Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File:                     qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier:          FHnH1Mdh07EtYOLDxNCPy7y8r0MQwvloMczpsT8JSQc=
Subject key identifier:   DF:6C:78:3C:D8:88:55:96:5F:F1:68:87:AC:E9:3C:3D:DF:28:8E:77
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer:       /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial:       019D99D06276B87D0295F0D7399E53EEBDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 05:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:03 +0000
Files and hashes:         1: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: z05bynDecr7DWtnZGL9i2B1FRAYSzp00Req4Gzm+BKM=)
                          2: s4z6KSPU66aHa9IpWr4h0fSsZEc.roa (hash: T4mhOBKBFlKgTip//Yw1HwCgxWQpfJTZCSk6zAZ8jes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:62:76:b8:7d:02:95:f0:d7:39:9e:53:ee:bd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
        Validity
            Not Before: Apr 17 05:01:03 2026 GMT
            Not After : Apr 18 05:01:03 2026 GMT
        Subject: CN=df6c783cd88855965ff16887ace93c3ddf288e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:8d:90:14:b6:e4:de:a0:73:f3:68:de:f9:
                    4e:38:32:5f:33:49:23:00:10:2d:bb:32:8f:27:11:
                    83:6d:b1:ad:75:b1:00:b5:6d:ba:06:65:d5:17:f2:
                    08:58:37:18:b8:fe:38:4c:f9:ae:d4:16:9c:00:9a:
                    f3:66:1a:e6:10:93:ee:e3:f8:ab:c8:36:df:9d:39:
                    93:23:e6:98:63:e7:03:0c:c6:95:33:27:da:9a:28:
                    0e:ee:c1:32:bb:be:39:2b:59:28:6b:7e:4c:1b:4e:
                    a8:c2:97:84:b8:2f:38:09:20:0a:eb:cf:c6:c0:46:
                    4f:1a:de:9e:29:2e:16:97:93:9d:f5:62:69:2b:b2:
                    51:26:d0:80:a1:1f:d6:b8:8a:d9:f0:d3:db:ff:55:
                    14:e4:4b:13:66:bc:2b:8d:8d:fc:ce:d5:9c:79:fb:
                    da:68:59:33:1c:f5:d8:cf:eb:11:f0:1a:b5:15:e2:
                    7c:f1:3e:ae:09:cf:d4:22:9a:e3:ae:f6:b1:c7:e1:
                    8f:0b:1a:00:92:2e:a8:a9:bf:4e:5a:8b:d6:44:22:
                    72:77:40:ca:e0:4c:6a:7d:b3:50:24:ed:63:8d:b6:
                    71:4c:50:6e:f6:a5:b7:07:f2:9b:47:91:e2:88:6f:
                    50:84:7e:9e:aa:7b:7f:f2:d5:f3:2a:92:3c:c6:4a:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6C:78:3C:D8:88:55:96:5F:F1:68:87:AC:E9:3C:3D:DF:28:8E:77
            X509v3 Authority Key Identifier:
                keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:58:dc:c1:ad:72:d6:2e:6e:d2:9f:cc:11:27:2b:bb:9e:c7:
         0e:d2:3c:e1:1f:1a:71:bb:cd:23:2a:c2:94:d7:7c:23:66:a9:
         2d:72:61:f6:cb:f1:46:d6:ab:f4:92:8a:09:f4:32:cf:bf:d3:
         37:e0:f7:8c:ef:a5:39:de:13:8f:28:0e:bf:5c:e8:53:15:6a:
         e9:ee:a8:68:8d:5e:48:bc:da:ac:14:9b:4e:fc:1e:0d:a9:58:
         2c:38:df:d0:f8:27:df:e1:b8:93:ef:28:e9:f4:9c:6c:a5:f6:
         f6:8f:b2:7d:63:ca:f4:83:dc:33:50:46:fd:1b:d4:49:f0:b2:
         80:e8:a1:9b:54:32:2d:46:e3:2f:c7:1f:4c:3e:a3:4e:05:72:
         6d:71:42:1e:fd:b1:b7:8b:ec:64:2d:7f:9f:c8:fa:9a:64:c5:
         c1:b0:8a:52:85:4c:1f:f9:73:38:16:23:10:4c:9f:79:d3:f4:
         c2:ed:5d:e1:0c:36:fb:19:4a:f8:f9:33:e8:68:ac:e5:e2:8c:
         e4:1f:c9:83:c6:c5:d0:e8:0c:ab:f5:ef:e0:5b:4a:bd:f1:8a:
         b8:06:2f:e2:80:6a:9c:54:60:af:e3:e7:ef:fc:cd:7c:f4:ac:
         08:1f:78:b6:79:eb:8b:64:43:4f:f3:e2:0a:40:0f:68:18:7e:
         e6:85:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:39 2026 by rpki-client