Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
File:                     qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json)
Hash identifier:          aFEwlZACVszo/L0YuFx1pJ1srfn7fYpWqflJuCSvYAQ=
Subject key identifier:   B9:84:70:5B:11:BE:58:13:37:80:E4:A7:3E:40:2E:13:BD:75:6A:B4
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Certificate issuer:       /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial:       019D9AE301F01865863CFDFB6A1B9A5A0903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
Manifest number:          062F
Signing time:             Fri 17 Apr 2026 10:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:01 +0000
Files and hashes:         1: 6sa9q4Dov1lYR1zbGcSJqHuAACs.roa (hash: dZJcWFj8zVWM8Kfo82Oh4jZ+RxNvw0lQ3GRg+Xs1t18=)
                          2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: rjcFbT6NRCf4MZA5D4RWJI+fqgEkhhPkaj3cAgMy2RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:01:f0:18:65:86:3c:fd:fb:6a:1b:9a:5a:09:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
        Validity
            Not Before: Apr 17 10:01:01 2026 GMT
            Not After : Apr 18 10:01:01 2026 GMT
        Subject: CN=b984705b11be58133780e4a73e402e13bd756ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:17:96:ec:a9:f0:fb:85:6b:3d:72:a1:a0:59:
                    2d:32:11:3c:3d:81:4d:97:87:6e:b6:26:ec:fb:75:
                    ef:ed:2f:33:8c:90:22:b3:bf:11:94:ae:1e:ce:1e:
                    b4:0b:10:27:09:fc:79:e4:61:b3:27:31:44:b9:0e:
                    e3:60:de:27:9a:b5:74:69:16:69:c6:f8:a0:66:5b:
                    4f:e6:c1:76:53:03:29:2d:01:e9:46:6a:1a:4d:e9:
                    2f:32:09:ef:1a:e2:94:5a:3c:c8:f0:c6:7d:c3:0d:
                    c9:2a:0c:76:c8:41:46:72:13:33:d7:26:99:1c:3d:
                    ee:f0:ec:81:37:fa:60:26:ff:e7:c3:ee:be:c3:bd:
                    0a:26:7a:7f:85:41:cb:d5:12:9e:7c:1d:5e:be:ed:
                    1b:4b:2f:ca:31:72:fd:1c:22:2e:bb:07:5f:c4:2e:
                    21:e0:67:b6:62:1d:e5:49:35:78:2a:25:0a:63:86:
                    8a:fc:4b:9f:f2:12:4a:32:dd:13:60:72:8e:2a:3f:
                    9f:24:59:20:2e:6d:0b:39:7c:65:0b:6d:39:3f:88:
                    a7:2c:ec:95:c5:4d:53:7a:a3:05:33:6e:62:4e:c3:
                    c3:96:16:03:5d:23:38:ca:42:12:86:1a:1f:97:f4:
                    f7:75:75:75:c4:47:2b:d5:af:bf:f2:12:d2:18:5c:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:70:5B:11:BE:58:13:37:80:E4:A7:3E:40:2E:13:BD:75:6A:B4
            X509v3 Authority Key Identifier:
                keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:3d:d2:d4:e4:5a:6c:61:d2:16:76:8b:23:a4:70:6b:00:71:
         e7:34:f0:aa:f5:4c:3e:a3:b0:21:f0:2a:bb:0a:50:18:68:d6:
         2d:bf:87:ad:ec:3c:c5:0e:ac:f4:4c:03:31:ce:6c:60:d5:ff:
         8c:67:89:b0:62:36:9f:e3:98:16:38:53:a2:d1:dc:48:09:d1:
         e1:93:31:96:34:90:dc:03:0e:88:bc:e2:1d:b8:67:36:d1:49:
         7c:0d:d0:bc:d4:9c:a2:4d:be:ad:96:09:30:d1:8a:cb:f8:a3:
         29:8f:70:c8:09:31:c9:3f:ea:be:76:95:e5:b4:cf:49:6c:1f:
         47:46:7d:1f:ed:15:c6:2d:21:fa:bf:40:b9:f2:6f:a2:cc:43:
         85:9b:79:6b:a7:47:e3:34:7a:92:ac:53:0a:97:ac:5f:f3:63:
         90:6b:04:85:4a:59:93:11:5f:bf:fb:9a:b7:5d:49:39:e2:85:
         b6:e3:6a:94:28:b1:31:37:55:e8:f8:76:81:31:bc:9a:f2:96:
         c9:0d:7c:56:38:c9:c7:48:77:cf:ef:15:06:b5:b0:cc:58:80:
         97:39:27:7a:47:d1:46:b5:5a:38:87:4d:be:be:72:b8:8d:35:
         eb:9b:8b:9b:00:f5:ae:76:be:e1:f7:bc:0e:e5:15:24:8c:61:
         86:f9:1f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:42 2026 by rpki-client