Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
File:                     QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json)
Hash identifier:          2Ti5yJOxsg8RmpYMxwlitUNIfeocAcghw9DStJFr60Y=
Subject key identifier:   89:5D:93:45:9E:9F:6D:48:FC:A7:F4:10:53:F9:35:9F:AD:DF:31:56
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Certificate issuer:       /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial:       019D98F4D83355DFE4A050ED79C4111F7B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
Manifest number:          0584
Signing time:             Fri 17 Apr 2026 01:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:16 +0000
Files and hashes:         1: 3xGw1rop8564t3-bxbU_RkP9FKQ.roa (hash: yfLjzKJGeMwVRP+KK+Z2T+JHoQEZVG5MrcsyFlDcLWA=)
                          2: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: 84AcKDZmEezg/5+8Qsujqivw789Ev8Xtct2uouZVGzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:d8:33:55:df:e4:a0:50:ed:79:c4:11:1f:7b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
        Validity
            Not Before: Apr 17 01:01:16 2026 GMT
            Not After : Apr 18 01:01:16 2026 GMT
        Subject: CN=895d93459e9f6d48fca7f41053f9359faddf3156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:d6:c1:41:4e:ff:49:d1:3e:05:a3:b5:d0:
                    36:d8:55:f3:5e:ed:71:7e:3f:d1:e9:66:ef:bc:32:
                    32:30:66:2b:ff:fc:13:4a:a1:18:44:18:f2:d5:6c:
                    7e:19:81:43:27:5f:47:86:ce:38:9d:b8:ec:46:73:
                    ea:02:3a:a1:a3:b4:89:45:96:51:eb:d6:de:91:44:
                    7c:78:f1:6a:4b:82:62:65:65:df:da:11:18:18:b3:
                    b2:1e:11:35:d3:e5:e0:dc:f4:65:d9:98:9e:15:93:
                    db:c5:89:5c:a7:0d:a4:26:21:b4:b6:30:03:91:29:
                    46:42:f8:ba:4e:ca:25:71:3c:18:7f:38:14:47:ff:
                    9d:e3:3b:50:7a:a1:17:7f:04:4c:a3:1b:fc:09:17:
                    05:21:fb:0b:64:3a:02:85:f5:14:f6:91:50:e2:f3:
                    82:f8:28:87:b2:30:9c:92:0c:d1:73:9e:e5:60:29:
                    bf:be:af:16:26:56:97:33:12:3b:aa:6b:41:96:4a:
                    60:76:7a:90:d0:fc:02:49:48:a3:d0:5e:dd:98:31:
                    ab:62:57:ef:08:15:ce:05:16:29:a2:be:67:3d:aa:
                    f9:64:32:d5:0a:d4:97:26:a1:5f:0b:8f:2e:58:0a:
                    06:ff:13:37:f1:59:4c:70:ce:da:49:f5:75:47:6f:
                    af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5D:93:45:9E:9F:6D:48:FC:A7:F4:10:53:F9:35:9F:AD:DF:31:56
            X509v3 Authority Key Identifier:
                keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:17:c2:24:60:c3:5d:59:91:9a:1c:ed:8e:9b:6b:4d:95:0b:
         66:74:1d:7e:8b:6b:2f:d2:dd:f0:13:fa:96:ff:c3:05:b5:6b:
         e9:18:92:7d:9f:04:9b:b9:f9:11:fa:ed:4d:7a:7c:7a:c8:2d:
         20:a3:49:ef:c4:ae:32:12:2f:4b:04:6f:ae:70:f4:9f:01:98:
         14:6d:85:9b:e6:9e:4f:9c:f4:b1:5a:79:ca:0f:89:a4:82:89:
         c3:33:e8:2a:2e:ae:a4:00:db:52:10:d9:13:4a:a5:86:42:f4:
         81:0e:0d:d1:1e:73:03:a2:87:0a:e9:c6:cf:3b:47:f5:73:ef:
         84:27:23:91:ff:94:a5:ab:49:7b:69:95:16:fd:28:30:dc:91:
         20:ad:96:8d:cd:8a:2b:48:db:62:87:24:4d:72:96:07:51:1c:
         91:fb:b6:f9:86:dc:1a:48:77:57:ea:03:c6:b3:3b:08:16:99:
         91:f5:1b:02:a6:57:cb:25:30:8c:44:97:67:7a:b8:ee:c2:07:
         ae:37:47:8a:b2:e8:b5:8f:b3:2b:71:7b:64:b7:6d:8f:c8:ca:
         2c:61:1a:ee:33:f7:54:3b:69:47:6e:80:9c:3d:5a:a7:32:d4:
         d0:2a:48:6d:9e:41:f8:89:f1:18:9a:fb:27:7a:02:40:ce:8c:
         a7:25:bf:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9NgzVd/koFDtecQRH3s2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMThmNTVhNmIwMzNiMjQ0Zjg2MTQ1YmQ5ZjBhNmYxNDAw
YzFiZmYwHhcNMjYwNDE3MDEwMTE2WhcNMjYwNDE4MDEwMTE2WjAzMTEwLwYDVQQD
Eyg4OTVkOTM0NTllOWY2ZDQ4ZmNhN2Y0MTA1M2Y5MzU5ZmFkZGYzMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdzWwUFO/0nRPgWjtdA22FXzXu1x
fj/R6WbvvDIyMGYr//wTSqEYRBjy1Wx+GYFDJ19Hhs44nbjsRnPqAjqho7SJRZZR
69bekUR8ePFqS4JiZWXf2hEYGLOyHhE10+Xg3PRl2ZieFZPbxYlcpw2kJiG0tjAD
kSlGQvi6TsolcTwYfzgUR/+d4ztQeqEXfwRMoxv8CRcFIfsLZDoChfUU9pFQ4vOC
+CiHsjCckgzRc57lYCm/vq8WJlaXMxI7qmtBlkpgdnqQ0PwCSUij0F7dmDGrYlfv
CBXOBRYpor5nPar5ZDLVCtSXJqFfC48uWAoG/xM38VlMcM7aSfV1R2+vUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIldk0Wen21I/Kf0EFP5NZ+t3zFWMB8GA1UdIwQY
MBaAFEAY9VprAzskT4YUW9nwpvFADBv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAt
NmUxNjlkNjVjOTExLzEvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAtNmUxNjlkNjVjOTEx
LzEvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxfCJGDD
XVmRmhztjptrTZULZnQdfotrL9Ld8BP6lv/DBbVr6RiSfZ8Em7n5EfrtTXp8esgt
IKNJ78SuMhIvSwRvrnD0nwGYFG2Fm+aeT5z0sVp5yg+JpIKJwzPoKi6upADbUhDZ
E0qlhkL0gQ4N0R5zA6KHCunGzztH9XPvhCcjkf+UpatJe2mVFv0oMNyRIK2Wjc2K
K0jbYockTXKWB1Eckfu2+YbcGkh3V+oDxrM7CBaZkfUbAqZXyyUwjESXZ3q47sIH
rjdHirLotY+zK3F7ZLdtj8jKLGEa7jP3VDtpR26AnD1apzLU0CpIbZ5B+InxGJr7
J3oCQM6MpyW/bg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:00 2026 by rpki-client