Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File:                     qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier:          g7whJyxFFmYsVBWTHxOvBEBVIKzdNtpv5tZKCsjdBZk=
Subject key identifier:   64:54:CC:50:E5:B9:6C:ED:11:71:8D:B8:9D:D0:BA:2E:67:40:4B:DC
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer:       /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial:       019DA4C16220FE83F7397B39EECBF3144A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number:          0174
Signing time:             Sun 19 Apr 2026 08:00:30 +0000
Manifest this update:     Sun 19 Apr 2026 08:00:30 +0000
Manifest next update:     Mon 20 Apr 2026 08:00:30 +0000
Files and hashes:         1: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: gie+msGNT+Cu6E1PG+ZayMks5IPAERY8FaA1KrYscw8=)
                          2: snjhD4ZbdnCjhHGNejLaziB-EQw.asa (hash: k4YrVwNF0xC0R0c1Vt2SsaD9GQCIRybl7XtCYC8QQBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:62:20:fe:83:f7:39:7b:39:ee:cb:f3:14:4a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
        Validity
            Not Before: Apr 19 08:00:30 2026 GMT
            Not After : Apr 20 08:00:30 2026 GMT
        Subject: CN=6454cc50e5b96ced11718db89dd0ba2e67404bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:22:c8:37:73:62:04:14:3c:26:bc:b8:ea:
                    a5:ab:7c:0a:cd:45:ca:31:ca:bf:17:35:6e:0b:5e:
                    9a:ef:60:69:82:05:df:67:80:01:3a:5d:ca:fc:ad:
                    ed:56:e2:2e:2a:f1:fe:59:08:5c:53:fc:41:91:b8:
                    2d:af:de:9d:d8:41:1a:a7:82:43:b5:b3:02:f1:f4:
                    33:81:fc:1e:e5:01:4c:43:f4:89:81:d5:77:64:0f:
                    ad:4e:45:77:69:29:84:be:be:eb:94:9f:32:02:fb:
                    b4:48:eb:cd:d9:e8:83:1d:97:72:df:ed:58:eb:c8:
                    fd:00:90:53:07:02:b6:26:5b:19:1f:b9:4b:4e:30:
                    de:fa:83:a3:76:e3:e7:34:fc:ab:49:99:b4:8e:8a:
                    6e:5f:e7:06:40:cc:c8:65:0d:87:c0:ff:65:b9:7d:
                    6f:ad:64:90:fe:78:68:48:c6:6b:97:fb:64:0a:98:
                    63:f2:77:03:f5:3e:2d:34:d9:d0:99:c8:36:05:4b:
                    fd:d4:3f:5d:d9:d6:3c:c0:38:bb:fd:ba:81:0d:1b:
                    31:08:78:b5:36:fd:98:52:1d:d9:32:56:34:fe:50:
                    67:f2:ce:63:c1:2f:b8:d9:a9:cd:89:20:6f:c5:b7:
                    b7:43:05:ff:17:17:37:eb:ba:fa:78:5b:90:b7:d8:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:54:CC:50:E5:B9:6C:ED:11:71:8D:B8:9D:D0:BA:2E:67:40:4B:DC
            X509v3 Authority Key Identifier:
                keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:74:7f:d5:c4:51:17:6e:59:d9:2e:b5:81:91:9e:3c:9a:
         6a:1f:d9:19:4f:c3:40:2c:32:f2:7b:b0:52:1c:a8:d0:ba:48:
         69:ce:ee:37:9a:56:ef:81:a3:dd:39:90:62:5a:69:ec:3d:d9:
         a3:34:f0:af:e7:7a:a5:b4:b7:28:19:a9:38:b0:83:83:be:52:
         a9:b8:a3:38:8e:44:60:61:e0:46:70:39:b5:4d:23:99:e2:93:
         c2:b5:26:10:ab:3b:01:c7:43:f7:61:dc:58:9c:1c:58:cf:96:
         f5:40:9a:29:da:75:e9:f5:5d:f7:c2:24:1a:3e:b4:2f:09:e6:
         93:2b:e0:72:e5:ed:a5:9f:0e:05:21:3c:24:a9:93:d5:25:f1:
         ee:80:9b:f6:67:45:d1:6e:25:55:5e:d8:09:a9:47:c4:26:75:
         b6:b3:cd:28:e7:aa:27:cf:a0:d9:ef:87:79:3c:9a:bd:e2:41:
         f8:04:31:ee:93:1b:c1:38:d0:ba:28:7a:eb:82:ba:ad:84:f2:
         5b:51:e0:42:dd:ed:85:37:94:f6:e2:52:90:7d:fe:c9:5f:f3:
         a6:d8:c3:9d:8a:d1:4d:71:85:6e:80:87:7a:a1:ad:b3:5c:15:
         82:87:fe:26:30:14:bc:fb:b9:a1:3a:54:8b:8d:48:82:9b:bf:
         84:1e:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:50:09 2026 by rpki-client