Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File:                     Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier:          tBcAWACdJJrTt3bcixsFK4T3E6yWuZdrlywe2rSNesQ=
Subject key identifier:   ED:67:A6:E0:A7:20:6E:A7:3D:4C:8C:22:7F:FB:13:CA:81:06:9A:95
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer:       /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial:       019E1EA3857291C47E591EE1A4042D58F9E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number:          178F
Signing time:             Wed 13 May 2026 00:01:33 +0000
Manifest this update:     Wed 13 May 2026 00:01:33 +0000
Manifest next update:     Thu 14 May 2026 00:01:33 +0000
Files and hashes:         1: 6E7-9daevK2MkkP9J_irNaIbJPM.roa (hash: nqBQWE4qRj5lWqiwp2QfZYIRYl9NsKmCq2MDZGildvE=)
                          2: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: TpgxemQu6bAgrwQsmm15UAGCp4aA+vgjI5t9c2jwoYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:85:72:91:c4:7e:59:1e:e1:a4:04:2d:58:f9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
        Validity
            Not Before: May 13 00:01:33 2026 GMT
            Not After : May 14 00:01:33 2026 GMT
        Subject: CN=ed67a6e0a7206ea73d4c8c227ffb13ca81069a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:0c:59:36:9f:6a:66:50:a1:43:13:bf:de:
                    7f:1b:2b:9e:38:c2:98:16:cc:05:d6:56:16:19:4d:
                    4f:34:25:62:89:bb:3f:ac:83:e0:43:6b:84:44:b0:
                    06:42:2b:ec:91:4a:d8:54:73:c2:2c:6f:c6:79:19:
                    d2:25:c7:ad:32:fa:4f:7b:aa:8f:5f:43:41:25:d4:
                    fd:72:aa:18:f2:2d:bd:02:6e:d0:98:f6:84:ac:f6:
                    d4:98:71:3a:62:d9:4c:29:8a:f3:90:91:e7:11:5e:
                    5a:cc:a8:68:1e:99:7f:50:08:15:1f:57:b0:29:72:
                    23:c6:1d:9e:8c:ad:6c:ec:8a:05:30:ff:0e:59:b9:
                    72:dc:fe:8d:02:82:d6:0e:01:17:51:e7:e1:b1:e7:
                    e7:0c:66:9b:e3:21:5b:7b:c1:40:dd:6c:8a:35:2c:
                    37:d0:7f:f8:d8:d9:5c:04:e9:93:db:b0:ad:22:f7:
                    47:45:68:d9:7d:6f:ad:14:6d:25:a5:9a:78:5b:42:
                    43:0a:da:8e:6c:e2:b9:7d:52:6a:76:3f:47:a0:7c:
                    b9:ac:c6:09:99:c1:70:cb:cc:87:ee:a6:8c:00:91:
                    c2:cb:d2:4d:4a:73:f0:f7:cb:02:a7:a3:56:ec:a9:
                    6f:0d:4d:d0:be:b2:5c:8b:60:2f:a5:e9:11:8c:94:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:67:A6:E0:A7:20:6E:A7:3D:4C:8C:22:7F:FB:13:CA:81:06:9A:95
            X509v3 Authority Key Identifier:
                keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d4:83:4d:83:93:c1:4e:af:fa:99:15:46:7d:bc:86:ed:5b:
         60:1f:c9:69:8d:25:99:eb:28:9d:bc:d4:14:b4:75:ee:c4:82:
         c3:14:09:a1:23:44:1c:83:62:21:6c:15:0a:74:7f:8f:06:dd:
         ce:23:1e:4e:a9:7d:46:a1:82:ce:d8:b0:b6:1e:80:4b:7d:e2:
         91:44:70:8e:fa:37:31:d4:5e:5f:27:8e:6e:bd:14:33:c7:f9:
         31:01:1b:45:8d:08:99:ae:f9:b2:2e:33:e2:7c:5b:07:a4:6a:
         b1:9a:21:4e:df:8f:06:17:cd:19:ce:ca:65:25:1a:1b:2b:db:
         63:41:42:a8:4a:f1:7e:cd:f9:bf:72:96:7c:c7:e6:03:8b:cf:
         b8:a9:bb:c4:ae:f3:dd:61:de:70:47:79:02:d1:aa:4c:5b:1d:
         24:46:14:58:d9:1b:4d:2e:60:72:3d:57:e5:03:54:84:1c:4a:
         cc:00:55:01:b8:a2:ca:54:4c:01:da:db:79:05:e5:60:1a:f3:
         b9:ae:97:aa:4c:1d:5c:d5:3a:60:d7:dd:6a:14:4c:67:c0:5a:
         7f:fd:a6:b0:df:00:3a:07:f4:f7:fe:7b:4d:f7:6c:aa:b7:2c:
         26:69:0b:5c:a0:0d:e7:5b:37:57:25:c0:35:9e:75:61:c8:21:
         cb:eb:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:57 2026 by rpki-client