Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File:                     QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier:          7yR7PxH3FH3yAZDyQKgCnz6076FT+nJg2tef7qtcLws=
Subject key identifier:   79:E5:3F:12:C3:8C:12:20:A5:F2:6F:1B:51:12:19:33:C8:83:B4:D5
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer:       /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial:       019D9AAB7C4E3863BDD550745418B47E8E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number:          1811
Signing time:             Fri 17 Apr 2026 09:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:22 +0000
Files and hashes:         1: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: gyi6Ge9Us6nAMTCP4T+OEGH92rNUwZiJlizAX5bGJAw=)
                          2: cQtlxVVPO7JQa_rTQPIvZ0L_JT0.roa (hash: wGTkJ7+XtXJZbWxqtu6wY+OG6HIKs93TJ8T7CJvY3Ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:7c:4e:38:63:bd:d5:50:74:54:18:b4:7e:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
        Validity
            Not Before: Apr 17 09:00:22 2026 GMT
            Not After : Apr 18 09:00:22 2026 GMT
        Subject: CN=79e53f12c38c1220a5f26f1b51121933c883b4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:e2:08:12:cc:d4:42:85:e7:04:d4:aa:5c:
                    63:1f:85:00:f3:65:d4:1c:bc:a0:97:53:21:e2:25:
                    1b:6f:7b:df:77:91:6a:d4:4e:ce:51:76:c7:be:6e:
                    52:38:76:4d:b5:f4:94:82:47:35:76:e9:e5:5f:57:
                    3d:80:75:40:e4:3a:2d:e0:27:ea:a1:58:3b:25:5d:
                    bf:fe:10:80:0b:62:84:7a:62:d8:1f:cb:cf:37:8f:
                    9e:d5:c4:3f:d7:29:8c:e2:83:bc:12:8e:dd:3f:b8:
                    71:0a:9e:ee:67:55:cc:a7:8d:10:81:63:24:4e:ac:
                    e3:b1:c1:35:95:ef:22:45:50:f7:a3:c6:c9:e0:47:
                    6c:14:de:82:d9:a0:f5:fc:c2:dc:07:66:1c:31:a6:
                    8c:cb:b8:e6:da:51:bc:9c:7a:65:3f:49:e5:ef:b2:
                    0c:94:10:a3:f8:28:ae:0b:bb:29:8a:05:90:1f:fc:
                    6d:e8:db:17:2d:33:b5:56:30:f3:60:05:c6:d0:13:
                    a6:11:13:eb:b8:30:b3:65:44:0b:2c:80:a2:66:b8:
                    40:59:9e:6c:a2:2d:bb:ec:fd:ef:f6:fd:9b:0a:66:
                    51:e0:d3:bf:e2:96:e8:76:37:1c:2f:50:9f:8e:dc:
                    c4:38:4f:61:ba:bc:ea:76:ba:b0:fc:bd:9e:c9:9d:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:3F:12:C3:8C:12:20:A5:F2:6F:1B:51:12:19:33:C8:83:B4:D5
            X509v3 Authority Key Identifier:
                keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:20:67:a0:40:5a:73:dd:10:84:f0:ed:12:6a:d2:22:ed:ef:
         49:e0:a4:05:cf:f1:c5:fd:fd:be:2a:72:2f:30:f7:b2:8d:54:
         aa:57:92:b2:94:3c:43:d3:d0:ef:6f:60:fa:11:04:62:2e:02:
         c4:0d:bf:f7:71:55:c5:1a:6f:c1:ca:a1:f3:43:95:7e:15:15:
         01:dd:69:f5:5e:fd:42:e3:8a:85:e5:8c:4e:78:ed:86:52:99:
         21:d5:32:1a:be:52:d9:14:70:97:da:5a:32:2c:71:18:4f:15:
         e5:bf:50:ac:6e:bd:d8:57:29:98:1d:00:0a:e8:8c:06:3b:d4:
         59:61:98:e0:ee:57:25:08:5f:36:a0:2a:e8:c2:25:de:ea:d8:
         8d:90:3a:6d:84:1c:e7:bb:99:c5:3f:3c:45:0a:0c:a7:4e:f4:
         06:61:bd:c9:4e:f7:7c:3e:4a:1c:8c:85:1e:71:2e:59:20:1c:
         fb:1b:dc:a3:30:7a:3e:18:92:fc:5e:68:b8:a1:37:9c:38:6e:
         f8:da:64:59:f5:44:0d:87:cb:42:09:a6:f1:66:0a:57:ca:82:
         cb:65:ab:ce:0c:97:91:f9:c9:e3:3c:6f:cf:cb:9a:8c:85:51:
         35:8f:f4:61:ee:bd:07:d0:29:62:ae:a4:13:1b:f7:e3:dd:e0:
         d2:8b:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:04 2026 by rpki-client