Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
File:                     Q16al_74NTuEg1I3YEaVLdoPq9g.mft (raw, json)
Hash identifier:          VyysMZk5fAmK0752dqQYkUdGhht1DKzbVJjyLg7oOGY=
Subject key identifier:   CA:49:84:70:26:AB:AC:71:84:80:E0:8A:BB:91:40:CC:0E:CA:72:A7
Authority key identifier: 43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
Certificate issuer:       /CN=435e9a97fef8353b848352376046952dda0fabd8
Certificate serial:       019E1E6C1FFD130256F490405080244AE48A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
Manifest number:          B4
Signing time:             Tue 12 May 2026 23:01:02 +0000
Manifest this update:     Tue 12 May 2026 23:01:02 +0000
Manifest next update:     Wed 13 May 2026 23:01:02 +0000
Files and hashes:         1: Q16al_74NTuEg1I3YEaVLdoPq9g.crl (hash: JSNUFiMUWWcbL9QmkaF2rbNMQO+zh/6zHn4jeclBrwc=)
                          2: RduyMfyksJPRmTJ2VbOncr1ISHw.asa (hash: sPtI1ZAFxfNcfl8vI1MZDw4ggabOlaCSkTfrWmOzLms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:1f:fd:13:02:56:f4:90:40:50:80:24:4a:e4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435e9a97fef8353b848352376046952dda0fabd8
        Validity
            Not Before: May 12 23:01:02 2026 GMT
            Not After : May 13 23:01:02 2026 GMT
        Subject: CN=ca49847026abac718480e08abb9140cc0eca72a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:c2:a0:27:8e:59:f1:29:bf:af:4e:ee:c4:
                    71:79:e2:83:99:c8:ff:7e:35:da:f6:46:a6:ca:e0:
                    fe:02:9c:02:37:da:62:04:25:69:1b:1f:1f:6e:ac:
                    0e:c9:50:84:e8:d3:d6:93:44:f6:75:a5:22:ac:f9:
                    ea:3d:8f:7a:1e:64:1a:42:67:bd:4c:f6:eb:0c:3f:
                    ab:da:7a:8d:f7:73:c9:77:a0:8c:c2:e0:5e:1f:a6:
                    d5:5b:fa:c9:3e:36:3f:e4:6a:59:7e:b9:77:96:2d:
                    7d:16:bc:c0:e0:91:19:e5:6d:91:98:0e:2a:cd:1c:
                    13:1c:03:02:54:92:73:9f:09:c4:c5:b7:ec:b1:39:
                    b8:aa:b4:0d:4a:a3:2d:b8:cd:5b:a0:84:f6:42:7f:
                    30:dd:ac:eb:78:29:73:98:55:af:99:bf:9f:41:79:
                    7b:bb:ce:b7:43:23:f4:73:07:94:9d:4f:81:cb:72:
                    46:04:04:d4:01:ac:1e:cc:18:0f:ad:7d:d3:d9:d3:
                    c1:d7:e2:46:3c:ba:8e:17:42:b6:02:5b:af:e9:93:
                    49:81:87:91:84:ab:c3:97:da:2f:8c:95:7e:b2:db:
                    7e:5b:8b:c6:ef:b5:a4:93:b8:51:5b:2d:86:eb:4d:
                    44:9c:e4:3f:3d:60:36:85:8a:24:d3:b1:a8:25:50:
                    09:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:49:84:70:26:AB:AC:71:84:80:E0:8A:BB:91:40:CC:0E:CA:72:A7
            X509v3 Authority Key Identifier:
