Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File:                     qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier:          Y/EruR0kguECe9F3JL6w86LVe5/4Mexf1GTbGDnAnzw=
Subject key identifier:   52:BC:9B:A8:CF:E0:79:54:65:7F:4C:96:41:07:A4:F7:C4:BC:2F:6B
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer:       /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial:       019E2091DBB127123F8D122333429BAF0902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number:          183C
Signing time:             Wed 13 May 2026 09:01:30 +0000
Manifest this update:     Wed 13 May 2026 09:01:30 +0000
Manifest next update:     Thu 14 May 2026 09:01:30 +0000
Files and hashes:         1: CitPrvEbL3mSkhY-h3ajKHpia-8.roa (hash: /+PG4/PPRJ0jxjBwjO3qbLw0M09UhMzUiGb+7CaKzGg=)
                          2: lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa (hash: ik5LzxvVAt9iL2/7h4zp/cur7V0L47uoz6AFvyo0fRE=)
                          3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: s2RIpB35HsEKVP8wLCCjwgJhyUvQoSp3SsP20xYI9bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:db:b1:27:12:3f:8d:12:23:33:42:9b:af:09:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
        Validity
            Not Before: May 13 09:01:30 2026 GMT
            Not After : May 14 09:01:30 2026 GMT
        Subject: CN=52bc9ba8cfe07954657f4c964107a4f7c4bc2f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:78:1a:89:59:af:4b:04:1f:60:6c:f3:e0:
                    95:09:1e:c2:d6:b3:f7:f0:30:cc:ff:03:7d:4f:9d:
                    8a:0b:f2:4a:5c:54:2e:ef:55:9e:8f:a2:35:33:78:
                    41:e8:5a:30:87:87:a2:7c:0b:9a:66:96:6a:ed:17:
                    89:6f:9e:de:31:a5:e2:e1:00:93:74:f5:b9:ad:c4:
                    27:77:6a:c9:95:81:4f:97:da:7e:e8:b4:fa:d0:02:
                    88:5d:51:33:a4:ce:96:79:ca:c5:b6:fa:31:3e:ec:
                    0d:7e:0d:b2:37:32:a0:57:f5:d6:56:c5:4f:18:e1:
                    a0:59:5d:0e:59:1a:28:5e:8c:5b:d5:3c:12:33:09:
                    33:d8:c1:4f:24:3f:59:bd:df:b3:84:62:db:2b:f2:
                    ae:af:0b:09:f3:5a:cc:66:c9:c4:a2:c2:34:25:57:
                    c0:bd:2c:fc:8f:5b:d9:a5:0e:2b:78:b1:3f:0e:b2:
                    75:45:75:15:57:6f:74:1a:1c:04:e1:24:11:bf:6a:
                    8e:4b:47:4d:6f:e8:3a:b3:21:78:42:6f:07:bc:f9:
                    fb:75:33:2c:ae:b2:e4:0f:da:c4:ac:72:f5:11:36:
                    fe:b6:02:97:7f:1d:8b:9d:0a:a7:1d:78:dd:3c:3e:
                    fd:ee:43:80:86:eb:18:ac:83:ca:b4:e3:2f:bc:7e:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:9B:A8:CF:E0:79:54:65:7F:4C:96:41:07:A4:F7:C4:BC:2F:6B
            X509v3 Authority Key Identifier:
                keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bb:7b:da:f0:5c:53:de:d5:61:30:0c:3a:e9:30:b9:0e:fe:
         06:d4:33:bf:55:be:e5:6b:fd:e8:b5:6c:4b:87:72:b1:4e:b4:
         04:aa:66:1a:ab:9d:46:32:1f:fe:7e:1c:62:d5:28:c7:0f:c6:
         b3:a2:18:9f:0e:cb:74:ff:b7:14:db:11:82:5d:ff:bc:41:01:
         30:13:91:f9:a9:4d:8d:7f:32:c6:0e:b1:b9:15:77:c9:54:4e:
         9f:23:4a:79:5c:cb:77:5c:fb:88:d3:b0:8d:a8:c5:b6:d1:f9:
         cd:81:1e:0f:34:35:c3:57:5f:82:1e:eb:68:6e:45:76:19:cd:
         2b:53:fc:e1:9d:55:0d:e8:e4:40:89:77:10:f2:54:ee:32:89:
         ba:69:f0:ae:49:4b:af:74:d6:62:be:67:ad:9c:18:2f:b9:93:
         74:df:d3:63:38:33:3b:55:0b:50:f6:02:a5:a3:7f:4c:37:93:
         d4:97:3e:8d:65:b2:1b:56:82:5f:d1:35:c6:69:96:28:37:71:
         22:1a:bd:0b:f8:ee:e2:9a:89:3a:be:7d:57:c8:8a:92:13:b5:
         be:da:1e:c8:f0:ac:19:b9:79:b7:02:db:1b:a6:08:cb:12:8f:
         50:b2:91:df:95:99:62:2a:4d:33:69:87:fb:6e:2b:8b:6d:08:
         58:3d:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:18 2026 by rpki-client