Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File:                     QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier:          pIDFSNoT4ggFG4UPyV/RUylvEMykdUeZ0WE3+By1ROs=
Subject key identifier:   F3:D8:C2:A3:4F:ED:C7:CA:08:8B:3B:39:EF:5A:BD:4B:41:03:3E:36
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer:       /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial:       019D98F53D416CC91C7104C05087531AFE9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number:          0A26
Signing time:             Fri 17 Apr 2026 01:01:41 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:41 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:41 +0000
Files and hashes:         1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: wsbHDib+/qJD2iXG+MRZCI68lb9GeoEpp++qUahI4SU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:3d:41:6c:c9:1c:71:04:c0:50:87:53:1a:fe:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
        Validity
            Not Before: Apr 17 01:01:41 2026 GMT
            Not After : Apr 18 01:01:41 2026 GMT
        Subject: CN=f3d8c2a34fedc7ca088b3b39ef5abd4b41033e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:ea:0f:19:55:31:73:71:4f:e6:9b:fe:c6:
                    9c:6a:86:46:3b:f4:3e:38:b9:a6:82:d5:5a:13:13:
                    ed:fa:e4:ca:97:a8:11:19:51:47:1e:f5:9f:12:69:
                    26:61:78:90:93:b0:b5:7f:5d:a3:fe:9e:5c:63:09:
                    68:9b:59:97:fd:b3:cf:51:95:3e:b2:d3:6d:50:45:
                    96:91:3a:36:4e:b4:e4:83:6c:6d:67:37:15:ce:90:
                    6a:1f:09:2d:fd:79:0e:7e:53:98:de:07:1f:db:26:
                    f1:e0:c9:b3:40:8b:a4:67:6b:da:be:5a:0a:8b:0b:
                    ab:8d:b9:ee:dd:b7:af:d8:c3:69:01:14:37:d5:4c:
                    6c:3e:05:7b:85:e2:36:a6:99:78:a5:46:08:d3:f9:
                    84:f4:94:43:ff:ea:c5:b0:5d:ac:34:02:a0:7b:1a:
                    39:80:c0:ec:7e:87:56:29:c3:47:3f:ba:1f:d8:98:
                    e0:b2:88:2b:19:dc:ab:4b:f6:92:e1:91:5e:ce:9a:
                    fe:ef:70:17:e2:38:0f:53:0f:05:6a:e2:07:16:5a:
                    7e:d4:3e:5e:1d:f2:cf:59:dd:2e:71:70:be:19:7e:
                    75:b9:c2:e4:99:25:1e:8d:21:e7:8b:30:30:08:50:
                    55:73:31:84:09:69:39:33:7c:06:56:1d:83:ca:43:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D8:C2:A3:4F:ED:C7:CA:08:8B:3B:39:EF:5A:BD:4B:41:03:3E:36
            X509v3 Authority Key Identifier:
                keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:c0:ae:3c:4d:7e:b3:f5:b3:8d:d4:7e:58:3a:70:fd:07:
         28:ca:86:af:06:01:c9:f4:f4:50:33:18:d4:29:a1:60:3c:79:
         85:18:6c:be:ba:d4:33:4f:13:1c:79:0a:45:68:1c:ce:e3:43:
         a4:9f:fd:0c:55:f8:d7:46:50:74:26:33:32:b1:17:77:18:10:
         36:60:a2:08:55:75:c5:f7:54:c0:e4:1b:b7:66:ea:a2:50:45:
         39:b5:aa:41:0f:0c:65:6c:76:59:6c:21:8e:f0:37:d0:49:c3:
         6b:13:4e:22:7d:83:7d:5f:5d:af:07:1a:ea:cd:d4:45:c4:ac:
         20:0d:1e:5b:d4:3f:f1:8b:53:a8:fe:96:65:00:3a:47:7f:d9:
         cb:1f:4e:78:f5:f1:48:83:2b:d0:1d:a1:06:fd:e8:3b:a9:c8:
         0c:15:b1:7c:af:46:ee:62:3f:5b:47:34:bd:78:78:98:dd:29:
         2b:42:ad:35:e7:9b:a5:b6:6f:73:6d:6e:f4:11:9c:c9:cf:6b:
         5a:2f:27:9a:11:db:9b:df:f9:c4:e8:e4:a8:45:a5:dc:c6:88:
         6b:36:83:92:cf:21:77:d9:8a:c6:bc:c6:e6:0b:9e:03:76:0e:
         90:7b:98:6c:f0:21:cf:df:14:e2:6e:f5:d3:1b:ff:a3:68:6b:
         c0:2d:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:22:08 2026 by rpki-client