Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
File:                     qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json)
Hash identifier:          Ei0izbNSY+FcYnqbT4nbjG/+ClXjmMUonRZBxoxwBRg=
Subject key identifier:   AF:2B:AE:C4:4F:61:6D:5F:B1:84:3C:F5:62:0F:2C:B2:31:88:3D:E2
Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
Certificate issuer:       /CN=ab19000781c183366cba55416fd75b57dba0e4bb
Certificate serial:       019D9818E05B10FD4E44F699671B8C12474D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
Manifest number:          0591
Signing time:             Thu 16 Apr 2026 21:01:00 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:00 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:00 +0000
Files and hashes:         1: UBF65ckkUeTb5TbQD9-moIuJwLc.roa (hash: RrSAA6sqxIszGdOffmEq9g8ZmL1cSXwchcGnATyPrPg=)
                          2: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: QGxdhvxyOR//knhA+EWS4/bRyWwcjeI+RWgVaEyxTrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:e0:5b:10:fd:4e:44:f6:99:67:1b:8c:12:47:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb
        Validity
            Not Before: Apr 16 21:01:00 2026 GMT
            Not After : Apr 17 21:01:00 2026 GMT
        Subject: CN=af2baec44f616d5fb1843cf5620f2cb231883de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:4e:e1:d8:49:d1:65:28:94:94:f1:2e:63:
                    d9:c1:77:05:f4:2b:11:4b:32:20:4f:27:4a:36:6c:
                    a1:a5:6d:7d:48:6c:55:c9:f1:cf:b6:10:44:f8:7a:
                    e0:4a:33:9a:86:b9:af:84:c2:57:64:6d:58:e5:4b:
                    d9:d9:06:b6:3f:8f:64:dc:30:7e:5e:ec:10:3e:e7:
                    72:c6:e8:cc:c3:02:e5:66:64:6c:39:7b:7f:c6:04:
                    5b:fc:04:33:5e:cb:50:0d:85:09:ef:62:21:f0:d5:
                    78:55:05:83:73:a5:cf:18:19:40:da:59:7e:24:d1:
                    5c:1b:9d:d8:e4:0d:34:dd:64:cc:f9:a8:c3:f5:5b:
                    5f:2f:d2:86:9f:3f:bf:de:2b:52:19:11:d9:a9:23:
                    b6:e1:4b:2d:8a:b6:6f:a8:84:97:d8:13:29:f5:2a:
                    17:5f:35:27:02:00:dc:8d:bb:65:52:bd:ad:f8:90:
                    ab:4a:2a:52:e6:bf:eb:ce:b6:28:7a:95:69:38:9f:
                    98:87:72:28:21:58:8d:a5:bf:86:55:3a:8f:5c:b7:
                    93:1c:64:db:2c:3c:77:f3:d1:66:e9:86:d4:73:e7:
                    3a:b3:17:00:83:7d:34:f0:43:2a:c0:4d:b6:d6:56:
                    6b:c9:83:b1:cd:71:58:4c:9d:a1:91:ae:29:12:2c:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2B:AE:C4:4F:61:6D:5F:B1:84:3C:F5:62:0F:2C:B2:31:88:3D:E2
            X509v3 Authority Key Identifier:
                keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:45:ed:b2:5b:24:6c:dd:df:c0:9f:06:61:e6:5d:69:92:72:
         58:a1:af:2a:82:78:54:c8:d7:a7:f8:5c:27:8a:d7:3d:06:e3:
         26:a5:fa:31:4f:82:7c:3f:0a:95:03:34:b8:2e:4b:9b:76:6f:
         ac:09:bc:83:dc:33:40:a4:30:c7:3d:72:b5:17:77:c6:aa:a0:
         f7:e6:b3:27:79:42:bf:f5:4f:7f:2a:6b:bc:f9:82:77:a5:49:
         7f:3c:76:01:11:f2:d5:2d:c6:3f:5f:3a:2e:2e:fb:8f:e9:d6:
         bf:70:b7:c1:45:ef:d0:e0:1a:99:25:3f:cf:83:8f:e3:f5:57:
         e0:ea:00:47:b9:10:4f:86:1f:73:b3:32:03:b8:9b:4a:6d:8a:
         8c:89:ef:1b:5d:e1:37:65:09:80:c3:18:ea:39:7f:12:b8:1e:
         3c:ce:40:41:c5:ba:4a:6d:c5:78:e9:b0:28:ef:59:51:b9:7a:
         f8:bb:38:39:a9:32:a5:0a:82:75:71:f6:14:74:29:e5:94:b9:
         c4:82:f0:de:36:86:32:84:ed:90:00:11:d9:c2:b5:af:f9:33:
         7d:5a:a6:ee:36:eb:28:d9:5d:a4:6e:a2:01:76:35:c0:5e:a4:
         41:e9:72:30:5d:8e:e9:8d:93:22:77:e2:18:34:c0:bb:3c:97:
         91:ad:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:02 2026 by rpki-client