Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
File:                     QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft (raw, json)
Hash identifier:          so4rjxDLEWnWki6+IVYYu4+81y6NVE0iQN3TUy/bvx4=
Subject key identifier:   6D:28:7A:CA:F3:21:B9:9A:C8:1A:B7:2B:97:CA:0E:66:BC:B5:B6:B5
Authority key identifier: 41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
Certificate issuer:       /CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Certificate serial:       019D9B516B6C3529CB6E459AE239D9F0B1DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
Manifest number:          62
Signing time:             Fri 17 Apr 2026 12:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:37 +0000
Files and hashes:         1: QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl (hash: 4jK3ZXaG+jZWyvSru+7pzQh1qxtwx8ON9+mWc9rkPl0=)
                          2: qWIzmVr_aMvnz8_UVm4flIAA-A0.roa (hash: s3nWLOdDzZcWov+Frxv6A1ZD6t4lQ0e8G2c/DIWlHD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:6b:6c:35:29:cb:6e:45:9a:e2:39:d9:f0:b1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415c5b3544b18c2ce577847bc1b2ada539385b19
        Validity
            Not Before: Apr 17 12:01:37 2026 GMT
            Not After : Apr 18 12:01:37 2026 GMT
        Subject: CN=6d287acaf321b99ac81ab72b97ca0e66bcb5b6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:e5:6b:9d:0d:f9:ee:57:54:1b:5d:14:2a:
                    73:7a:4d:f1:12:fc:2f:c0:bb:3d:32:1d:08:60:a7:
                    e4:7b:8b:d4:87:03:b5:12:7c:e8:42:35:5d:56:38:
                    4b:5c:5d:45:97:fa:73:5a:73:ff:24:57:77:f4:cc:
                    08:0d:3b:0d:2e:d2:6b:de:3b:3c:6c:26:0b:db:9c:
                    65:7c:b0:02:b0:22:5e:b4:06:e7:2c:53:26:f0:04:
                    8a:75:c1:f8:89:d2:09:68:c4:67:f6:19:ff:5e:2e:
                    3d:f9:b5:4f:b6:3a:63:30:e4:b7:f7:a3:c0:6e:19:
                    ca:45:ff:20:5b:e4:c8:22:3e:72:08:02:e7:37:a3:
                    a2:2c:43:e1:d0:2b:8a:b7:b2:e4:58:bf:94:08:a7:
                    c3:68:84:10:5e:2b:b5:60:c9:5e:e4:2b:da:98:8b:
                    b7:ad:d1:4e:be:a9:41:b0:7e:5a:85:a3:9d:d5:5c:
                    b8:3c:ce:3c:17:96:53:e1:7b:49:08:d7:29:a5:80:
                    e9:3c:91:b6:b2:e2:b4:de:ee:85:2e:f9:ee:88:c8:
                    4b:30:62:54:b9:93:4d:12:53:bd:c5:db:10:ba:df:
                    a5:9d:86:f0:8e:63:12:51:9f:73:fc:e7:30:ea:90:
                    b4:30:88:20:07:53:e0:46:ec:a5:6f:a1:34:32:51:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:28:7A:CA:F3:21:B9:9A:C8:1A:B7:2B:97:CA:0E:66:BC:B5:B6:B5
            X509v3 Authority Key Identifier:
