Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          SHna4gYle84nURiJx9N7+8310wchE8s+FxidKq4vZW4=
Subject key identifier:   08:EC:A1:D2:3B:0C:D6:EF:50:70:DD:83:FE:1E:81:BE:FB:8B:68:41
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       019D992B369672717E868AAED2F522E59604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0F98
Signing time:             Fri 17 Apr 2026 02:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:39 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: SOLvFWZkcQlJk07qFL7ptfKUm6+ty0KOAG03aTgByvs=)
                          2: X9p1dpq5cNTg4oaZ6x30uyHelQI.roa (hash: D5fNoAic1Tp57BY17A3hU+C+OdDJaGcq/k7ZyehvTB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:36:96:72:71:7e:86:8a:ae:d2:f5:22:e5:96:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Apr 17 02:00:39 2026 GMT
            Not After : Apr 18 02:00:39 2026 GMT
        Subject: CN=08eca1d23b0cd6ef5070dd83fe1e81befb8b6841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:8d:b8:4b:66:51:37:bb:9e:04:68:fa:5b:
                    8a:3b:54:db:e4:4b:59:60:3f:25:a3:9c:42:69:64:
                    1e:ec:0b:26:dd:77:0e:bf:26:8b:27:17:4d:35:60:
                    97:be:35:89:a3:62:f1:bb:29:23:9b:3e:00:c1:03:
                    8b:ce:ec:ba:77:0f:34:3b:78:99:19:5d:4a:8a:c2:
                    60:74:b7:93:7b:15:8c:a7:99:e2:4c:e3:95:2d:4e:
                    b4:01:c3:ab:e8:a8:02:83:2c:f0:c1:12:5d:04:0b:
                    c0:8d:d4:38:30:99:44:03:8f:b6:47:9b:38:f0:46:
                    48:e0:34:ce:ec:60:cd:71:84:c9:e2:98:58:3c:35:
                    3b:97:2b:f5:ec:00:0a:50:b9:25:52:b9:6a:b2:dc:
                    8f:fb:35:11:28:ba:0e:bb:ab:30:c3:93:25:84:45:
                    cb:5b:0f:1d:66:37:9f:25:0e:86:0d:c4:42:39:0f:
                    ef:fc:ba:cc:6e:f0:9f:92:24:3e:c4:7a:f0:cb:53:
                    53:16:32:85:c3:de:4e:fd:a1:4b:75:ab:f5:6e:e8:
                    ff:51:b4:94:9a:94:6a:f1:fd:80:c0:17:e9:7f:fb:
                    11:ac:15:c4:16:aa:dc:0f:1c:ae:c3:1f:a4:25:68:
                    3a:8b:94:db:2b:dc:78:df:0e:63:db:b9:0c:91:f0:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EC:A1:D2:3B:0C:D6:EF:50:70:DD:83:FE:1E:81:BE:FB:8B:68:41
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:63:57:84:b4:06:83:e0:48:f4:93:5d:66:05:23:92:d8:46:
         04:a6:c1:ca:bc:68:b8:ff:c6:f8:20:bc:72:8f:99:18:8d:93:
         3f:f4:48:2f:dc:aa:62:cc:fc:c6:91:f7:94:37:2b:23:b6:97:
         82:8b:ab:39:69:00:c1:73:2c:ed:7f:3d:af:7e:82:6a:96:c6:
         01:5e:ce:06:90:a4:bd:bd:bd:31:7d:3c:95:ff:84:61:bc:6f:
         4a:b9:15:b9:0f:94:2f:78:73:aa:95:11:fc:e0:6f:b9:8c:d0:
         62:49:4c:78:79:87:6f:cf:09:ae:2b:db:24:ff:f4:51:74:5d:
         b2:4c:a1:34:f9:97:a5:c5:98:1a:4c:75:f4:74:4d:88:88:9f:
         bf:a3:5e:1d:8a:a5:ac:a6:34:a4:cb:8f:49:11:68:4b:1b:92:
         95:fa:a2:df:d0:7d:ba:e0:ed:95:fa:83:97:d0:7d:b7:4d:c3:
         90:e2:8a:bd:de:7c:2a:fc:86:24:71:6d:61:cf:c3:98:f0:fe:
         67:9d:7c:40:d5:2f:56:d3:09:29:28:3d:8c:57:22:0c:33:f5:
         78:f1:45:4d:70:b6:f1:9b:b2:98:33:b9:3b:a0:54:58:32:d3:
         1b:14:f6:1a:65:d5:85:02:db:c7:4a:04:ff:0c:1a:3c:06:ed:
         ed:ec:69:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:57 2026 by rpki-client