Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          /3uidgykD6sFUWx9j1NRomP9+COoa8I4X8Zp74OINt0=
Subject key identifier:   AB:48:E3:32:E4:15:E7:B5:5E:A7:E5:44:28:A3:F8:22:C2:06:5E:B7
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       019D9A07643AD723E1CC41863714B2D556A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0F7D
Signing time:             Fri 17 Apr 2026 06:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:08 +0000
Files and hashes:         1: Nl-NwJXgg_mKvSjTnftPWLYBToY.roa (hash: UM5uAdr1m30XVEMiULWnarxQCPhDPuMKS+lBMXBG4Ls=)
                          2: Rohs0EQIAoIUkwGS6XtjnDouO8g.roa (hash: EcZk5ZFiNKSus0TYnUyIuUuGvRBAlAnVxdbmm6ttv7A=)
                          3: ihu7RSF9d_o474O74_XHNiBLq8Y.roa (hash: zWFbywvFotfCwUcEIQ2DvsebZNFghPy/L/dQzBScQnk=)
                          4: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: qinKGzlQrHfXgUSz7P8nfph6gQAYQFyGp7uo5RzPvKw=)
                          5: yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa (hash: bp0xhjE5IUPvG68ZkNNK1uC8wEizknIYbPwTcDbU+cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:64:3a:d7:23:e1:cc:41:86:37:14:b2:d5:56:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Apr 17 06:01:08 2026 GMT
            Not After : Apr 18 06:01:08 2026 GMT
        Subject: CN=ab48e332e415e7b55ea7e54428a3f822c2065eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:fd:ed:85:3f:6f:e5:56:58:66:eb:3e:62:
                    b8:e3:1a:33:25:64:66:11:ff:51:9c:17:5b:3f:c6:
                    aa:16:4f:21:71:c8:85:c4:2e:2b:6b:0c:ba:15:9b:
                    a8:c0:6e:80:14:a6:eb:11:28:10:cd:90:fd:36:04:
                    15:83:36:52:ce:6c:3c:1d:0d:05:36:47:a2:84:17:
                    e1:4c:84:d5:14:c1:0b:95:2f:3f:cc:5a:ff:53:1f:
                    78:7c:99:1b:99:3e:59:27:1c:e4:d5:13:24:e4:9d:
                    e5:eb:f2:83:ac:72:06:60:6b:4a:ad:db:a0:87:7c:
                    fb:39:d2:1b:e3:25:e6:7c:54:6f:74:2b:97:48:ec:
                    ac:89:75:6f:d8:e7:6c:c4:8e:fa:23:ef:b2:a3:a8:
                    71:1a:e1:4e:75:54:bd:69:72:bd:cc:dd:6b:34:18:
                    08:c1:ea:ca:66:ad:6e:ad:46:83:0f:8d:c7:12:17:
                    30:d6:79:11:f5:34:58:e5:f9:96:ca:d2:a9:ca:37:
                    a9:46:f0:9e:c6:ca:26:bb:06:98:85:d4:85:b5:26:
                    ac:f6:68:ed:72:9b:b7:e2:c6:6c:cb:13:29:47:31:
                    6c:6c:9d:38:e8:23:72:d1:90:3a:d3:f2:b0:e8:26:
                    79:9f:32:83:b2:d4:27:4b:7c:aa:b8:0a:72:0b:7b:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:48:E3:32:E4:15:E7:B5:5E:A7:E5:44:28:A3:F8:22:C2:06:5E:B7
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6d:cf:e9:a8:f7:31:7d:5c:71:70:8a:dc:ef:f9:42:20:9e:
         f3:be:a1:eb:ee:81:6e:ef:38:bf:3d:c3:2d:d9:c3:68:80:b2:
         0d:d4:08:bd:03:21:0e:37:a9:45:08:fe:ee:7a:77:0a:25:ab:
         d9:23:bb:5e:ad:ea:3f:73:bc:1d:2e:20:97:4c:f4:65:cf:f5:
         ac:12:8e:da:a0:78:f2:c6:0e:26:7e:06:a3:cf:8c:6a:7f:c0:
         18:a1:06:e6:05:18:c8:b7:1b:8a:2d:de:5b:27:fc:08:7d:62:
         bf:e0:27:1f:5d:c7:30:9b:a3:c1:df:2a:fd:9b:67:59:3c:da:
         a9:a6:c3:fd:15:0e:5b:80:36:88:6a:28:a0:26:58:c2:18:be:
         0a:41:09:86:35:92:b4:c5:6e:a6:eb:39:ab:26:ba:43:55:dd:
         cc:dc:89:28:c1:35:e4:f0:ef:31:ce:99:7e:dd:04:1e:35:21:
         b7:4f:f0:0a:57:22:d4:b4:7f:1e:96:32:b8:db:8f:50:c3:eb:
         87:10:07:cd:7f:f7:be:23:fd:e8:c1:16:f8:8e:16:12:41:ae:
         59:3a:65:fe:0c:2f:67:3a:7f:11:6f:95:66:e3:5f:40:3f:7e:
         16:fe:56:14:0e:b3:e0:f9:ff:02:c8:af:df:98:d8:0f:aa:a1:
         b8:07:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:15 2026 by rpki-client