Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File:                     QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier:          3wmu1Nzo6j/lE/bAlgDlaU39T3rpC9pUFVP2lMxymQw=
Subject key identifier:   94:9E:33:D5:9B:27:77:6F:1C:F0:BA:13:18:9A:A9:03:EF:A1:24:F4
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer:       /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial:       019D9D7601049212519A1791376D70CAD1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number:          014E
Signing time:             Fri 17 Apr 2026 22:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 22:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 22:00:49 +0000
Files and hashes:         1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: sG91Kl2VM5KlwEPw24Y8DUTUKglVrQcax7HHeBwd64M=)
                          2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:76:01:04:92:12:51:9a:17:91:37:6d:70:ca:d1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
        Validity
            Not Before: Apr 17 22:00:49 2026 GMT
            Not After : Apr 18 22:00:49 2026 GMT
        Subject: CN=949e33d59b27776f1cf0ba13189aa903efa124f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:2e:38:59:d4:7d:9b:22:30:04:fb:c9:f1:
                    30:52:19:37:e4:e8:db:ee:c1:ce:24:33:64:f6:15:
                    04:72:6d:c4:4e:72:b5:33:7b:4e:06:fb:78:c2:46:
                    f5:6d:45:a8:96:b6:91:ee:61:16:80:cf:7b:af:c1:
                    b9:fa:90:9e:01:c8:92:5e:47:8a:7e:ef:f3:3b:54:
                    75:b2:f4:ba:94:8c:61:79:02:dd:f9:d7:61:71:60:
                    24:a5:3b:d8:87:c9:d4:39:32:5b:ad:f7:8c:03:aa:
                    1e:ee:32:13:95:7d:7d:df:88:51:80:93:ae:52:38:
                    2d:b1:7a:82:ac:6d:b0:8b:15:be:0c:32:39:0a:ca:
                    03:3a:96:58:11:6d:6a:af:cc:20:87:6e:c5:36:41:
                    0f:b5:35:df:ef:67:fc:08:5d:e7:63:d7:f0:5f:72:
                    d2:82:39:40:1d:60:d0:27:18:68:24:3c:79:a7:ed:
                    0d:0d:a6:74:78:7f:6d:49:9a:72:32:38:51:0a:71:
                    76:65:ff:61:32:9c:6c:5e:d4:bf:df:0a:5a:a5:e2:
                    9a:c7:94:a1:c5:19:68:f5:c2:ab:69:86:4a:c0:50:
                    7b:4a:68:80:86:bb:8e:67:f5:e2:94:80:db:a8:04:
                    ad:8d:2b:71:c1:78:ea:f8:8f:2f:19:55:d8:2f:71:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9E:33:D5:9B:27:77:6F:1C:F0:BA:13:18:9A:A9:03:EF:A1:24:F4
            X509v3 Authority Key Identifier:
                keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:62:e4:09:0d:e0:3d:0b:2b:a7:6e:27:e4:d4:1d:fc:f4:9d:
         06:63:9e:87:63:3c:c8:47:a9:f9:13:00:dd:5d:05:fe:af:7b:
         77:97:57:b5:b0:fc:20:14:71:db:3d:92:25:c6:8a:68:69:ab:
         4a:08:fd:db:b7:2d:2f:06:f7:d9:3c:c9:74:17:fd:4e:49:ba:
         44:90:00:5f:54:53:d7:bb:4d:4e:6c:41:a5:57:71:80:f1:a6:
         69:58:23:ff:7c:77:6b:67:1e:d7:04:85:72:79:2c:63:31:12:
         6c:9f:bc:80:e9:fd:dd:05:69:2a:b5:72:19:a1:c6:b4:8f:83:
         f6:f9:c7:09:f0:40:de:2a:94:ec:2e:ed:36:63:da:d3:04:1c:
         09:8f:6b:62:dc:8c:e0:ad:73:54:9e:d7:72:59:94:cd:cd:21:
         db:0a:9e:57:5c:68:c8:b8:b8:6a:e5:d7:21:62:58:4b:33:9a:
         39:5b:2a:e2:00:e0:f9:0c:7c:27:37:ce:d0:98:06:00:1a:32:
         e5:11:01:29:bf:6b:6b:00:d0:c3:71:28:bd:56:17:c9:44:5e:
         aa:d4:79:0b:0e:ca:3c:88:02:18:43:3e:c5:dd:89:a0:e8:70:
         e4:15:8e:2d:77:f2:c9:04:46:a8:d5:60:13:d7:ee:52:94:92:
         40:53:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:06 2026 by rpki-client