Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
File:                     qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json)
Hash identifier:          UXeDmjD6ffMTbyrTql6H8QOZbMa/qOaluGHkefzLqIs=
Subject key identifier:   CA:6C:5C:CD:EB:C8:85:C6:BA:47:06:3E:34:1C:92:78:4A:B2:68:C7
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Certificate issuer:       /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial:       019D9A3E0865FA026281D36A95E3361CB9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
Manifest number:          0E1D
Signing time:             Fri 17 Apr 2026 07:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:49 +0000
Files and hashes:         1: okBlAs2MxKegFun8jqPmx6S71TI.roa (hash: ROgvc03TJnSVXqJkAtutWAdPihx/iJeoNeNlOaYR9fo=)
                          2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: bY1DaA57JoY7SYDKoVsZPKxudmMBBEZBGJ+RJjJdOh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:08:65:fa:02:62:81:d3:6a:95:e3:36:1c:b9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
        Validity
            Not Before: Apr 17 07:00:49 2026 GMT
            Not After : Apr 18 07:00:49 2026 GMT
        Subject: CN=ca6c5ccdebc885c6ba47063e341c92784ab268c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:cf:f1:bc:89:d8:c2:1a:b7:89:e6:a5:74:
                    69:11:5a:24:d2:13:16:75:8b:a7:00:2d:bd:2d:6a:
                    98:12:24:f2:f1:0f:f0:e4:b7:2d:a5:83:db:71:db:
                    33:c7:cb:7d:a5:e0:2a:74:68:a8:8c:de:6a:8b:78:
                    5e:56:e8:3d:f1:5a:b0:45:46:44:c5:c7:81:24:8b:
                    f8:4c:46:9f:80:03:9c:72:6e:ed:37:c8:c9:8e:9e:
                    b1:e1:72:f2:b5:7d:48:6e:21:3d:37:d2:8b:8f:5a:
                    87:de:0f:49:b6:60:b7:0b:5a:1d:04:c0:d2:b6:70:
                    06:79:fd:ef:ed:f7:03:bd:d6:c6:66:06:ff:b7:2b:
                    d3:7e:7f:68:fc:5a:22:a6:ac:a6:6f:2d:34:f6:b4:
                    a4:2a:58:56:5f:20:7b:1f:63:6d:3c:d6:c4:45:cf:
                    f7:cf:ed:df:e2:0a:cd:e0:6c:44:13:58:2f:40:82:
                    66:e2:dd:c0:7d:f7:9d:85:ec:66:74:67:28:1b:d9:
                    4d:a7:07:f3:9c:d2:20:08:02:49:f6:93:bf:14:13:
                    15:9e:75:56:88:ef:89:10:6f:f3:cd:f3:53:1c:51:
                    9b:ae:40:03:22:58:36:21:40:f9:68:ba:eb:3f:14:
                    92:33:ff:fc:de:fb:23:3b:9e:ec:ea:2c:59:40:c8:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6C:5C:CD:EB:C8:85:C6:BA:47:06:3E:34:1C:92:78:4A:B2:68:C7
            X509v3 Authority Key Identifier:
                keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:f0:08:58:e8:d0:e1:b5:3f:b8:69:f8:a2:98:d0:b2:cc:
         4f:41:4d:ee:50:67:26:a5:51:8f:05:79:e9:0f:61:06:55:b9:
         33:f6:bb:2e:8d:47:f7:2c:c3:da:9f:cb:ea:28:06:d7:74:b9:
         13:52:82:d4:b2:ae:83:12:32:83:82:e4:49:90:45:c8:a3:36:
         6b:dc:47:28:ee:9e:8a:08:b8:5a:6b:b6:a1:22:9a:a0:4c:6e:
         b8:65:06:df:ae:e1:c6:85:3a:35:a1:c7:2f:52:64:45:e6:23:
         7b:14:7a:33:fd:1e:57:f8:17:ab:7c:f5:90:e9:90:63:49:5c:
         4a:64:a7:50:db:6a:43:50:2f:9e:d0:81:e8:7f:00:95:a9:3f:
         a8:99:8c:31:43:1d:29:d5:ec:cc:23:51:70:42:a4:e9:64:47:
         fd:6e:e0:92:b6:f4:60:31:df:b8:49:ac:a0:1c:7a:7e:7d:7d:
         13:f5:0d:c4:84:41:52:c9:cc:01:7c:5d:71:36:3a:33:86:55:
         e2:e3:70:fc:35:1c:81:a2:aa:bf:70:fa:1e:74:3c:a5:32:b9:
         69:4d:62:9b:8c:94:33:fe:fd:40:f1:44:5e:b8:8a:93:52:1f:
         08:89:87:27:2b:29:ae:b2:0c:c8:96:a5:36:10:bc:c8:4b:10:
         e6:25:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:05 2026 by rpki-client