96:16:C3:0A:1E:9F:32:06:E3:22:EC:3A
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:cd:1c:90:7d:59:d3:f2:41:f6:ad:c9:a1:a3:9c:16:54:
         46:81:57:5c:fb:b9:8e:ba:a0:59:aa:69:0f:7b:67:b8:b9:a4:
         08:bc:9d:5c:3f:68:2e:bb:2e:43:76:c3:4b:85:3f:5a:a1:ba:
         f3:46:89:84:f0:65:62:b5:0f:0d:9b:ee:31:53:87:42:7d:66:
         2f:8d:13:fb:df:a6:a3:cf:04:a7:5a:ef:d7:0f:f8:42:dc:b7:
         63:a7:74:31:c1:a9:46:54:1b:62:a1:7f:9b:0f:b5:bc:24:a8:
         23:aa:ae:b8:4f:1c:ba:44:98:53:55:61:18:40:6b:82:f0:b7:
         5e:dc:5c:50:7d:91:b0:32:61:7b:8b:13:d8:10:55:7d:32:a2:
         a6:bc:8c:7b:90:ad:53:a3:b7:4f:6d:63:67:46:3c:de:72:63:
         4c:25:2a:47:49:2e:80:c5:25:ed:f3:55:b0:81:92:48:cc:60:
         22:89:78:5f:ec:84:3f:59:8f:fd:fb:ae:b8:30:9d:e1:c4:21:
         d8:da:ae:6c:34:0d:c7:55:f5:21:8d:71:97:82:52:15:af:96:
         05:44:76:eb:56:08:76:a2:c3:e5:e8:ec:91:d7:59:76:6a:ce:
         3a:5e:c0:cb:aa:42:73:66:7d:8c:1a:94:fd:46:3f:98:41:3d:
         6c:e8:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:55:30 2026 by rpki-client