Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
File:                     R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json)
Hash identifier:          cEfhXZaHpKXYpLfiHWTnnN7S2UTkpef+dFFKOs+uPMs=
Subject key identifier:   67:B0:13:4C:86:4F:7A:3B:C6:DF:27:9F:B9:E2:1F:A4:CD:8B:E6:49
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Certificate issuer:       /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial:       019D981903252534420EDDE6534F07DAA620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 21:01:09 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:09 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:09 +0000
Files and hashes:         1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: uxFpcYcsTef6pwNGE3qxCGnQgWVixB+GTfRsSJ/4Ig0=)
                          2: elreK20YpaSo7u9v55jxGF5rHO4.roa (hash: lrIYGG9SdGCcfazBvX7lzn+XdBdxuXWCr/oHZ+PyxD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:19:03:25:25:34:42:0e:dd:e6:53:4f:07:da:a6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
        Validity
            Not Before: Apr 16 21:01:09 2026 GMT
            Not After : Apr 17 21:01:09 2026 GMT
        Subject: CN=67b0134c864f7a3bc6df279fb9e21fa4cd8be649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:14:a2:81:44:33:2c:f4:96:67:ed:2a:8a:
                    20:8a:42:cc:8f:66:58:07:00:18:e2:35:2f:bf:04:
                    cf:bd:54:c5:e8:61:af:52:3b:aa:38:84:70:f5:d8:
                    ae:22:a0:50:72:df:cb:08:e8:4f:5e:83:3a:0d:7d:
                    19:d7:97:d0:d2:49:42:63:66:dd:1e:7d:49:e4:26:
                    54:63:37:63:80:41:d4:f0:64:b4:f3:fc:a7:e3:2f:
                    05:bf:5c:a3:5b:31:5a:80:5a:51:45:2e:59:a8:45:
                    ae:49:8f:87:a5:dd:30:ba:0c:04:16:67:af:92:8f:
                    3c:2c:06:f6:fe:cb:ff:fb:d1:21:27:72:47:61:bf:
                    44:77:9e:55:91:2b:9e:e2:43:f6:c3:9b:df:a1:56:
                    ef:e6:a4:59:3f:2d:ed:e2:ec:34:17:d1:52:1f:f1:
                    33:aa:68:12:03:65:1d:d8:8d:2e:46:1f:3f:8d:3f:
                    8a:a6:9c:78:e5:a6:3a:a8:5e:fc:1d:dc:d0:58:5a:
                    7e:a5:af:37:47:68:d8:61:53:86:25:02:c0:68:41:
                    3f:ce:22:46:c5:b9:bc:bc:12:5e:c9:81:b6:db:a7:
                    aa:93:d6:92:d8:40:eb:bc:13:5f:30:d4:2c:41:20:
                    67:01:58:2c:a8:ab:a2:14:92:1d:bc:0d:23:2a:58:
                    fc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B0:13:4C:86:4F:7A:3B:C6:DF:27:9F:B9:E2:1F:A4:CD:8B:E6:49
            X509v3 Authority Key Identifier:
                keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ef:e5:e4:54:eb:c9:ba:90:d1:b4:d7:99:5c:5c:e7:3e:6d:
         b1:bb:75:1c:b2:66:a2:52:c8:ae:bf:d3:1f:eb:c3:00:e8:53:
         3f:e1:c9:80:c2:6e:9c:0c:8f:39:60:ab:35:74:93:09:e8:7b:
         e3:f6:00:e9:c7:49:aa:59:ed:e5:ae:a4:ec:bf:3a:70:8f:50:
         91:0b:1e:b3:2c:f3:7b:93:46:1c:40:7e:e6:6a:b7:29:6e:d7:
         b5:b7:51:bc:ad:71:2c:6c:96:79:3c:00:13:d9:76:6e:71:10:
         d5:d5:fb:7b:ad:de:d3:26:15:b6:a6:07:c5:58:50:c9:8f:7d:
         60:92:a4:46:3d:6f:a5:8e:74:c6:8c:76:79:55:2f:41:cf:ce:
         64:04:55:f9:3c:4d:58:bb:20:1e:01:d6:6d:20:d8:8c:77:d5:
         05:25:de:50:d0:5d:4b:70:80:66:dd:55:1e:46:4c:01:cc:c3:
         d8:91:b8:72:43:4d:29:3b:57:e8:7a:3e:45:29:1e:19:85:3d:
         64:a8:46:b9:68:3e:b3:ba:09:e8:8b:ad:4b:2b:c4:c1:70:42:
         0e:93:d0:3c:36:ac:1a:85:6a:7a:d3:f9:e6:30:cf:0e:6a:0b:
         a0:4b:7c:f3:e2:f3:a8:34:f4:d3:5b:e1:06:9b:d8:24:1d:ec:
         59:d4:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:15 2026 by rpki-client