Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File:                     QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier:          JoNebUcB4No6jIMvtEtsAopNUhJMNftEGSFaBKXtIb8=
Subject key identifier:   06:0D:46:EA:FB:A9:82:B4:40:B9:E5:29:75:4F:AB:53:72:21:FF:F1
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer:       /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial:       019E1C7D75AD96A27FB318F636725E091A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number:          0751
Signing time:             Tue 12 May 2026 14:00:44 +0000
Manifest this update:     Tue 12 May 2026 14:00:44 +0000
Manifest next update:     Wed 13 May 2026 14:00:44 +0000
Files and hashes:         1: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: q3kk13lZlzey3xYaPKi1wKMQ88ryO5pkwkw+PO3KBrY=)
                          2: VV6hLMuA5FAt5lW025-WXEyo20U.roa (hash: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:75:ad:96:a2:7f:b3:18:f6:36:72:5e:09:1a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
        Validity
            Not Before: May 12 14:00:44 2026 GMT
            Not After : May 13 14:00:44 2026 GMT
        Subject: CN=060d46eafba982b440b9e529754fab537221fff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:38:eb:d2:a9:5e:7c:6d:02:07:4e:af:44:
                    d4:9c:7a:83:d5:06:b6:a2:4a:ca:f4:fb:60:27:c0:
                    de:62:35:bc:d3:3c:fd:01:f6:8b:14:a2:14:46:d4:
                    3c:24:89:71:0e:50:d6:d0:f7:19:a9:ff:25:dc:05:
                    1d:07:cd:0c:87:89:b8:54:18:87:71:20:f2:34:1f:
                    00:c3:ed:41:10:93:ae:ad:91:e7:d9:a1:8c:7b:a6:
                    b1:4e:29:76:7b:60:3c:c9:bd:70:42:93:6f:17:6b:
                    86:8d:2b:31:ee:4e:ca:1d:c8:dd:77:88:8a:27:c8:
                    80:fa:bf:7d:5e:d9:fb:f0:3c:c6:1b:29:1d:88:b4:
                    24:f7:34:88:b4:53:11:72:ea:d0:49:2f:3d:a0:40:
                    45:62:c6:f5:44:42:d0:b5:3a:8d:6d:0c:b6:a4:b7:
                    c2:e9:6c:15:32:0d:16:c1:54:02:4d:d6:38:27:9b:
                    90:10:23:88:2c:88:ac:96:ab:9b:90:21:da:4d:64:
                    75:ce:c4:29:c9:f9:8b:12:c9:16:af:aa:b7:1e:fe:
                    5a:32:50:32:19:4e:4e:da:d6:07:33:c9:ab:fe:98:
                    4c:b0:79:5e:30:88:8f:7f:c5:55:df:0d:db:08:a9:
                    24:b8:b7:e2:6c:8b:9d:92:9d:e2:d3:d0:a9:4c:4d:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:46:EA:FB:A9:82:B4:40:B9:E5:29:75:4F:AB:53:72:21:FF:F1
            X509v3 Authority Key Identifier:
                keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:07:7f:1a:ed:aa:6a:6c:bf:18:5b:a4:15:30:a7:7e:22:e5:
         ce:b9:cf:34:07:60:54:90:9e:8a:4b:bf:2d:95:c7:ab:04:d7:
         e9:c5:79:81:87:f7:71:fd:9f:65:7d:f9:7f:f0:86:9d:a8:fa:
         38:4c:dd:33:21:5b:8f:84:99:c8:99:f1:0c:75:72:bf:7c:ce:
         5b:fa:4c:ea:6d:03:e7:b7:c2:eb:f0:e1:f1:a4:a1:8c:36:f5:
         1b:58:a0:28:15:1e:86:44:36:9a:d3:9c:d1:8f:fb:4c:1b:21:
         96:d0:45:2f:1b:f2:13:ed:1d:e6:32:60:e2:d5:10:5b:f6:e6:
         72:f6:f0:46:dc:66:a8:d4:74:f9:46:6b:d6:43:df:55:15:31:
         f7:02:59:78:77:93:9b:5e:35:81:21:7f:61:33:f2:f3:ff:04:
         c3:0c:3e:b2:c2:b8:ca:64:70:47:0e:88:29:28:9f:e8:e1:f4:
         28:7d:e8:7f:1c:5f:94:7a:b2:f5:df:71:78:74:f6:48:1e:e4:
         81:f8:05:91:e9:70:9c:4a:37:46:03:eb:eb:c9:92:13:c8:13:
         72:7a:f3:35:63:fe:c2:d4:31:1f:6a:cc:31:2a:20:98:5e:0e:
         80:0b:32:da:be:b9:f1:7f:46:a3:f6:38:42:d4:d7:3b:ae:85:
         79:7e:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:21 2026 by rpki-client