Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File:                     QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier:          xEzCR5ZurIPPhH//R3O5QRbZ2OwxLF0x/J4dR9JeQ7U=
Subject key identifier:   E7:21:A0:EE:03:CC:AF:D7:C3:47:3A:54:75:41:8D:C3:B3:7B:BD:DA
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer:       /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial:       019D98863F71DDE5459D5B36C1E12ACB2756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number:          0E57
Signing time:             Thu 16 Apr 2026 23:00:27 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:27 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:27 +0000
Files and hashes:         1: 0Jg7s7B0eDOPqjSebZ4xs29JMA4.roa (hash: XJ/7frWB/oqCLp6nsdiA6o9FourwsPzfzhxnxLyO4xE=)
                          2: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: 9emvMfu2gqglCbuGANun7qLC1mS9wbH5GrdJDUBHVek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:3f:71:dd:e5:45:9d:5b:36:c1:e1:2a:cb:27:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
        Validity
            Not Before: Apr 16 23:00:27 2026 GMT
            Not After : Apr 17 23:00:27 2026 GMT
        Subject: CN=e721a0ee03ccafd7c3473a5475418dc3b37bbdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:57:02:58:70:24:b7:25:9f:10:20:74:e7:
                    c1:77:62:db:25:e5:bd:fa:f3:ce:4d:cf:e7:6a:3a:
                    27:84:22:78:b1:37:89:44:2a:32:37:21:ae:7e:13:
                    0c:d8:fb:72:a5:4e:10:84:bd:6e:51:c9:33:1c:4f:
                    90:a2:fa:ac:f4:b3:07:c6:01:bf:2e:0c:94:72:e7:
                    7c:6c:8e:79:91:81:27:9e:de:4e:4e:e5:a8:c2:67:
                    a3:da:d1:12:f9:4a:84:7e:e4:1a:b1:5b:a0:5b:a7:
                    c1:2b:8c:f7:b5:4e:02:b6:71:6e:0f:94:37:66:89:
                    a6:ea:dc:28:d0:9a:46:62:ec:f5:c4:1a:ad:6f:87:
                    c8:f4:97:a5:20:40:27:b7:ef:48:ae:69:03:da:74:
                    ab:44:a2:6f:5a:25:3e:59:b2:29:d7:4f:2b:78:38:
                    fb:2e:4c:f1:14:a2:6c:4b:55:18:05:05:9f:df:7f:
                    ef:27:33:a7:d3:70:2a:79:42:01:af:84:04:5b:9c:
                    03:27:bf:e0:42:e7:96:56:6d:20:14:4e:fa:d7:a0:
                    6c:58:8b:48:d8:b5:50:3a:55:8b:76:0a:69:76:41:
                    fa:b8:d1:0d:37:d8:7c:c3:5a:ce:7d:31:71:98:66:
                    28:d0:cb:03:7b:34:70:a3:48:85:fa:11:70:54:14:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:21:A0:EE:03:CC:AF:D7:C3:47:3A:54:75:41:8D:C3:B3:7B:BD:DA
            X509v3 Authority Key Identifier:
                keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:93:c6:81:d7:07:54:b0:22:c7:54:83:d2:73:b9:94:df:
         5b:7c:4a:92:9a:b5:f4:60:23:fc:3e:ca:a2:ce:d2:2b:02:cf:
         f5:10:61:b6:19:25:39:f3:26:0c:d6:75:0a:07:07:99:c0:ca:
         cc:16:76:8f:17:47:e0:1e:91:53:d5:0f:33:9e:9d:26:19:a5:
         3a:64:d9:45:3c:90:62:d3:28:30:22:d6:ad:b5:66:17:a4:58:
         f2:6d:ab:31:90:ed:ec:8a:fb:9f:1f:34:6a:72:3c:1a:f4:bc:
         7f:1b:b0:4e:a1:29:b7:b2:8d:c1:05:75:88:9f:53:d7:fb:a7:
         33:fc:82:f4:09:c3:d5:ed:38:2a:01:ab:b3:cb:33:fe:b3:b8:
         eb:6a:90:55:b6:30:ea:b7:78:4f:fd:e9:7a:71:a2:b3:2c:7c:
         80:8a:8a:fa:59:82:d3:e0:8b:aa:24:ec:cb:17:6d:1c:39:70:
         3f:53:4d:34:c9:f1:9f:50:c6:ff:3b:99:08:96:22:83:5c:5a:
         29:30:88:13:d0:2c:0b:f8:d6:78:df:3f:11:77:38:c2:fe:aa:
         7f:42:62:e5:13:71:23:ac:50:87:2d:d7:ca:06:23:1a:21:be:
         01:6e:61:ef:e5:19:5e:e2:98:1c:cb:a8:8d:13:08:4a:f4:67:
         4e:27:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:50 2026 by rpki-client