Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File:                     QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier:          35niRdPRJL9SEto6m+Pqc+ATesSId+BL1v2aB7dP6sA=
Subject key identifier:   FE:4B:E5:7A:34:2D:DC:7B:F1:7D:17:EF:40:2D:55:3C:CE:59:47:4E
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer:       /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial:       019E209169357CA544CAFCF4EC8261A45166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 09:01:00 +0000
Manifest this update:     Wed 13 May 2026 09:01:00 +0000
Manifest next update:     Thu 14 May 2026 09:01:00 +0000
Files and hashes:         1: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: mKSLp9ZxiZ1d3V/Sl4gPvjvjAmvTZXVwTC92VgvNJjI=)
                          2: mTYFd1745jhrZ9TtN2i23HR2pUI.roa (hash: ydADvfnj2q9V4OlnDPfNddiaxsr5Yrl3BEkKtbnsrx4=)
                          3: nOreBNvB9sHvjaOwA-7mkOrWqLI.roa (hash: PolGTwJfcBCQ5ul8B/u+HLxsm0nGBzqvFUKDQhFP6Lk=)
                          4: pPjzGwxRrQB5-40BluFsbIPRays.roa (hash: sQ+RWTCTmzmCdnVJPlVfZs+TlcOrO5vdITrduRsIAW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:69:35:7c:a5:44:ca:fc:f4:ec:82:61:a4:51:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
        Validity
            Not Before: May 13 09:01:00 2026 GMT
            Not After : May 14 09:01:00 2026 GMT
        Subject: CN=fe4be57a342ddc7bf17d17ef402d553cce59474e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:ce:27:d8:d6:8c:43:14:06:b2:84:b9:a1:
                    8f:dd:5d:c0:30:27:6d:f6:cb:a0:35:93:7e:6e:c6:
                    d4:e2:83:6b:3e:4e:78:48:43:36:e3:aa:e6:86:22:
                    93:a6:df:ac:9a:91:4d:5d:42:56:2e:ac:6b:92:de:
                    d7:f5:20:a5:73:9f:a9:8e:b3:f0:84:29:7c:49:5a:
                    79:35:30:23:01:f6:cb:65:e8:f0:41:df:30:aa:97:
                    11:58:ca:a5:91:ee:84:33:c2:cd:8e:f5:3a:54:94:
                    c7:ff:8a:6f:29:75:4d:ab:70:6e:f7:16:67:ac:f6:
                    98:f2:91:ce:29:af:49:1b:15:65:1f:98:d5:08:99:
                    3d:f0:93:d2:27:db:48:8d:c8:8f:44:fe:46:82:1d:
                    f1:2f:cc:87:70:16:63:cf:67:1f:b9:21:4a:48:dd:
                    99:0d:cc:52:17:39:3d:14:d0:1d:e5:6e:08:10:cf:
                    82:5e:bb:ed:7f:66:26:cf:4c:c8:4e:8f:8c:2d:5a:
                    7d:76:92:ad:e2:0c:9b:65:39:9f:92:a1:8a:3e:55:
                    59:da:4e:4b:d2:89:6e:bd:f1:5e:31:9c:e9:40:10:
                    3a:36:5f:35:26:dd:5e:c9:0d:fc:70:65:77:29:a7:
                    2a:c0:58:cc:b4:3f:0c:ee:2b:b2:b5:1a:b4:b1:50:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4B:E5:7A:34:2D:DC:7B:F1:7D:17:EF:40:2D:55:3C:CE:59:47:4E
            X509v3 Authority Key Identifier:
                keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:bc:2f:65:57:87:85:11:9b:31:0d:88:86:02:6c:b8:37:bc:
         61:97:c8:b8:67:6b:c6:a1:05:16:0f:54:9f:ed:6c:1c:d0:22:
         62:b2:ca:7f:6b:37:f4:d2:d6:83:7e:4e:1a:cc:4d:d6:bb:7c:
         ae:ab:0c:16:bb:d9:e1:eb:67:3c:ee:90:e9:9a:a6:46:f7:6d:
         4b:4c:d7:f3:44:2c:97:db:97:f2:c1:34:b8:4d:c2:27:4d:42:
         c8:08:c5:f4:5b:b5:71:a0:7d:ae:f8:bf:8a:5a:02:53:92:e5:
         9e:c1:81:71:2e:98:ba:68:fb:47:8b:ea:04:9f:59:39:f3:b7:
         c8:b0:f2:45:39:a1:ae:66:37:70:02:02:a8:64:9b:af:af:49:
         fd:f9:f4:48:8c:57:c0:d8:0d:c0:7f:99:30:2a:21:3f:a9:0a:
         ac:16:3a:92:24:ca:7c:8c:8f:4f:8b:e1:f4:aa:eb:8e:95:43:
         09:ba:43:fe:2c:25:f8:ed:38:7b:41:de:55:52:3c:b8:f5:47:
         06:b5:0e:16:8f:76:fe:7b:b2:37:18:d0:4d:d5:14:7e:7d:01:
         ce:33:ce:e5:37:4b:23:f6:ed:ee:bf:78:d8:1c:74:34:f0:f8:
         51:96:10:49:8f:d6:7f:2c:33:80:82:f1:f5:34:e6:89:f3:1f:
         ea:08:93:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkWk1fKVEyvz07IJhpFFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz
NzRlZDgwHhcNMjYwNTEzMDkwMTAwWhcNMjYwNTE0MDkwMTAwWjAzMTEwLwYDVQQD
EyhmZTRiZTU3YTM0MmRkYzdiZjE3ZDE3ZWY0MDJkNTUzY2NlNTk0NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn/OJ9jWjEMUBrKEuaGP3V3AMCdt
9sugNZN+bsbU4oNrPk54SEM246rmhiKTpt+smpFNXUJWLqxrkt7X9SClc5+pjrPw
hCl8SVp5NTAjAfbLZejwQd8wqpcRWMqlke6EM8LNjvU6VJTH/4pvKXVNq3Bu9xZn
rPaY8pHOKa9JGxVlH5jVCJk98JPSJ9tIjciPRP5Ggh3xL8yHcBZjz2cfuSFKSN2Z
DcxSFzk9FNAd5W4IEM+CXrvtf2Ymz0zITo+MLVp9dpKt4gybZTmfkqGKPlVZ2k5L
0oluvfFeMZzpQBA6Nl81Jt1eyQ38cGV3KacqwFjMtD8M7iuytRq0sVCR4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5L5Xo0Ldx78X0X70AtVTzOWUdOMB8GA1UdIwQY
MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt
NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4
LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA57wvZVeH
hRGbMQ2IhgJsuDe8YZfIuGdrxqEFFg9Un+1sHNAiYrLKf2s39NLWg35OGsxN1rt8
rqsMFrvZ4etnPO6Q6ZqmRvdtS0zX80Qsl9uX8sE0uE3CJ01CyAjF9Fu1caB9rvi/
iloCU5LlnsGBcS6Yumj7R4vqBJ9ZOfO3yLDyRTmhrmY3cAICqGSbr69J/fn0SIxX
wNgNwH+ZMCohP6kKrBY6kiTKfIyPT4vh9KrrjpVDCbpD/iwl+O04e0HeVVI8uPVH
BrUOFo92/nuyNxjQTdUUfn0BzjPO5TdLI/bt7r942Bx0NPD4UZYQSY/WfywzgILx
9TTmifMf6giT5A==
-----END CERTIFICATE-----
Generated at Wed May 13 12:27:36 2026 by rpki-client