Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File:                     q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier:          B4IImGidY439zVZQdmbkI+JXZenYP7M9ml/iFOFGwG0=
Subject key identifier:   B8:68:DA:04:D9:E3:7C:36:0B:F0:39:D0:25:D6:63:45:E5:51:09:47
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer:       /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial:       019D9C6370FD6C0856EB36050F0DD102D2DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number:          026E
Signing time:             Fri 17 Apr 2026 17:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:55 +0000
Files and hashes:         1: 0kO4HDhs-Z05CdJzgp5tseLyhSU.asa (hash: /YkuI+YVFPmtxpbrJU27qGqrMqF1Tro9Xx9l6QKKoAU=)
                          2: SZY6wsq_78e2nLvWAkeHk1piMW4.roa (hash: crCAmARzqXmw7E9/kb/thI4py7GtbXwH0Xp22Jp2Zrs=)
                          3: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: +MLAmMn80yGvMgaY/55cmMmZtjPlR+FM9JlWP4lNYRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:70:fd:6c:08:56:eb:36:05:0f:0d:d1:02:d2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
        Validity
            Not Before: Apr 17 17:00:55 2026 GMT
            Not After : Apr 18 17:00:55 2026 GMT
        Subject: CN=b868da04d9e37c360bf039d025d66345e5510947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:f2:6f:46:79:1a:2d:aa:dc:b0:df:fa:2f:
                    5b:20:1f:bc:47:3b:f3:58:b5:de:60:03:1a:3e:0f:
                    7e:d8:a3:da:53:2a:82:23:2b:0d:75:9a:6d:84:29:
                    b5:f8:47:41:3b:07:a5:04:13:af:9d:fd:c3:41:08:
                    cd:79:a7:06:93:ad:e7:5c:36:3e:5b:e1:91:64:96:
                    ea:53:b2:7f:fb:60:46:46:28:8d:0e:e1:5a:f3:7e:
                    6a:32:63:d9:0c:8d:e4:8d:b5:0b:e1:15:23:c7:da:
                    d9:3a:b2:69:51:5f:8f:d9:e1:4b:18:7e:cb:35:10:
                    ad:de:ba:f4:21:d2:02:f8:fe:8e:cd:e2:96:76:4a:
                    f6:84:b5:bf:60:42:d2:dd:4a:65:65:88:aa:4a:d3:
                    28:97:4d:ac:c4:17:7a:0a:cb:fe:2f:3e:97:89:00:
                    a8:a7:e8:c0:02:18:98:2b:3c:4a:2d:12:bf:c9:01:
                    33:c4:6b:4d:47:b4:2b:59:10:72:53:6f:6b:f4:00:
                    e3:bc:50:ef:a3:72:49:a9:73:5f:ca:33:5b:9e:f9:
                    28:94:bd:e2:76:d2:1f:c2:99:3c:0f:f0:5d:da:45:
                    03:de:5f:bb:0b:d2:4a:64:ad:1f:1d:bf:d1:05:10:
                    71:01:24:eb:73:8b:a5:ba:f7:f3:ef:fd:db:b5:fc:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:DA:04:D9:E3:7C:36:0B:F0:39:D0:25:D6:63:45:E5:51:09:47
            X509v3 Authority Key Identifier:
                keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:88:4a:a7:f2:33:c9:b6:b1:63:81:0f:cf:b0:02:e1:20:4a:
         51:e6:5f:d3:22:41:95:2f:61:fc:0e:a2:5b:e9:10:1d:f7:62:
         af:72:dd:2b:d3:8d:57:c6:1f:45:4c:a7:1c:e3:1a:30:53:8c:
         37:b5:0d:16:89:2f:4e:f5:d6:35:78:fe:76:2a:0d:34:e8:40:
         3f:2e:54:50:39:2f:4f:e3:c9:97:69:84:69:e8:93:eb:7b:38:
         4e:1c:31:93:eb:4e:a9:7e:68:71:cc:4d:28:9c:8b:df:2e:ab:
         18:52:b6:78:98:51:f1:2c:62:a1:7a:d1:9b:eb:5a:af:d4:20:
         cf:b0:00:66:98:fc:15:6c:d3:fe:9b:52:a2:56:6b:33:ad:15:
         8d:9a:a9:d9:37:6f:28:71:fe:02:ef:d7:5a:57:8f:2e:fc:46:
         d3:ce:1d:95:bb:67:e5:f9:73:d0:8e:69:f3:00:5c:d1:ad:71:
         0d:1b:3c:27:b9:c7:71:f5:a0:41:bb:22:9e:21:38:2f:ed:6c:
         6d:b5:1e:bf:21:67:13:d4:cf:d4:09:e9:a9:de:39:c8:49:08:
         66:5b:15:2e:a4:9e:6f:c2:c4:61:c5:a8:55:8f:5e:b6:f6:09:
         08:ce:b1:16:1b:d5:be:2f:2f:a8:c5:61:d4:81:e4:2b:f2:12:
         a0:ae:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:02 2026 by rpki-client