Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
File:                     Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json)
Hash identifier:          zCkNCsXWwBlcOTLgKHem47hvlXm8PcvMuytTlNg5//Q=
Subject key identifier:   F5:29:56:C9:F1:3D:75:4E:48:C5:37:9A:B9:41:27:1C:92:8D:01:26
Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Certificate issuer:       /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Certificate serial:       019D9A75030CF18894775A5E301499B4E5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
Manifest number:          0C0E
Signing time:             Fri 17 Apr 2026 08:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:52 +0000
Files and hashes:         1: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: eBqh+jG0vSr5kHXgwQ+YWM+cZSsbFdTQBkvoCAcIDbg=)
                          2: Zv3FIbxrHUDa_eVep4PasKjQU6o.roa (hash: JKEF8YhZitQIVgkT+7vZT9WWbZK9Q/6ak4c105Exh3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:03:0c:f1:88:94:77:5a:5e:30:14:99:b4:e5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
        Validity
            Not Before: Apr 17 08:00:52 2026 GMT
            Not After : Apr 18 08:00:52 2026 GMT
        Subject: CN=f52956c9f13d754e48c5379ab941271c928d0126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:cd:61:79:f0:43:6e:53:8e:20:cb:f0:aa:
                    99:7d:1b:ee:b7:48:aa:9a:a8:32:17:38:d5:2c:eb:
                    a9:4d:d7:f2:3f:d1:ab:e5:f3:2b:28:06:43:82:b9:
                    53:cf:96:d8:99:72:c2:3e:96:29:a7:27:c9:86:cf:
                    3c:43:4c:68:62:ed:d5:7b:f2:2c:40:d3:97:da:1a:
                    fb:c5:13:7c:44:36:0d:34:d2:43:d6:36:ef:f8:7a:
                    86:c6:6d:e4:15:cc:63:5f:e8:10:f6:cb:98:8d:15:
                    07:f9:ed:f1:a6:e6:26:14:3c:16:64:ad:f8:85:bd:
                    2e:9e:b1:9f:3c:2a:f9:ae:ff:56:e2:34:18:29:9b:
                    68:60:3c:3e:09:26:5d:27:f0:62:c6:9c:25:bd:5c:
                    45:07:b1:f0:9c:f3:da:f1:52:1e:b6:4b:36:bb:5b:
                    48:d8:5c:89:19:2c:7e:b6:dd:04:2c:12:1d:94:67:
                    f3:61:ce:2d:b6:74:2b:12:27:df:9c:e7:98:0c:17:
                    ec:89:af:23:99:25:4d:6a:ed:73:5f:63:f1:ce:e1:
                    32:a5:be:f6:7a:cb:21:9f:37:96:98:43:e9:b6:7a:
                    d0:82:ff:5d:dc:a8:67:ec:38:26:21:4e:74:eb:5d:
                    53:98:fe:08:0f:51:74:db:82:46:76:53:db:11:18:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:29:56:C9:F1:3D:75:4E:48:C5:37:9A:B9:41:27:1C:92:8D:01:26
            X509v3 Authority Key Identifier:
                keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ad:b6:3a:86:cf:94:24:9c:55:db:d8:f0:07:e1:15:6e:1c:
         38:91:03:0f:d5:04:b2:42:8e:12:1b:e7:36:17:cc:4c:30:9a:
         2b:96:6c:4e:39:6e:24:c7:bf:46:ba:16:c2:95:2d:00:c1:12:
         3a:12:61:bd:02:8e:c7:78:6a:75:98:79:bc:78:27:f0:76:af:
         f8:8b:65:8b:21:58:9f:ee:76:8b:e5:22:61:31:aa:cf:29:54:
         c4:ad:4d:3f:51:0d:62:1c:ba:95:3a:41:05:a5:75:cd:4a:96:
         b6:db:4a:c9:31:74:84:eb:dd:61:21:55:cf:e2:5c:3e:b5:92:
         4b:37:f7:76:91:d9:75:1d:ae:6b:d8:b5:5f:27:88:bd:19:74:
         b1:17:34:09:21:cf:bb:8c:b1:a7:25:54:dc:d9:6e:45:c2:d1:
         46:2c:f6:c3:23:f9:48:a4:4e:34:e6:9a:15:c5:ab:58:9e:32:
         71:62:1a:9a:75:b0:18:38:97:0a:c0:83:06:e8:cb:9a:d6:65:
         00:28:75:85:b1:23:8e:a9:f9:00:bb:8a:03:98:d2:d5:7d:62:
         08:ad:48:d5:7a:e4:47:6b:c5:d1:8f:29:90:5b:ad:ec:d7:3f:
         27:1a:42:fd:a9:0f:a4:7d:b4:17:94:f9:03:7e:8d:86:38:42:
         a5:37:c5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:21 2026 by rpki-client