Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
File:                     qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft (raw, json)
Hash identifier:          yUWfCWaeaAZweIINjzA8sKqSvwHN8OwdCvfMxiDiljc=
Subject key identifier:   BE:EA:4E:03:FA:1E:AA:38:A1:1A:01:00:C4:14:23:62:66:F3:8A:F7
Authority key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3
Certificate issuer:       /CN=aa358cc061e36be03a4ed92ad671780f06589be3
Certificate serial:       019D9DAD611CA53C7E3AE52F58A9CF4A5BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
Manifest number:          016C
Signing time:             Fri 17 Apr 2026 23:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 23:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 23:01:18 +0000
Files and hashes:         1: qhkhDbPLjPfZGzwb2pQpWhREyBA.roa (hash: ClIQH06bbp+6RP85PzycOSnYtQQfejT/0AH06HLWtZo=)
                          2: qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl (hash: fQNwizPMlBfWiivrypbIPUaBFRUxdb49AyszKBznKHI=)
                          3: xqzM-5vhLBSZim_gjJ3-4oxkNWc.roa (hash: 2Wker3K9FCOFZ0rUFS4E2eve+n7uzGRTl2lu+nWWkO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ad:61:1c:a5:3c:7e:3a:e5:2f:58:a9:cf:4a:5b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa358cc061e36be03a4ed92ad671780f06589be3
        Validity
            Not Before: Apr 17 23:01:18 2026 GMT
            Not After : Apr 18 23:01:18 2026 GMT
        Subject: CN=beea4e03fa1eaa38a11a0100c414236266f38af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:fa:97:30:02:7b:5d:a0:57:ae:5c:1d:08:
                    b3:6a:12:44:93:40:ab:ab:92:2c:69:da:02:6d:a9:
                    b1:70:71:15:c9:48:aa:e2:3e:79:27:8f:d9:85:5c:
                    19:80:c2:4a:5e:e7:5d:df:ce:89:20:d4:24:d4:ef:
                    2e:36:cf:58:f1:6e:0f:f9:3d:81:47:2e:ba:76:ad:
                    c2:cf:91:c4:31:f7:58:d8:a7:c9:4f:5e:22:3e:15:
                    cb:d1:b1:49:92:4e:4b:dd:c1:cf:d9:39:d9:37:05:
                    17:cb:20:4a:e9:c0:c3:02:69:eb:50:6a:1f:e2:24:
                    09:c2:f8:09:bd:79:75:2b:46:3c:c6:e6:17:4c:4e:
                    85:5f:75:f7:40:0d:80:aa:a0:3f:dc:f6:68:c3:7e:
                    58:07:6d:8f:55:f4:ce:1e:fc:60:27:8d:e6:25:e3:
                    0a:3b:a2:02:58:ea:f1:d5:a4:b9:d3:34:ac:69:98:
                    6a:d3:e5:7e:b1:6f:51:bc:e0:d8:6e:5d:18:e0:7c:
                    21:7b:4b:be:06:5c:ed:95:2d:95:43:ce:81:b5:5f:
                    42:48:be:9e:e6:9b:d2:4d:ac:8b:ed:4c:8c:14:e7:
                    1c:59:01:72:2e:83:77:74:48:a8:5d:ae:92:43:11:
                    20:57:79:24:87:c0:c3:4a:a1:2a:1e:d4:e6:90:b1:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:4E:03:FA:1E:AA:38:A1:1A:01:00:C4:14:23:62:66:F3:8A:F7
            X509v3 Authority Key Identifier:
                keyid:AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7f:77:73:89:91:f9:92:15:13:98:d7:48:26:89:e2:95:ca:
         7c:5e:d4:6c:38:ed:cc:11:3a:d9:83:d8:ac:9b:4b:59:4d:60:
         6d:34:c9:90:09:6b:03:95:5d:57:d2:5e:d8:25:a4:af:32:f9:
         75:d3:28:6a:39:7d:22:64:d6:0b:d9:c1:f9:b6:f8:41:16:f0:
         0e:ae:ff:65:89:61:00:f3:f1:b2:3b:82:a4:8c:c4:7c:6c:a5:
         3a:59:d5:b5:b4:2d:01:51:a3:f6:5e:71:c3:79:aa:81:b7:1e:
         76:a8:2d:9a:54:a6:cd:3a:8c:63:5c:1e:2d:59:01:2c:04:17:
         13:71:14:98:fd:4f:7c:d5:d7:00:6e:bd:5b:a2:16:52:2d:e2:
         24:e3:6c:3d:32:a8:e5:df:33:89:bd:7c:27:c2:2d:44:fa:10:
         fa:e7:8b:de:8e:6f:45:b2:05:61:f3:58:e5:04:50:62:8b:69:
         99:86:02:38:f4:4d:4c:69:ae:5a:3a:91:0d:64:aa:80:dc:77:
         94:c0:fd:9b:dd:d9:1b:0e:c1:77:b3:72:e6:5d:43:4c:48:3c:
         63:47:9a:54:74:a3:c6:98:e2:71:80:94:80:f9:1d:d1:f3:8b:
         e9:b5:22:07:ca:3f:f6:4b:ac:2d:a9:f4:5c:fe:42:f2:a3:8e:
         5d:67:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:29 2026 by rpki-client