Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File:                     QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier:          qFf1bQKC2jSJVlPwHURrexG/WJaX/qWi8+kwXUTHq64=
Subject key identifier:   6E:75:7C:88:D3:A4:09:86:8D:9D:27:5F:29:32:AF:31:03:A6:9C:29
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer:       /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial:       019E2024353F7465231C32F3D13C94CF91D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number:          185C
Signing time:             Wed 13 May 2026 07:01:44 +0000
Manifest this update:     Wed 13 May 2026 07:01:44 +0000
Manifest next update:     Thu 14 May 2026 07:01:44 +0000
Files and hashes:         1: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (hash: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk=)
                          2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: UPvgE04HLeSUpTanigcGAjLfCQATDL5JcOuesMUCNjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:35:3f:74:65:23:1c:32:f3:d1:3c:94:cf:91:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
        Validity
            Not Before: May 13 07:01:44 2026 GMT
            Not After : May 14 07:01:44 2026 GMT
        Subject: CN=6e757c88d3a409868d9d275f2932af3103a69c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:34:89:e0:95:42:71:60:02:cc:78:79:31:
                    38:2f:f8:97:35:cd:1a:07:92:b6:76:9e:0e:af:f2:
                    a3:7c:63:8a:2e:50:29:e7:ad:22:e2:3d:93:c7:be:
                    70:f1:f6:3f:e8:92:34:16:fe:01:51:cb:1e:f8:36:
                    22:98:07:f8:a0:8a:65:69:b2:22:f0:73:93:0c:0b:
                    eb:81:ba:a7:ec:aa:64:4b:79:db:4c:40:66:df:5a:
                    df:f2:4c:df:ff:41:63:56:fc:e1:91:f2:be:d4:d0:
                    f5:d2:a0:de:24:08:fe:45:25:37:cf:bd:05:57:80:
                    78:1f:05:2c:2f:95:62:ee:50:41:ef:05:02:7f:aa:
                    2d:97:0a:32:94:24:9d:0f:c2:e0:bd:88:d6:e2:4a:
                    d6:e5:dd:bb:bf:45:48:f3:f4:ec:30:bc:25:d5:49:
                    b5:ae:ca:e1:32:7b:92:de:86:27:a7:60:52:7b:26:
                    ad:ee:89:cc:7d:4c:71:1f:52:dc:8b:63:9f:0f:d0:
                    e9:a8:7b:8f:a3:97:20:76:0d:05:1b:4d:0f:08:41:
                    72:a0:cd:c7:fc:8d:f0:81:f8:52:52:dd:a5:d1:35:
                    3e:fd:bf:a5:cf:cc:4a:55:12:d8:68:8e:8e:62:d9:
                    55:e0:48:2e:6e:74:84:82:eb:4d:a3:07:64:f9:57:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:75:7C:88:D3:A4:09:86:8D:9D:27:5F:29:32:AF:31:03:A6:9C:29
            X509v3 Authority Key Identifier:
                keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:b7:fa:23:8b:92:b8:08:63:63:8c:d3:e1:ed:38:03:84:
         e5:59:20:fa:40:c2:b8:dd:79:70:33:6b:8c:f9:28:30:06:63:
         f6:84:c4:52:f4:a4:87:04:11:26:1c:c9:73:04:0f:f0:74:4e:
         46:de:0a:c8:79:bc:8d:1e:d7:c2:ad:96:91:c6:58:4a:14:2b:
         b2:37:11:e9:eb:e0:53:59:ec:9f:cc:06:1c:0d:e2:01:ef:73:
         94:37:6c:23:34:66:6e:99:68:4d:b2:77:d0:2b:68:b5:2f:ad:
         64:e7:72:8a:c0:69:21:7f:f0:be:1a:c9:28:34:11:57:c3:22:
         05:c1:6f:0d:1f:74:31:30:4f:4b:b7:d3:1e:24:7f:f5:78:7c:
         cb:dd:53:dc:5d:3a:e1:34:7a:f0:47:33:40:5c:f6:47:1b:03:
         8f:c0:b7:1a:5f:9c:37:ce:13:5b:82:23:72:8c:f3:f4:84:43:
         24:ac:3f:33:db:c6:47:38:ed:ed:25:84:c9:dc:07:33:6a:0a:
         5d:98:d5:b7:e5:33:ce:80:a5:c3:b0:b3:fd:45:4a:09:04:e5:
         25:8e:bf:f9:a1:84:56:83:4f:c2:a1:26:9c:19:47:4d:97:57:
         36:62:c0:a1:72:2d:73:f2:f3:b8:15:e6:fb:0d:22:7e:93:54:
         b3:d3:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:05:21 2026 by rpki-client