Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File:                     QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier:          h/zAbjg3uYcTnhCe6jdDicMi/I03390qmAr/4LLLuMk=
Subject key identifier:   7B:74:16:FA:0D:19:BE:63:D4:8F:D2:13:BC:7B:3E:24:78:D5:2A:93
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer:       /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial:       019D99629B5DDBA1379F9CE627769423D741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number:          1155
Signing time:             Fri 17 Apr 2026 03:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:09 +0000
Files and hashes:         1: 1Nxx0TgOX3W2sPdrdUxayvvYBtk.roa (hash: BkBrVdmzVpfXD4QvBO8xygY9UajM60k/x4abGcDGbmw=)
                          2: 9enrJ1aLGA3RCeme7xBZCB62agk.roa (hash: vRnXuA5NETYBT1BeqdHLACLYGuovCr87R2REHEDrMcI=)
                          3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: YdLr/kOLkodC7BkiZTXZ7f4AraOQiLrN871INbUkEfQ=)
                          4: wSuoaH9wOLl866tBer1nWZMIWCc.roa (hash: IgY4urUfYKNfspzPi766lr6KcHLSrEwdZwQgGXHYG6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:9b:5d:db:a1:37:9f:9c:e6:27:76:94:23:d7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
        Validity
            Not Before: Apr 17 03:01:09 2026 GMT
            Not After : Apr 18 03:01:09 2026 GMT
        Subject: CN=7b7416fa0d19be63d48fd213bc7b3e2478d52a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:55:b2:ba:72:8c:44:d9:dc:fe:f5:96:d3:f8:
                    7b:74:93:55:5a:3c:04:b3:0c:6f:11:75:63:a3:ff:
                    10:ad:66:2f:a1:ad:a5:0a:d6:60:06:83:3e:0f:8c:
                    e5:fc:04:e3:8b:18:c0:c0:4f:c3:b5:32:51:b1:2e:
                    d6:9c:84:72:df:35:2f:9e:21:b8:e8:56:3c:3b:65:
                    0c:dd:a0:43:6e:4b:f5:7c:3a:28:95:10:0f:bd:3c:
                    fd:ca:bd:80:3d:85:49:22:4c:83:d6:f3:61:7f:5a:
                    72:51:c9:3a:76:c5:35:9b:9e:7a:f6:b5:6c:0d:59:
                    f7:6f:16:78:fa:5c:fd:7f:7d:21:d3:e4:1f:1a:76:
                    56:71:47:bf:47:e0:89:02:ba:4a:43:ff:1d:c1:6f:
                    03:94:c5:d2:2b:51:4c:6d:dc:ff:df:6f:6e:79:7b:
                    ec:61:9a:08:3a:71:d9:ba:09:12:55:88:6d:bd:55:
                    27:22:b7:b1:22:ff:df:da:ec:af:0f:0e:83:f3:d7:
                    c0:27:e4:25:5c:df:42:44:1b:45:54:4a:0c:0d:97:
                    ce:6f:81:c4:5c:d5:ed:8a:21:9b:16:46:f6:ff:57:
                    49:7f:f5:3a:c5:4e:61:ae:77:bf:3c:2e:76:91:f6:
                    ba:84:7f:47:39:24:4e:3e:14:0d:44:b0:a6:68:96:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:74:16:FA:0D:19:BE:63:D4:8F:D2:13:BC:7B:3E:24:78:D5:2A:93
            X509v3 Authority Key Identifier:
                keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:41:f6:4b:0c:f8:b7:9e:2a:60:ec:45:7e:13:52:1e:34:69:
         29:4f:6e:b1:a8:24:cb:c9:2b:6b:94:45:01:77:9c:36:88:8f:
         eb:be:c5:19:c0:77:9a:93:2d:5e:dd:91:c0:7f:fa:53:13:d1:
         9f:3b:fa:64:3f:21:c8:12:47:7b:58:8c:17:3a:0b:71:05:cb:
         66:f4:e6:e8:51:c5:8e:58:c7:b1:89:b6:e3:9d:82:b5:d5:44:
         3b:92:8d:42:68:f2:6d:d0:9c:62:67:3e:d2:55:96:37:ab:ff:
         81:3b:2d:cb:c6:a0:13:6e:7d:e5:0e:f9:f4:30:21:ac:8c:c0:
         c3:74:18:0b:fd:ce:4f:2e:9f:26:8f:ac:ea:49:ea:17:bd:3a:
         f9:5b:93:e2:03:13:22:07:d0:83:f0:d2:7c:be:83:f5:5a:d5:
         eb:fa:a8:7f:7f:dc:70:54:44:e0:ca:8d:05:62:93:21:57:18:
         98:94:99:92:ed:a4:f9:eb:d2:e1:af:38:fb:c4:fb:fa:fe:c0:
         56:4b:76:71:f3:bc:1c:26:9c:af:bb:50:32:f4:68:37:dd:c2:
         9e:9f:e6:17:6c:5c:1b:43:17:04:79:fd:a0:86:ee:f2:92:37:
         50:1a:22:8e:58:6f:a1:9c:1e:d4:b9:1f:64:25:f0:83:33:7c:
         54:4a:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:39 2026 by rpki-client