Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File:                     qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier:          kF0mNjy3Lrb+rf+TyQAEMnKQ0Xf6wB6QKvWV/janOzA=
Subject key identifier:   4F:79:FC:09:BA:DC:3D:CA:EB:1B:CC:A4:D6:8C:09:50:7D:23:C5:87
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer:       /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial:       019D996212FBF760948B8F3470D1417E3F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number:          149D
Signing time:             Fri 17 Apr 2026 03:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:34 +0000
Files and hashes:         1: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: a56l67MZZXmZR6BHUe0sl7BzPj6w3aIiBSE4xmiUqa8=)
                          2: v2V_vI8w7ZXM1sii1UDeeWcwpCA.roa (hash: l5yrsl5tfKirXCQFQ9UTcOUZgIWs2Z58yXBB5pkbhOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:12:fb:f7:60:94:8b:8f:34:70:d1:41:7e:3f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
        Validity
            Not Before: Apr 17 03:00:34 2026 GMT
            Not After : Apr 18 03:00:34 2026 GMT
        Subject: CN=4f79fc09badc3dcaeb1bcca4d68c09507d23c587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:2b:2d:6e:5c:83:3a:bb:6d:09:a9:5a:8d:
                    dd:7f:a0:98:fa:b5:0f:1f:50:8c:28:1d:29:e9:4b:
                    f7:3a:58:e3:5d:49:7f:a0:49:14:04:00:e3:58:3d:
                    86:a5:42:ce:39:d5:e3:9c:d6:12:7a:98:ec:1e:14:
                    85:f8:a2:8d:a3:16:0c:e5:ae:16:fc:0c:38:5b:3b:
                    0b:bc:54:b7:bf:2f:3c:e7:ce:9b:88:42:cf:7f:12:
                    ed:87:87:31:ad:11:28:7c:78:d0:cc:6c:f6:a2:1e:
                    40:5d:d2:ea:e1:7b:b5:e5:89:58:51:cb:52:48:b9:
                    e4:c5:45:45:a6:cc:38:22:6e:58:a2:6e:a8:b1:cc:
                    6e:7f:df:6f:79:a6:a4:d7:e7:bf:79:13:83:58:96:
                    0a:1b:e0:fc:5b:06:79:dc:2c:df:d2:d3:ea:e5:3c:
                    8c:c0:6a:bb:86:1f:9f:1e:36:a4:d6:d8:1e:9e:d9:
                    cd:48:d7:db:b8:7c:db:c5:9c:cb:73:78:22:24:d9:
                    3b:ae:87:76:13:6c:ce:35:b9:45:ed:91:85:57:d6:
                    24:c5:42:61:67:35:a4:01:7d:1d:0b:cf:41:b6:f8:
                    72:04:3b:61:b4:69:35:6d:e6:3d:b3:0e:3f:e5:28:
                    6c:b2:c8:78:1a:07:f7:4a:21:af:56:fc:24:f6:6e:
                    19:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:79:FC:09:BA:DC:3D:CA:EB:1B:CC:A4:D6:8C:09:50:7D:23:C5:87
            X509v3 Authority Key Identifier:
                keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:46:63:1c:15:c5:cd:44:0a:1f:80:56:0c:51:f3:9f:f7:
         5a:a0:48:29:79:01:ab:ef:62:7d:71:c0:e2:a8:b6:93:5b:30:
         cd:83:85:0d:f3:e4:ce:15:dc:bd:f0:81:34:eb:b9:e5:39:e7:
         f5:c5:5a:55:91:24:a9:92:53:90:d9:6f:37:13:a9:4c:e6:e1:
         94:5d:f9:5f:c4:ee:5c:ab:3d:2b:ba:7f:37:ea:d6:e2:a3:2c:
         b0:82:e2:6e:8b:6b:d1:a9:69:52:1d:b6:04:bd:32:98:0b:d5:
         30:83:45:3e:ef:8e:f4:4c:a7:41:c6:71:75:93:7f:18:6c:b1:
         fd:c7:9d:2e:fe:9d:f9:a6:ea:e6:0f:5f:e8:56:94:8e:13:06:
         aa:28:25:c0:a0:6c:51:9f:36:a0:8e:af:51:d9:4e:21:43:12:
         fd:d0:40:ca:c5:63:00:57:40:6e:7d:cd:ee:bd:72:07:97:4c:
         be:03:13:d3:72:cd:19:1c:8c:c7:c1:48:8c:12:76:d5:9c:56:
         35:f4:92:fb:48:f6:ab:f3:35:ac:fa:57:bf:d9:c2:50:9b:75:
         18:51:97:60:0a:db:33:e8:33:16:7f:c1:12:4f:a3:58:40:b9:
         d8:3f:a0:88:65:cd:ba:7a:71:27:ef:4d:ff:d3:4c:25:52:0c:
         b3:2e:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:08 2026 by rpki-client