Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
File:                     QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json)
Hash identifier:          3rEOAODWJIsxtuoAxAP3BAAzjS9zDSJOVUXu+MvfK9o=
Subject key identifier:   50:28:4B:A3:D4:9F:92:C3:7C:F2:4D:4E:A3:BB:16:90:D8:72:C9:BD
Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Certificate issuer:       /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Certificate serial:       019D9C2C89774EC201C9D952FECECA8E0DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
Manifest number:          081F
Signing time:             Fri 17 Apr 2026 16:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:57 +0000
Files and hashes:         1: 1-Xi8qsCjZ_PQpe6NJ6-T2dzR4GM.roa (hash: zBTP7ZR26XJl8LaBef5EoQw5nxBQyUiQLy+rkLHHEk0=)
                          2: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: aGFH4MjRItn32j7/Dzt1gI8ccivgU/k/9b/EVU1rvQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:89:77:4e:c2:01:c9:d9:52:fe:ce:ca:8e:0d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
        Validity
            Not Before: Apr 17 16:00:57 2026 GMT
            Not After : Apr 18 16:00:57 2026 GMT
        Subject: CN=50284ba3d49f92c37cf24d4ea3bb1690d872c9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7f:71:11:d5:d5:14:41:c8:99:bc:ca:0d:b1:
                    18:37:63:16:58:68:52:68:ed:db:e8:43:18:15:11:
                    16:67:13:43:e5:26:0c:f7:21:09:d6:dd:5c:6d:08:
                    60:c8:83:5f:5f:32:42:7e:64:d5:2a:5d:bc:a4:a2:
                    94:af:df:b4:13:dc:fd:e7:d2:0f:61:83:27:75:c7:
                    7b:59:da:e3:fb:9c:70:77:76:a4:6b:69:dd:51:5f:
                    e7:0d:e8:f8:ce:6a:78:a7:9a:99:41:4c:4a:e5:90:
                    df:42:fb:e1:2f:e7:34:cf:46:e1:1e:08:08:4e:74:
                    58:b1:88:97:c1:c2:c2:2a:6e:51:9a:82:a8:fb:fb:
                    6e:48:1c:42:16:cf:90:9a:0d:f4:b8:e4:64:13:92:
                    71:94:ed:4e:55:85:7c:4d:25:a6:89:51:24:b8:89:
                    61:ac:85:01:91:f7:84:dd:99:77:38:fc:25:d8:f9:
                    ec:6e:7b:e8:a0:03:25:99:7d:00:cc:6a:f6:7c:46:
                    c9:de:ec:cf:73:32:e7:53:0b:6d:cb:48:ee:3d:e3:
                    50:20:0a:69:7f:33:7a:fb:05:d3:c1:c4:28:d1:44:
                    f4:96:e2:28:1d:81:e5:b4:1b:60:c3:72:0d:ab:e0:
                    31:06:82:a1:6a:8d:12:cd:03:16:38:7a:23:2a:45:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:28:4B:A3:D4:9F:92:C3:7C:F2:4D:4E:A3:BB:16:90:D8:72:C9:BD
            X509v3 Authority Key Identifier:
                keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:de:4a:d6:b0:a0:de:d0:56:2f:ae:c0:ac:d6:39:a4:53:6e:
         9b:d0:d1:28:5d:70:e5:04:b6:78:55:ff:20:f2:fa:07:6f:9f:
         de:e5:a2:fb:23:12:a3:35:7b:50:f7:ef:b5:94:2b:e0:9c:71:
         7f:66:77:6d:0f:ce:84:54:c3:a1:07:d6:2e:ec:bd:b6:7a:91:
         62:7a:ae:25:6a:69:89:7e:f2:94:0d:e4:03:73:31:a9:a0:8e:
         22:49:49:de:cc:15:e7:ff:de:53:c7:7c:cf:e4:89:7e:a1:79:
         74:a2:b8:0f:74:2a:64:ac:68:88:8a:6b:3b:5c:59:1b:ac:59:
         01:bb:7e:8a:e9:a0:48:8d:28:a0:ce:fe:5e:46:fc:2e:14:0e:
         22:7c:03:c9:e9:36:93:b8:3c:d9:74:30:f6:f7:42:72:be:4b:
         11:1a:9c:22:d8:b3:db:ad:33:e9:86:35:c1:2b:f4:7c:49:07:
         7a:c8:01:42:27:3a:1a:32:51:50:8a:b9:a5:a2:22:9e:98:2d:
         fa:dc:96:bf:ed:58:ff:12:a9:22:f7:ef:f0:cb:9c:dc:51:87:
         85:59:d0:98:3d:ff:fa:49:7c:81:20:fa:c8:57:b2:15:b6:06:
         6b:af:a7:0c:9e:1d:31:9e:cd:7b:e6:50:f0:37:6e:09:2f:4f:
         00:d0:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:28 2026 by rpki-client