Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
File:                     QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json)
Hash identifier:          UjhFiov7RXPiQwkETx5lrI1/YPjBXIdD1NeE/mInsWk=
Subject key identifier:   88:E6:51:FA:A1:97:BB:E8:D7:47:88:C2:33:4D:EC:77:2C:29:30:59
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Certificate issuer:       /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial:       019DA3AF5251E95AF860A46EC119503C18C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
Manifest number:          0C5F
Signing time:             Sun 19 Apr 2026 03:01:09 +0000
Manifest this update:     Sun 19 Apr 2026 03:01:09 +0000
Manifest next update:     Mon 20 Apr 2026 03:01:09 +0000
Files and hashes:         1: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: p5OZVbRaLzLEIIRMSXqk0PPuVNsfaiRE8d5QIYkg14Q=)
                          2: qY7Sk0rUw6xSZ-1HP9kbgPfOPbo.roa (hash: J+fyJwGEO1szX1qe5b1pPbWaNW8W/mP2Me/+6swBagg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:52:51:e9:5a:f8:60:a4:6e:c1:19:50:3c:18:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
        Validity
            Not Before: Apr 19 03:01:09 2026 GMT
            Not After : Apr 20 03:01:09 2026 GMT
        Subject: CN=88e651faa197bbe8d74788c2334dec772c293059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:6d:3a:42:2e:e6:1d:c4:2a:19:7e:8b:b8:
                    98:a8:db:0a:cd:b1:28:3b:63:8f:a4:f7:4c:48:36:
                    5b:40:12:6d:76:89:be:bf:cc:11:50:2a:a2:f4:12:
                    0d:8a:4a:fe:bb:23:c1:88:e1:78:70:fa:9d:9a:6b:
                    5f:71:46:4a:d2:99:24:1f:fe:f6:cf:38:a8:ee:bf:
                    e0:a6:31:a6:b2:ef:38:9c:1f:50:8b:ae:aa:6a:ad:
                    22:b8:fd:b9:95:eb:9e:e6:ea:4f:01:07:c3:1f:0f:
                    13:89:5b:a0:2c:a3:ff:1d:b5:bc:00:a1:d1:e8:cc:
                    02:89:61:1d:2c:76:6c:81:99:4d:97:f8:04:f8:d5:
                    7f:5a:dd:98:df:21:c2:84:9c:9a:7d:ba:4a:61:bb:
                    aa:93:ac:1f:8f:16:9c:f6:56:d5:28:4a:3e:4b:5e:
                    9b:1d:a4:67:c7:be:ff:48:c9:c8:c2:b1:41:82:bf:
                    21:78:5f:eb:6c:41:7c:2e:e2:30:59:38:0f:1b:df:
                    e6:f9:70:d0:64:71:e9:d2:dc:88:fd:78:4c:85:fb:
                    c9:72:4a:32:ce:9e:d0:22:b6:bf:35:2a:cf:02:22:
                    2c:7a:fa:7d:d1:8d:cf:59:2e:c9:98:00:6a:7b:5b:
                    9f:c1:2c:11:2f:8b:4e:b2:47:d3:28:18:59:0f:90:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E6:51:FA:A1:97:BB:E8:D7:47:88:C2:33:4D:EC:77:2C:29:30:59
            X509v3 Authority Key Identifier:
                keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:bb:09:22:95:ba:a8:15:e0:f8:ff:10:04:36:73:32:df:
         0c:55:2a:a6:be:15:d0:96:fd:2d:7b:c9:97:e3:a1:92:06:7d:
         7e:7e:8a:ac:08:31:3f:1b:09:e1:9e:1c:2f:3b:cd:28:e9:7e:
         c7:c4:65:0c:d9:5a:ff:61:e0:d3:ce:9a:33:b8:37:e2:61:85:
         62:c7:91:bd:a6:e4:5b:71:e3:2a:22:fc:6d:37:c8:30:e9:6b:
         c3:03:6c:d4:2c:27:a4:87:3d:4c:b8:a8:4c:ab:39:8e:54:f7:
         0d:41:f2:4d:d5:02:e1:ca:d8:49:c2:60:ad:2e:97:0b:0f:a6:
         74:60:a6:79:98:fc:dd:9a:ff:80:93:54:df:a4:99:80:1b:d9:
         f6:90:69:f9:da:67:24:c7:fa:1b:a3:c3:36:89:05:df:3a:c1:
         c6:9a:96:b3:5b:f6:b7:dc:5f:8b:4d:7d:52:9b:e4:42:29:19:
         d6:9e:55:84:d2:16:81:e8:8d:56:77:05:4b:53:6c:2d:0c:27:
         e8:7e:5c:32:58:29:ac:7d:59:80:f0:46:9b:ab:4a:90:2f:70:
         a1:8d:45:99:9d:77:4e:4b:5e:d2:9d:84:3b:5d:82:75:a2:79:
         d4:ec:8a:08:23:4b:06:67:0e:31:7f:f2:24:a3:f1:71:a2:19:
         66:55:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:58 2026 by rpki-client