Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File:                     QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier:          4wBzecCo+pD3y52pgxh/tHZNyZs7o2RaaT//M3L7ThE=
Subject key identifier:   5F:C7:9A:96:8A:7E:FD:D9:30:06:70:63:46:7E:23:6B:CF:AA:72:7D
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer:       /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial:       019D9998D2B6B4EF5AA2CBE58168B3C68357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number:          164E
Signing time:             Fri 17 Apr 2026 04:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:22 +0000
Files and hashes:         1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: 2synLfEgXK2SeaBYSelxw831bCar2kAC7u+xSl+O5Qk=)
                          2: mI_mfOa16c9i2aB5y-5RdFkoQzs.roa (hash: CYTfnzdl53VUc2uYy5eOC2P2ZEG/Uh5nTjGXOTog/QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:d2:b6:b4:ef:5a:a2:cb:e5:81:68:b3:c6:83:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
        Validity
            Not Before: Apr 17 04:00:22 2026 GMT
            Not After : Apr 18 04:00:22 2026 GMT
        Subject: CN=5fc79a968a7efdd930067063467e236bcfaa727d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:fa:a5:b2:36:e2:9e:24:0f:67:7f:fd:27:
                    1f:26:ff:7e:9a:db:24:64:a9:fd:92:5c:17:5a:f5:
                    f4:53:13:02:2b:dc:c4:56:72:4b:7b:d0:96:73:fb:
                    a7:84:82:37:bb:9e:5f:2d:71:eb:8b:bf:e7:36:a4:
                    66:66:26:c3:81:fa:55:82:01:cf:13:5e:22:19:c2:
                    2d:fb:dc:00:cb:38:45:52:ad:40:ca:d8:ac:ed:0c:
                    9d:97:39:8d:3b:50:a6:df:0e:0c:b4:29:ed:6c:2a:
                    ee:c7:25:16:f8:78:0a:2f:fd:fc:56:ce:9b:b6:cc:
                    55:30:c3:11:4c:69:d3:ec:7f:e4:ad:d5:9f:41:6b:
                    fb:7d:d1:b9:3e:db:11:da:7b:37:ba:1f:66:22:8e:
                    0b:9f:ab:93:8b:3f:cb:9e:66:56:84:1f:10:56:e9:
                    45:9e:37:c6:10:18:1b:bf:14:64:bf:0a:26:89:4f:
                    53:3e:fe:35:33:4e:9a:5d:c9:37:e8:de:e0:1c:42:
                    d2:c4:5c:df:a4:b6:40:61:b8:da:0e:d7:79:cb:50:
                    20:ad:8c:57:dd:b7:10:e6:9c:ae:8b:98:b1:4b:fb:
                    f9:a2:3f:54:b4:d9:92:75:7e:d6:d6:f6:de:5a:8a:
                    9b:89:de:16:29:f0:7e:17:97:4f:7c:bd:15:92:62:
                    9f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:9A:96:8A:7E:FD:D9:30:06:70:63:46:7E:23:6B:CF:AA:72:7D
            X509v3 Authority Key Identifier:
                keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e2:ca:95:bc:3a:a6:e5:94:a7:1e:d3:f8:fa:65:c9:9d:5f:
         86:b2:4a:64:03:6c:f6:47:8b:27:88:3f:e8:78:ef:65:eb:2f:
         77:5b:b2:fa:27:bf:e1:0c:da:6c:ec:6a:e0:ff:6d:a2:c5:60:
         05:02:70:9e:11:5d:1c:80:b8:ef:28:d0:b0:2c:f9:eb:8e:a7:
         b5:d8:a9:06:ba:c9:e7:98:04:e9:7e:15:c3:20:eb:43:0d:b6:
         51:d5:83:0e:85:78:bc:1b:58:14:42:5e:42:1e:b4:bf:5f:45:
         af:05:76:d5:3c:52:7c:af:01:26:84:2b:de:8b:b1:56:1d:4e:
         67:0c:aa:d5:41:62:3c:c1:f4:d2:db:93:f2:3d:44:c3:f2:51:
         16:6d:2f:81:69:3c:39:30:32:78:a5:16:4c:01:4c:7e:b1:48:
         45:35:cc:92:c5:d9:a1:34:53:3a:a7:63:1b:0c:65:9b:af:6e:
         7b:36:10:de:61:52:84:ba:c2:db:68:ea:fe:a5:ea:09:13:eb:
         40:a4:47:3d:c0:85:a8:4a:fe:7c:56:57:10:69:9d:a0:fd:a2:
         ad:c4:75:5e:ba:79:d1:19:fd:70:34:a7:ab:97:8f:c0:a2:23:
         b6:83:cc:ca:35:e3:d9:d1:da:02:da:63:04:5f:a5:58:da:06:
         f7:45:43:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmNK2tO9aosvlgWizxoNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTYwZmMxY2Y2Yjk3NDY2NzM3YzMwMjcxMjNmYTEyMGIx
OTU0ZDUwHhcNMjYwNDE3MDQwMDIyWhcNMjYwNDE4MDQwMDIyWjAzMTEwLwYDVQQD
Eyg1ZmM3OWE5NjhhN2VmZGQ5MzAwNjcwNjM0NjdlMjM2YmNmYWE3MjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTz6pbI24p4kD2d//ScfJv9+mtsk
ZKn9klwXWvX0UxMCK9zEVnJLe9CWc/unhII3u55fLXHri7/nNqRmZibDgfpVggHP
E14iGcIt+9wAyzhFUq1Aytis7QydlzmNO1Cm3w4MtCntbCruxyUW+HgKL/38Vs6b
tsxVMMMRTGnT7H/krdWfQWv7fdG5PtsR2ns3uh9mIo4Ln6uTiz/LnmZWhB8QVulF
njfGEBgbvxRkvwomiU9TPv41M06aXck36N7gHELSxFzfpLZAYbjaDtd5y1AgrYxX
3bcQ5pyui5ixS/v5oj9UtNmSdX7W1vbeWoqbid4WKfB+F5dPfL0VkmKfcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/HmpaKfv3ZMAZwY0Z+I2vPqnJ9MB8GA1UdIwQY
MBaAFEJWD8HPa5dGZzfDAnEj+hILGVTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYt
MmMyMDc5ZDkxNmFkLzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYtMmMyMDc5ZDkxNmFk
LzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOLKlbw6
puWUpx7T+PplyZ1fhrJKZANs9keLJ4g/6HjvZesvd1uy+ie/4QzabOxq4P9tosVg
BQJwnhFdHIC47yjQsCz5646ntdipBrrJ55gE6X4VwyDrQw22UdWDDoV4vBtYFEJe
Qh60v19FrwV21TxSfK8BJoQr3ouxVh1OZwyq1UFiPMH00tuT8j1Ew/JRFm0vgWk8
OTAyeKUWTAFMfrFIRTXMksXZoTRTOqdjGwxlm69uezYQ3mFShLrC22jq/qXqCRPr
QKRHPcCFqEr+fFZXEGmdoP2ircR1Xrp50Rn9cDSnq5ePwKIjtoPMyjXj2dHaAtpj
BF+lWNoG90VDsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:24 2026 by rpki-client