Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          GQrOee9Cii5IW6K79/oYgU6sDIvcByYCnbZKykwgsik=
Subject key identifier:   67:9E:32:BC:2A:A9:D3:E0:CD:C4:3A:6E:55:24:ED:30:39:29:35:90
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       019D992B8C1947032B3763739B96F2D0B827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          094F
Signing time:             Fri 17 Apr 2026 02:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:00 +0000
Files and hashes:         1: 1--6A0fn2NhA1NZd62Q5I9zcdB1E.roa (hash: EH25i1o06YPHiAuJedj6ere5DhO1CqohFt6zhHaGS9w=)
                          2: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
                          3: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
                          4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: qOs5ioKbyHa9BLoOoEGu0pWF7w+K/pWJAg/MmyGnv7s=)
                          5: sef3oIWVUvY_zvFY7Q-dmEYwMeM.roa (hash: KUYDRoZPtUS/Sglg5oZKEXcSGG037brQKOBSD2zs9MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:8c:19:47:03:2b:37:63:73:9b:96:f2:d0:b8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Apr 17 02:01:00 2026 GMT
            Not After : Apr 18 02:01:00 2026 GMT
        Subject: CN=679e32bc2aa9d3e0cdc43a6e5524ed3039293590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:65:a9:96:7d:76:fc:d9:f2:6c:ce:be:c8:
                    b2:c5:8c:c9:da:d9:0e:04:c0:a3:e3:b0:61:35:19:
                    0d:b8:73:7a:ec:8b:eb:b2:aa:8c:e3:1d:17:99:86:
                    73:4e:51:62:29:8a:cb:f6:b1:1c:bc:b9:cc:25:5d:
                    67:71:7d:29:7d:dd:81:82:05:ce:82:06:fd:c5:cf:
                    6c:41:fb:be:1e:bf:b1:ec:f0:a6:21:74:93:6e:e1:
                    f2:c2:6e:7c:ea:cc:8a:05:d0:c6:a5:78:f8:86:7b:
                    37:c8:71:d3:37:62:a5:37:2b:55:10:be:eb:d9:6d:
                    b6:81:3f:37:73:27:83:5f:87:2b:50:d6:81:1b:d5:
                    2f:23:27:7e:36:36:17:53:ce:0a:40:f3:cf:00:27:
                    a0:0b:e1:79:58:10:66:0f:c5:46:2b:ef:4d:53:ac:
                    2c:05:7d:b3:63:ac:77:39:94:56:0e:d2:8f:b4:50:
                    5c:2b:53:bd:03:4d:7a:49:8e:30:12:3b:aa:c6:3d:
                    f9:0b:8b:32:ab:e4:34:da:80:87:2a:ac:e6:36:f9:
                    9e:2b:74:62:48:f1:a3:b3:96:de:f9:f4:4e:27:2b:
                    4d:b9:00:7d:05:de:81:30:67:ee:bb:a1:85:1d:3f:
                    4c:50:18:f9:66:c4:29:80:77:f5:50:af:44:d9:ed:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:32:BC:2A:A9:D3:E0:CD:C4:3A:6E:55:24:ED:30:39:29:35:90
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7d:db:5a:8e:a7:3a:22:a2:bc:78:6d:da:06:d0:48:da:fc:
         49:cf:06:55:6d:67:9e:9a:ec:20:a6:5c:e7:c8:94:76:91:4a:
         1f:02:e9:37:c8:1a:34:3b:e6:9e:60:b0:0f:1b:c7:40:4e:b6:
         99:07:16:12:53:fc:c0:20:27:89:c7:54:49:0d:72:9f:99:81:
         e9:96:02:9e:46:45:0e:e6:19:da:fa:b2:23:4c:c4:9a:3a:41:
         9c:93:7d:e0:94:a6:65:a1:66:ed:f5:9d:21:01:16:61:b0:6d:
         d8:fa:7d:27:5b:d3:bc:7d:2b:ba:18:e0:c4:2d:59:de:a8:dc:
         70:35:ae:f7:7e:80:76:c9:8a:44:62:93:3b:56:79:93:20:49:
         87:7d:69:69:d8:81:76:1c:2c:d9:8a:b8:6a:9f:13:03:7d:4a:
         97:a1:d6:3c:1d:c8:c7:7d:cd:82:54:83:0d:bf:5a:12:31:8e:
         13:24:8d:d2:b1:4d:10:41:99:94:12:f3:e9:50:85:7c:ba:00:
         6d:4b:35:45:5b:37:91:22:56:85:0e:1d:2f:3e:57:7b:1d:57:
         56:cd:d8:37:20:ab:e7:c0:5d:96:cd:9e:ae:99:0f:19:41:e4:
         1a:c3:ce:ad:ed:7b:1a:1d:b8:55:14:58:52:ee:88:f2:ca:a6:
         fd:97:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:20 2026 by rpki-client