Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File:                     QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier:          6vzQAEUFntBuCDRaRvfRccUib3fKclERqphs33N+1BM=
Subject key identifier:   1F:B0:79:8A:DC:54:B6:3A:BC:57:D0:BF:7D:5F:3F:33:A2:BF:41:9B
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       019D9BF5C03BA514EA3DA236FFDD65E9E5F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number:          15BB
Signing time:             Fri 17 Apr 2026 15:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 15:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 15:01:07 +0000
Files and hashes:         1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
                          2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
                          3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
                          4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
                          5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: 27cfEmPeWrBats7FD3WvVYwhTTLeDnt53k4J8SzJdlM=)
                          6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
                          7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
                          8: lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa (hash: RTDdcV/67H1P8/R68XrIpR/Fz3ncNmWbnwOYUbaK6Y8=)
                          9: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:c0:3b:a5:14:ea:3d:a2:36:ff:dd:65:e9:e5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: Apr 17 15:01:07 2026 GMT
            Not After : Apr 18 15:01:07 2026 GMT
        Subject: CN=1fb0798adc54b63abc57d0bf7d5f3f33a2bf419b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:66:68:bd:48:8d:2f:6a:72:ed:cc:05:13:93:
                    10:15:28:81:be:95:28:17:37:20:2a:f5:1f:fa:86:
                    e0:f8:f2:e5:f1:08:26:4f:6c:bd:da:0d:62:36:c1:
                    04:33:ca:8d:b0:96:38:c6:b4:61:bb:e6:85:a0:5a:
                    50:04:7d:87:43:6f:60:84:aa:14:13:0e:18:5a:5f:
                    99:21:df:f0:54:c3:b2:28:84:fe:92:d6:17:70:10:
                    61:8f:e9:ae:74:58:10:1a:8f:80:8b:69:a4:52:b4:
                    ed:c5:9f:d8:9c:d1:eb:f3:9b:bc:4a:88:3b:08:88:
                    5f:39:cd:b7:ec:3e:4a:23:44:3c:51:ca:a5:00:c4:
                    5b:06:2b:8b:3c:6b:18:49:a6:4d:60:b8:d4:cc:df:
                    32:70:f1:f5:53:51:50:6c:d1:57:5c:a7:17:36:d8:
                    73:42:20:ae:d3:21:00:9c:13:4e:b4:f4:12:e3:24:
                    87:c1:1c:97:db:ef:64:6a:ef:e4:6e:2e:d1:4e:0a:
                    87:8a:7d:b8:c6:c4:41:94:19:48:2f:99:a2:3e:74:
                    8a:9f:56:95:c8:6d:8f:d5:c2:1d:36:2e:14:21:83:
                    a8:0b:97:7d:ac:85:af:00:90:45:6b:12:c4:e5:7c:
                    e7:1f:4b:cd:da:4f:f6:9e:2d:06:43:41:fa:07:9f:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B0:79:8A:DC:54:B6:3A:BC:57:D0:BF:7D:5F:3F:33:A2:BF:41:9B
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:da:7d:e1:41:c1:af:28:13:35:e9:c2:50:13:06:f4:6b:18:
         af:3e:b7:db:42:d1:08:d5:07:6f:d7:2e:03:62:ca:48:ec:0d:
         d6:78:f1:82:02:f1:5e:45:d7:88:6b:33:4a:6d:11:25:0a:7f:
         73:8d:76:b4:c8:27:4e:04:f3:f7:c0:c1:f5:cd:e0:ea:ac:bd:
         76:26:92:34:19:9c:4c:e8:74:cd:cd:fb:10:e7:52:ed:a7:9c:
         29:90:07:ff:7e:8c:ef:90:10:76:1d:6d:b7:0d:a8:4a:0e:d7:
         42:be:6d:01:e1:60:30:eb:df:f6:46:5b:31:2e:f8:d1:66:8d:
         76:5b:ee:be:33:2c:7c:f0:ef:f1:23:01:f3:a6:85:1f:be:1b:
         36:28:30:de:69:a6:82:e1:0a:a1:44:83:ff:44:8d:73:4e:81:
         4b:ef:75:ba:14:71:ad:43:96:c4:f6:a0:f7:61:96:fc:bc:70:
         2f:56:d9:42:1e:c9:ce:0a:0c:49:d4:12:48:df:91:f7:43:63:
         c4:8b:0b:f4:a8:98:81:bb:20:7f:3c:ff:a3:99:69:a3:b7:54:
         87:9a:03:d4:d9:fe:c1:5f:70:84:6e:4c:5e:1c:fb:91:b7:4f:
         a9:7f:73:3e:ac:7b:3a:3c:e8:ac:ce:bf:7e:60:c4:fc:b6:5f:
         22:26:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:25:29 2026 by rpki-client