Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File:                     qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier:          16c6fA3TU6doP3lFzQxTAMCXsbzgAuL1bfXMruxV47k=
Subject key identifier:   31:33:98:72:8D:AD:15:BC:BF:1D:0B:CD:A1:36:74:A5:E6:5C:65:2F
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer:       /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial:       019E1F7E9401136D659DB1D189D8DDD95F00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number:          0D46
Signing time:             Wed 13 May 2026 04:00:49 +0000
Manifest this update:     Wed 13 May 2026 04:00:49 +0000
Manifest next update:     Thu 14 May 2026 04:00:49 +0000
Files and hashes:         1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=)
                          2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=)
                          3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=)
                          4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=)
                          5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: gwE1EUX0PXRUIWywaBtnjMTdT4quU8ADlAzKhfvr570=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:94:01:13:6d:65:9d:b1:d1:89:d8:dd:d9:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
        Validity
            Not Before: May 13 04:00:49 2026 GMT
            Not After : May 14 04:00:49 2026 GMT
        Subject: CN=313398728dad15bcbf1d0bcda13674a5e65c652f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:a7:29:76:5b:4a:16:31:6c:7d:0d:f0:23:
                    93:7a:95:67:36:64:51:5f:a9:60:81:71:a5:61:dd:
                    4e:35:7d:e6:6d:08:c5:dd:e6:a7:5a:9a:10:0b:37:
                    45:89:a7:e8:ba:84:b7:c3:20:e3:fa:bd:6b:10:49:
                    bc:1d:86:30:f7:bf:35:f6:3a:ca:5f:71:ef:59:44:
                    97:b1:f2:16:a3:f0:74:4b:e5:79:75:74:89:97:c4:
                    8c:39:54:ad:d4:f6:2b:c9:71:98:83:10:5a:f1:ca:
                    20:13:13:51:f0:fb:00:bc:fc:65:dc:52:51:d4:08:
                    dc:21:7a:8f:31:42:69:4e:d7:77:86:30:d1:a1:63:
                    02:fe:d3:e8:ea:67:d4:d2:21:4c:f8:04:03:46:20:
                    bc:78:dc:05:f1:73:71:52:41:6e:77:95:dd:b4:b8:
                    4f:1f:96:9a:68:29:b4:94:b5:be:81:09:3e:a2:0c:
                    d3:f6:2b:07:ac:4a:46:1a:35:d8:0f:62:47:3a:87:
                    33:e3:52:24:64:31:76:9f:70:59:0a:d4:9f:a6:f2:
                    f4:af:84:23:e5:9f:05:37:2d:da:a1:8e:93:0c:f9:
                    c7:94:e4:97:63:2b:0f:0a:88:b9:79:68:d0:31:0c:
                    af:a0:c0:95:85:2a:f4:ab:e9:c3:53:4e:97:7a:7c:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:33:98:72:8D:AD:15:BC:BF:1D:0B:CD:A1:36:74:A5:E6:5C:65:2F
            X509v3 Authority Key Identifier:
                keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ca:62:92:ef:67:09:95:5d:57:a8:72:1d:7c:75:19:7b:39:
         12:2a:d4:ec:65:eb:96:f4:60:48:90:ce:f8:33:3b:1c:dd:3e:
         bf:36:99:88:3c:9a:7b:9a:d3:33:a1:4d:73:08:01:44:48:71:
         93:9d:e0:72:54:99:11:50:21:0e:a1:16:b4:d8:6f:5d:ae:6a:
         4f:8c:59:c7:0f:4a:c6:a6:e3:44:f0:3f:b5:39:fc:4f:95:42:
         29:c6:52:e8:bd:1f:42:fc:50:29:95:52:3f:ea:e4:8e:2d:0f:
         fb:95:f8:e9:15:48:05:1b:d5:07:f1:b2:43:98:c6:a4:dd:bf:
         d7:c9:2f:22:1e:ab:31:54:65:eb:2f:fd:57:79:ea:cd:e1:95:
         b4:e2:dd:4e:cd:ca:70:00:da:fb:dc:9d:04:32:6b:02:d3:b7:
         ab:09:d3:83:20:38:92:6a:53:b2:da:06:17:87:77:89:72:6d:
         78:82:48:b7:c1:e6:f1:4d:69:69:f7:79:44:e5:46:2c:0d:b9:
         b9:44:c9:a0:18:b3:b6:5d:ad:a8:a9:91:4b:86:6b:38:9b:36:
         b7:be:39:7d:7d:bf:7d:1b:e7:98:36:d9:8a:45:87:e4:7a:14:
         24:b9:8e:99:4e:16:17:66:e5:86:02:dc:d1:fc:c7:0f:2f:18:
         d7:99:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:00 2026 by rpki-client