Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File:                     QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier:          KRfaaADjpuGUMgI7BRXFPpFxYpBrMHaeBj705i6nheI=
Subject key identifier:   84:73:19:8D:F2:D7:11:08:98:96:9A:3A:22:B6:24:0D:C9:A8:6B:F1
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer:       /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial:       019D9A3F2650F0219D47A5E82BEC8EBC6491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number:          12BD
Signing time:             Fri 17 Apr 2026 07:02:03 +0000
Manifest this update:     Fri 17 Apr 2026 07:02:03 +0000
Manifest next update:     Sat 18 Apr 2026 07:02:03 +0000
Files and hashes:         1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: rKMCF1dogtII4gLzJc31/v9waUuqa1i8/cuuplutGUs=)
                          2: qzh_iKj0t2WOf3zVqzKCrKeqtDM.roa (hash: 077TMwwKON/71XOUtoiDWGgj1D5SliYKyCLEgwuoF58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3f:26:50:f0:21:9d:47:a5:e8:2b:ec:8e:bc:64:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
        Validity
            Not Before: Apr 17 07:02:03 2026 GMT
            Not After : Apr 18 07:02:03 2026 GMT
        Subject: CN=8473198df2d7110898969a3a22b6240dc9a86bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:f2:f7:51:ca:48:6d:0e:3d:17:35:f9:c9:
                    53:08:85:c3:d3:80:5c:5a:a0:14:ec:5a:eb:c5:c4:
                    ff:ca:e1:f7:61:ae:50:92:5b:c6:67:40:a4:5f:84:
                    87:80:f6:0e:0e:15:b4:03:7b:de:2b:14:17:65:32:
                    f9:1d:53:81:94:ab:a5:92:bb:bd:d2:f7:38:8e:91:
                    fb:ea:ea:70:51:8c:77:7f:14:c3:2a:75:84:6d:15:
                    af:47:90:52:1b:53:24:95:db:85:a6:c2:25:16:f2:
                    f3:63:c9:2a:a3:03:48:4f:18:ff:5f:26:a8:36:88:
                    c3:03:2d:ba:c8:f0:ce:2a:ba:df:5d:d4:e1:26:74:
                    c2:60:dc:01:3d:88:2c:0f:40:17:42:18:37:9c:c1:
                    78:01:64:b6:fe:96:83:00:cc:0e:d9:67:6d:7b:87:
                    63:01:41:fb:80:d4:78:63:b1:46:78:af:20:e2:f8:
                    82:70:42:26:45:2b:59:61:a9:af:95:ed:72:f0:f0:
                    a1:17:2e:45:ef:b7:16:25:61:30:6e:f2:f1:4b:f1:
                    95:fc:85:59:4e:58:45:55:aa:7e:3c:35:5c:54:3e:
                    47:c4:cb:4c:d6:7c:7e:be:81:6e:22:b4:dd:67:a4:
                    a0:d3:8e:2c:c4:a1:6f:60:20:74:6c:98:58:c2:aa:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:73:19:8D:F2:D7:11:08:98:96:9A:3A:22:B6:24:0D:C9:A8:6B:F1
            X509v3 Authority Key Identifier:
                keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:19:05:6f:62:3e:5f:b9:f6:b2:8d:5c:a7:9d:d0:24:5b:35:
         4a:88:ec:f8:97:70:f7:8e:23:20:8b:a8:47:d2:1d:5c:55:cb:
         67:cf:79:ef:19:c6:fa:ea:ef:84:4b:1c:73:03:86:35:e9:8c:
         7c:7a:79:83:e5:fa:70:6d:7e:8e:60:9c:39:d9:17:1e:ba:9b:
         ee:3d:c2:8e:2d:06:2f:d7:76:f9:0a:d8:54:77:1e:89:94:88:
         71:b2:cb:84:06:70:96:10:0f:2e:34:21:ce:1e:99:0b:d1:df:
         20:ff:f2:50:77:59:64:ce:0a:bd:08:41:7b:38:20:15:46:c2:
         13:20:7e:f1:fd:be:5f:ce:c4:4c:ed:c4:8d:10:02:7f:f7:c8:
         f4:f1:33:c4:47:0a:43:ee:06:67:7d:97:0c:f9:e6:fd:36:92:
         1e:0d:98:ee:f8:27:e4:d9:b3:49:e3:f6:0c:59:0f:ec:4e:6f:
         8d:bf:aa:61:df:fe:4d:2d:13:38:ee:3f:92:cd:6a:b0:32:bb:
         0d:33:1b:02:1c:eb:89:fd:80:93:59:96:18:a5:5e:cb:3c:e0:
         4e:1f:c8:86:4b:6b:af:f4:31:75:b9:d9:fe:59:a2:80:01:f6:
         4c:f5:53:f1:07:c1:cd:39:42:40:cc:60:06:7d:28:87:1e:fd:
         11:85:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:49 2026 by rpki-client