Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
File:                     QhuumJiY2UAkJKra-7R8Om1MJbM.mft (raw, json)
Hash identifier:          lZ5vvvQ8qCfGgH+baF3LYGUQaQKtYd6FQv13REV1gME=
Subject key identifier:   AC:BD:CE:AC:25:C8:90:4C:89:07:F7:3F:FA:8F:45:D2:7F:7B:5E:10
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Certificate issuer:       /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial:       019E1D900F5A00E2D3953E9461DFD578FEE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
Manifest number:          1912
Signing time:             Tue 12 May 2026 19:00:40 +0000
Manifest this update:     Tue 12 May 2026 19:00:40 +0000
Manifest next update:     Wed 13 May 2026 19:00:40 +0000
Files and hashes:         1: 5u7ZZD9lOFoFzJauPRF9LoR4JqU.roa (hash: 6383aOZyG4GruUyJbTAEn/2+zHT/N7r0tO3vmVgZ0+Q=)
                          2: NJO_Y8Rmad7gmCoQl4EFdeb0puI.roa (hash: PeV4K+XBlCAlY87jlA0oZLozJmq4/8N/ed2usUmq5JY=)
                          3: NOncOo0ID7OFhBxkxahXCWMkSks.roa (hash: eW58ef5cup8x8SSubU4LarAJsD4cHKXH22VsKckNWME=)
                          4: QhuumJiY2UAkJKra-7R8Om1MJbM.crl (hash: dRpbwZpx3Agl/yctB6IbP9HAjwaLKVsQpaUAeyz7Bz8=)
                          5: QxEip3wlOXriAz7nnAs_AC0I9NA.asa (hash: iXtb4Nzk+e2nFY3GJNhD9F09a2bTSvaIp01d/mdO65Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:0f:5a:00:e2:d3:95:3e:94:61:df:d5:78:fe:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
        Validity
            Not Before: May 12 19:00:40 2026 GMT
            Not After : May 13 19:00:40 2026 GMT
        Subject: CN=acbdceac25c8904c8907f73ffa8f45d27f7b5e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:40:49:9c:92:85:01:c7:cd:b0:de:27:02:
                    7f:23:e9:50:ea:7f:e1:ef:02:19:46:14:1b:1e:d5:
                    21:58:23:ca:43:a3:88:d7:08:5a:8f:46:0b:fc:ce:
                    2c:b7:08:9b:61:b4:7b:25:c9:60:5c:94:8c:12:c7:
                    6f:35:84:af:8f:ff:d6:f1:a8:71:68:f5:2d:4a:17:
                    b6:0f:14:a7:b2:6b:5d:15:6f:98:93:4b:36:27:6d:
                    30:73:b8:5b:85:5d:99:57:0f:a8:1f:c4:74:cf:91:
                    a8:61:3f:6a:44:7f:61:f3:42:e0:56:17:13:44:80:
                    1c:c1:49:40:4e:7e:be:d2:17:98:4a:a5:51:7a:12:
                    bc:1f:c2:20:16:2c:3f:52:d8:82:6b:c9:ec:6f:b9:
                    96:f7:5b:55:7d:bd:32:d9:b6:4c:51:33:73:f1:49:
                    ce:9a:e9:9e:87:84:5e:db:05:0f:38:6f:ab:08:4a:
                    d2:5c:b6:93:64:40:07:fa:12:66:2e:b3:81:27:0b:
                    66:ed:b6:68:68:81:d0:4f:92:f5:12:50:f2:88:86:
                    2d:e8:90:f2:52:00:04:e9:de:26:ee:9f:4b:53:b7:
                    6d:4b:af:b5:ee:b4:9c:52:7a:72:6d:e1:56:d5:9b:
                    f3:0b:38:8d:d7:05:9d:3e:4b:92:02:b0:d8:84:c6:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BD:CE:AC:25:C8:90:4C:89:07:F7:3F:FA:8F:45:D2:7F:7B:5E:10
            X509v3 Authority Key Identifier:
                keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:06:e8:4a:9c:6e:81:97:cf:8a:86:0e:db:dc:f0:f7:36:d5:
         04:fa:0a:a2:44:89:4d:df:86:ed:2b:b8:1f:b4:bd:4a:5d:91:
         27:f0:f3:d0:0e:82:bd:48:c4:65:96:4d:66:a9:fb:0b:62:98:
         ea:f3:6d:77:2c:90:09:62:ab:a9:2b:28:4b:e8:2a:c5:e5:f9:
         ab:1d:1c:85:77:74:c1:e7:68:b8:2e:09:3a:bb:0b:b3:26:7c:
         32:b9:20:00:e1:57:e7:b3:2f:7f:7a:3c:5b:1e:4d:3e:de:da:
         8d:da:a2:39:02:02:29:cd:b9:03:9c:5a:fb:9b:27:aa:66:83:
         b2:42:fd:6d:4b:1d:f7:0b:43:78:da:7a:50:e5:e8:47:64:a7:
         14:31:3e:dc:c1:3c:2b:76:d8:68:75:16:d4:08:e8:2f:20:f0:
         56:30:2d:80:11:21:89:81:ab:7f:21:b6:90:38:b0:19:68:c4:
         82:7b:92:96:a4:6e:a9:8c:9e:08:8f:1b:c2:55:83:24:32:97:
         94:22:89:a1:ff:87:83:60:2e:86:8d:55:be:e6:45:86:64:30:
         c0:3a:9d:0f:c7:2a:c1:d5:a4:f3:14:f7:3d:5e:97:b2:90:55:
         89:f6:2c:24:84:5e:20:52:82:39:ad:a8:be:c4:c6:7e:96:db:
         f3:27:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:09 2026 by rpki-client