                keyid:43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c4:55:d0:7d:51:a9:5a:e2:af:44:cb:a6:c3:d2:df:11:c0:
         f4:4e:d3:f8:6d:bf:48:67:0e:bb:51:62:6d:46:e0:83:32:cc:
         d4:d4:e7:c6:b1:37:85:e1:27:d7:ce:71:16:bc:11:c4:a4:ac:
         1f:a7:b5:4a:c9:63:ab:8f:ac:ff:58:e7:d5:7b:dd:d8:d1:0b:
         36:0f:13:96:b7:46:b5:ba:f8:93:55:0a:dc:03:f6:22:dc:05:
         e4:95:92:41:39:63:c2:f1:30:8f:43:2a:01:af:77:3f:17:ab:
         27:ab:c3:ac:fe:f5:78:87:bc:fa:a8:49:bd:b3:d2:15:f2:9f:
         3e:3d:16:65:4a:7c:49:bc:7b:e8:70:9b:02:77:85:0a:67:d2:
         36:a7:b9:34:d5:85:d0:ed:d3:49:b2:59:4e:26:41:0f:af:76:
         2f:99:75:eb:9a:fc:69:25:19:79:eb:ec:70:e0:a5:d8:68:77:
         ef:de:90:84:d5:a0:a3:07:1e:69:74:c5:a3:1f:81:2b:91:c1:
         58:80:02:68:e3:b0:03:aa:0b:8d:b0:fa:ad:42:19:e8:da:a8:
         b5:86:fe:a6:0c:17:c9:79:9b:93:bd:a9:41:48:a8:d7:66:b3:
         66:42:de:5b:4c:3b:99:4c:9a:6e:bd:29:8f:89:ff:fd:24:8e:
         e3:c0:56:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebB/9EwJW9JBAUIAkSuSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWU5YTk3ZmVmODM1M2I4NDgzNTIzNzYwNDY5NTJkZGEw
ZmFiZDgwHhcNMjYwNTEyMjMwMTAyWhcNMjYwNTEzMjMwMTAyWjAzMTEwLwYDVQQD
EyhjYTQ5ODQ3MDI2YWJhYzcxODQ4MGUwOGFiYjkxNDBjYzBlY2E3MmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw73CoCeOWfEpv69O7sRxeeKDmcj/
fjXa9kamyuD+ApwCN9piBCVpGx8fbqwOyVCE6NPWk0T2daUirPnqPY96HmQaQme9
TPbrDD+r2nqN93PJd6CMwuBeH6bVW/rJPjY/5GpZfrl3li19FrzA4JEZ5W2RmA4q
zRwTHAMCVJJznwnExbfssTm4qrQNSqMtuM1boIT2Qn8w3azreClzmFWvmb+fQXl7
u863QyP0cweUnU+By3JGBATUAawezBgPrX3T2dPB1+JGPLqOF0K2Aluv6ZNJgYeR
hKvDl9ovjJV+stt+W4vG77Wkk7hRWy2G601EnOQ/PWA2hYok07GoJVAJCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpJhHAmq6xxhIDgiruRQMwOynKnMB8GA1UdIwQY
MBaAFENempf++DU7hINSN2BGlS3aD6vYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTE2YWxfNzROVHVFZzFJM1lFYVZMZG9QcTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kMjc4MjYtMzgzOC00YzJiLWFmOTMt
ZTg2ODExMTIwYzE5LzEvUTE2YWxfNzROVHVFZzFJM1lFYVZMZG9QcTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kMjc4MjYtMzgzOC00YzJiLWFmOTMtZTg2ODExMTIwYzE5
LzEvUTE2YWxfNzROVHVFZzFJM1lFYVZMZG9QcTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsRV0H1R
qVrir0TLpsPS3xHA9E7T+G2/SGcOu1FibUbggzLM1NTnxrE3heEn185xFrwRxKSs
H6e1Ssljq4+s/1jn1Xvd2NELNg8TlrdGtbr4k1UK3AP2ItwF5JWSQTljwvEwj0Mq
Aa93PxerJ6vDrP71eIe8+qhJvbPSFfKfPj0WZUp8Sbx76HCbAneFCmfSNqe5NNWF
0O3TSbJZTiZBD692L5l165r8aSUZeevscOCl2Gh3796QhNWgowceaXTFox+BK5HB
WIACaOOwA6oLjbD6rUIZ6NqotYb+pgwXyXmbk72pQUio12azZkLeW0w7mUyabr0p
j4n//SSO48BWYg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:19:00 2026 by rpki-client