Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File:                     QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier:          hd6sQrKM0ob3K5cXEAQseHfSVEOjme7+kWfSFCiVELg=
Subject key identifier:   B2:D9:A4:A0:0D:C9:79:B1:85:63:9E:58:18:44:26:3F:8F:C0:38:55
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer:       /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial:       019D9AAC144DDC5DD672B53368D8D72501DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number:          1610
Signing time:             Fri 17 Apr 2026 09:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:01 +0000
Files and hashes:         1: 5x6qWCzoJG3KY_TYsy8MdSiC918.roa (hash: LaC7uWVHBNvm8XGrxyiJJ+Lt0TLrpDAzF9aOvhKJOZE=)
                          2: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: ZCrJGZ4QiEzW3d878Xk7oBzioEPX9gu4me5PpxXgxhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:14:4d:dc:5d:d6:72:b5:33:68:d8:d7:25:01:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
        Validity
            Not Before: Apr 17 09:01:01 2026 GMT
            Not After : Apr 18 09:01:01 2026 GMT
        Subject: CN=b2d9a4a00dc979b185639e581844263f8fc03855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:38:94:1a:eb:a1:cb:80:18:70:0b:1d:0c:
                    66:b0:51:2d:d5:50:a9:d5:9b:67:91:19:46:fc:e8:
                    50:d4:b2:b5:3a:4b:64:84:15:c3:53:f0:7a:66:c5:
                    27:bd:0d:c8:9e:5a:b7:56:45:f6:d2:48:84:f5:d1:
                    d6:ef:36:26:0d:00:f0:2e:34:b9:73:86:7d:81:a9:
                    4a:4f:dc:72:99:7e:84:9c:01:1e:e4:d7:02:ba:c2:
                    a0:18:5a:75:4f:67:33:dc:4b:f5:0d:6d:12:1b:6a:
                    46:9c:69:b4:08:a7:ab:0c:b2:c1:d3:2f:94:d8:cd:
                    b0:89:db:8b:aa:8c:ac:80:e0:a9:13:c9:ea:fe:36:
                    3f:50:5c:c2:e9:a2:2f:da:2f:ed:d5:60:a8:f8:61:
                    9a:3b:ba:52:21:6e:6f:11:14:e4:80:3d:e0:58:9e:
                    11:d6:af:22:ac:08:c5:b3:a6:83:d2:08:49:34:8b:
                    0a:ed:8b:b3:59:6f:ba:a3:0b:bd:76:31:d6:18:2c:
                    f6:06:05:e6:f6:a8:bd:56:14:0c:df:54:1d:3a:d8:
                    2f:da:55:9f:a2:61:07:72:a1:15:5a:33:04:9b:a0:
                    05:bf:a3:d5:7c:b1:12:73:c8:ef:8c:9d:dc:64:52:
                    45:c9:a4:46:1b:c1:78:ea:26:32:12:41:03:d6:b8:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D9:A4:A0:0D:C9:79:B1:85:63:9E:58:18:44:26:3F:8F:C0:38:55
            X509v3 Authority Key Identifier:
                keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:49:e3:82:be:aa:88:0f:a9:0e:c2:63:c7:f8:a2:ac:c2:
         65:ca:0b:a1:84:fe:eb:ba:8d:25:28:51:d7:77:e8:f6:af:9d:
         4f:e3:31:3c:c6:f3:48:49:63:8f:a8:8c:01:d8:50:ee:4c:04:
         1f:84:34:6c:a4:c0:2d:58:79:a4:bc:e3:65:01:9a:81:09:de:
         59:ef:46:a0:05:c6:6e:3b:3d:4d:b9:c4:39:2d:d9:63:b6:ea:
         87:f5:02:a7:ba:f7:6e:13:31:cc:08:76:09:c5:2d:2a:77:f9:
         db:4a:04:05:64:d5:9d:a9:45:00:4c:f1:79:3d:ca:e9:34:a8:
         f5:01:a7:02:88:71:ab:08:55:2f:e6:67:ed:9f:6d:a8:c5:17:
         3e:1f:1a:dc:82:4d:84:c3:85:a9:d9:8a:ef:26:49:f6:c4:24:
         d0:c5:ee:5b:0a:76:32:9e:01:7e:6f:13:44:01:54:c7:48:6a:
         14:bd:01:ce:a1:88:fa:fa:94:55:63:8e:64:4c:f9:26:41:a4:
         35:25:37:83:01:eb:80:6c:b2:9c:07:bc:22:27:72:55:96:26:
         3f:86:ab:30:0e:80:34:2c:f2:3e:4e:11:4d:9a:01:a8:b1:cc:
         4d:cd:e2:8e:44:54:5d:8a:01:1c:93:cd:1f:e7:7f:02:e8:e9:
         c2:c4:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:22 2026 by rpki-client