                keyid:41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fe:2e:f6:c5:d1:a9:56:0d:a0:ca:9b:7f:81:8f:c9:6a:1b:
         4e:1a:cc:29:88:2f:00:ff:ef:7c:19:f6:72:20:67:71:aa:ab:
         79:77:dd:72:a5:ab:f5:d4:5b:87:dd:7c:d7:be:a6:e6:61:e8:
         25:ec:51:66:6f:89:f9:5a:d4:7a:39:b9:fd:6e:2a:8a:31:e5:
         2a:ad:34:e6:86:47:f5:30:96:5c:b9:f8:c9:93:b6:2d:d0:98:
         3d:29:42:9d:b2:9b:76:03:ea:04:64:f5:d4:8f:9d:a3:56:03:
         49:84:bb:44:cc:54:ab:1b:53:0c:05:97:78:7d:06:b1:6e:3d:
         34:ef:7a:de:89:7b:84:08:86:01:6c:50:82:78:00:f6:97:fe:
         91:4a:f7:72:32:6c:3b:e3:93:2b:0a:56:67:aa:57:5c:fe:28:
         f9:37:64:cb:93:23:72:72:40:64:78:61:d7:79:2b:16:75:81:
         58:99:05:9c:41:de:1d:96:9b:5b:8b:71:df:3c:09:62:76:4e:
         ba:5a:c1:98:8d:e4:bb:2e:34:ad:bb:2b:7c:da:a9:12:87:72:
         12:70:d7:b7:b1:3b:b1:b8:98:97:e3:25:c4:9d:27:d0:91:32:
         b4:6c:77:e8:ad:20:60:e6:65:9e:d1:7d:c0:3d:fe:35:73:59:
         9f:18:ff:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUWtsNSnLbkWa4jnZ8LHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWM1YjM1NDRiMThjMmNlNTc3ODQ3YmMxYjJhZGE1Mzkz
ODViMTkwHhcNMjYwNDE3MTIwMTM3WhcNMjYwNDE4MTIwMTM3WjAzMTEwLwYDVQQD
Eyg2ZDI4N2FjYWYzMjFiOTlhYzgxYWI3MmI5N2NhMGU2NmJjYjViNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDfla50N+e5XVBtdFCpzek3xEvwv
wLs9Mh0IYKfke4vUhwO1EnzoQjVdVjhLXF1Fl/pzWnP/JFd39MwIDTsNLtJr3js8
bCYL25xlfLACsCJetAbnLFMm8ASKdcH4idIJaMRn9hn/Xi49+bVPtjpjMOS396PA
bhnKRf8gW+TIIj5yCALnN6OiLEPh0CuKt7LkWL+UCKfDaIQQXiu1YMle5CvamIu3
rdFOvqlBsH5ahaOd1Vy4PM48F5ZT4XtJCNcppYDpPJG2suK03u6FLvnuiMhLMGJU
uZNNElO9xdsQut+lnYbwjmMSUZ9z/Ocw6pC0MIggB1PgRuylb6E0MlE/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0oesrzIbmayBq3K5fKDma8tba1MB8GA1UdIwQY
MBaAFEFcWzVEsYws5XeEe8GyraU5OFsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZ4Yk5VU3hqQ3psZDRSN3diS3RwVGs0V3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hMWM1M2UtZGRiMi00ODU4LTgyNWMt
OGNhOGFjZWY1ZDVjLzEvUVZ4Yk5VU3hqQ3psZDRSN3diS3RwVGs0V3hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hMWM1M2UtZGRiMi00ODU4LTgyNWMtOGNhOGFjZWY1ZDVj
LzEvUVZ4Yk5VU3hqQ3psZDRSN3diS3RwVGs0V3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv4u9sXR
qVYNoMqbf4GPyWobThrMKYgvAP/vfBn2ciBncaqreXfdcqWr9dRbh918176m5mHo
JexRZm+J+VrUejm5/W4qijHlKq005oZH9TCWXLn4yZO2LdCYPSlCnbKbdgPqBGT1
1I+do1YDSYS7RMxUqxtTDAWXeH0GsW49NO963ol7hAiGAWxQgngA9pf+kUr3cjJs
O+OTKwpWZ6pXXP4o+Tdky5MjcnJAZHhh13krFnWBWJkFnEHeHZabW4tx3zwJYnZO
ulrBmI3kuy40rbsrfNqpEodyEnDXt7E7sbiYl+MlxJ0n0JEytGx36K0gYOZlntF9
wD3+NXNZnxj/kg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:28 2026 by rpki-client