Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File:                     QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier:          4ZnHUi4GBe3n1N6lLMNMHdyCsTTVL95lNxPOcmDkR9M=
Subject key identifier:   32:23:74:45:CA:05:6D:CB:88:38:B9:50:C9:56:E5:38:BF:64:B6:F9
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer:       /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial:       019D9A06CE9930130BCB1B9CF6606A5850C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number:          1815
Signing time:             Fri 17 Apr 2026 06:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:30 +0000
Files and hashes:         1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=)
                          2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: qvmmdz7TAVT0apwzEaUQB0QGyXCS7lHUEL99D/VPA7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:ce:99:30:13:0b:cb:1b:9c:f6:60:6a:58:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
        Validity
            Not Before: Apr 17 06:00:30 2026 GMT
            Not After : Apr 18 06:00:30 2026 GMT
        Subject: CN=32237445ca056dcb8838b950c956e538bf64b6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:6f:f6:af:6c:af:5c:34:da:a9:5f:f5:6e:
                    fa:43:32:61:96:31:e8:ad:f4:56:e2:9e:20:08:24:
                    ef:1b:91:b5:0b:a0:62:ca:2d:3b:7c:7b:05:4f:f8:
                    16:81:a1:21:3d:1b:e8:62:27:ee:a5:44:27:f0:38:
                    2a:af:9a:1f:50:71:68:da:af:85:99:2f:26:e7:57:
                    f0:de:f3:28:4e:33:48:4b:ef:4c:af:9d:c0:9d:77:
                    5a:fa:0f:50:bf:41:18:ae:a7:c5:74:3c:48:84:b1:
                    45:db:c7:43:03:79:31:b4:0c:40:a8:69:28:be:0c:
                    1d:e7:1d:b3:e1:62:f3:f1:4c:28:f5:c4:e5:e1:4c:
                    94:07:b7:ad:51:29:a7:19:d1:d7:55:fb:b3:87:52:
                    8f:84:32:bd:b9:1f:3c:aa:f0:46:4c:3e:a5:dc:a5:
                    00:8a:d2:4c:92:16:58:36:b3:91:76:21:38:13:5a:
                    e8:b5:f4:e8:38:b1:35:c5:b5:87:c2:39:a9:63:5c:
                    2d:af:77:29:06:3d:90:6b:c8:1b:f2:c8:82:7a:31:
                    2d:b9:d1:be:99:49:4f:b9:1b:e9:e9:46:27:2c:e1:
                    61:d4:80:c9:51:63:82:32:d1:a9:37:82:a8:2b:e7:
                    76:b0:1c:ce:df:cd:74:87:5d:cc:7a:89:15:7c:7f:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:23:74:45:CA:05:6D:CB:88:38:B9:50:C9:56:E5:38:BF:64:B6:F9
            X509v3 Authority Key Identifier:
                keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:b4:38:99:0a:47:9d:fc:a6:69:fd:7e:b1:ab:00:e4:e8:
         db:a9:4f:30:e1:25:e8:e5:53:81:ff:f9:dc:18:d4:52:05:a6:
         7d:23:70:8a:6e:35:6c:41:25:33:61:d5:67:29:81:f3:b9:10:
         bf:dc:d9:4b:e1:0d:75:b3:0f:62:ee:11:32:96:84:fe:54:55:
         d7:d5:c0:a5:8f:8b:83:35:73:d1:b9:0f:54:bd:c3:fa:5f:62:
         e2:37:dc:21:e5:aa:9d:24:76:2d:68:a8:da:95:55:b9:fe:3a:
         ba:e0:4f:52:85:48:64:e3:1c:cf:79:0c:c0:0b:63:7f:52:7f:
         f7:b2:8f:b7:cb:4e:75:48:f0:d3:ec:bd:b5:0a:56:ff:f8:6b:
         b1:15:a7:79:3b:d8:c6:60:27:a8:fe:3b:08:c1:2a:35:38:19:
         d0:2b:05:18:98:55:41:8d:be:c2:fa:dc:be:94:dd:77:35:41:
         10:7a:8c:de:b9:8c:95:b6:fc:2e:74:72:cf:a4:be:bc:a1:38:
         7e:22:11:d3:24:49:06:af:fd:bc:1e:f2:2a:35:a7:76:aa:d4:
         eb:18:c1:d1:b6:2c:17:6f:f1:c3:22:65:a3:40:69:33:4c:d7:
         e0:1f:f5:0a:9c:57:32:7f:e7:56:ab:37:1a:fd:7d:ad:b8:75:
         ad:43:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:01 2026 by rpki-client