Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          36xDFyNA43Kop0edWnzgK+Ih9t33hVjQMygKQ8D2Dw4=
Subject key identifier:   92:67:F1:FF:2E:FB:C6:79:0F:69:24:7A:BC:D3:5F:1D:BF:28:F8:C8
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       019D98F52C50DAAAFBC330A1F859396846D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          139F
Signing time:             Fri 17 Apr 2026 01:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:37 +0000
Files and hashes:         1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: DNd6rU3gYDxtdXhsEYuVxCgo6Isxqu2pEBxWEt9QqKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:2c:50:da:aa:fb:c3:30:a1:f8:59:39:68:46:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: Apr 17 01:01:37 2026 GMT
            Not After : Apr 18 01:01:37 2026 GMT
        Subject: CN=9267f1ff2efbc6790f69247abcd35f1dbf28f8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:31:c9:06:17:4b:6b:f6:6c:07:0a:32:f1:
                    62:cb:2e:58:17:71:c2:b6:1e:25:6b:3c:31:04:7c:
                    58:ac:6e:d1:cc:22:24:9f:89:76:ae:64:66:51:df:
                    94:d4:e1:10:56:d7:57:5d:9f:e4:b9:9d:68:b6:f2:
                    14:6d:08:24:d2:84:2f:64:91:f8:c8:ee:87:25:5b:
                    25:10:34:dd:71:14:7d:16:72:e6:2d:8f:d4:97:8e:
                    bb:85:94:f6:49:ae:ab:2f:05:65:63:5e:0a:a4:4f:
                    9a:0d:4e:2d:32:07:11:ba:ad:c6:f6:82:79:8d:8d:
                    67:16:67:b8:95:29:2e:10:df:c2:4b:48:b2:bb:5f:
                    e4:bf:48:fe:a5:0d:b6:88:22:ca:55:00:99:7c:d7:
                    01:f3:88:93:51:66:a3:58:41:cd:25:70:49:30:49:
                    9d:dd:e9:ed:51:5a:2c:ff:af:47:17:6a:42:69:5b:
                    9a:19:38:17:4b:d7:05:34:c0:8a:3e:0f:16:98:5d:
                    b1:1f:f8:df:26:b4:85:71:68:43:1e:82:01:d0:5a:
                    6f:2f:55:84:5a:e7:5e:9c:b2:3e:b2:c0:4b:30:b3:
                    1a:6e:37:fd:d3:e5:51:7b:b2:52:7a:fd:43:16:c5:
                    fe:bb:78:c0:e3:d7:4e:1e:50:ad:0a:fa:52:06:7a:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:67:F1:FF:2E:FB:C6:79:0F:69:24:7A:BC:D3:5F:1D:BF:28:F8:C8
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:31:e4:43:64:c7:3a:6e:27:85:1e:61:2a:17:6d:12:b9:
         bb:4e:2e:c7:58:86:01:fe:10:3b:6c:c8:50:c3:e0:cc:58:df:
         b8:d3:cb:a4:64:e2:8a:e1:b9:bc:48:9e:ec:8e:02:30:8d:25:
         49:d2:5a:e7:38:a7:2a:84:11:ae:fa:11:37:e8:0f:ea:f6:9d:
         3e:f1:2c:49:ae:6a:ee:e8:ce:2a:42:2d:a2:2a:bf:31:c1:0c:
         0a:61:42:e8:8c:4c:80:1a:1f:8d:86:ac:58:ba:d9:16:bf:db:
         19:2c:01:65:b9:70:fb:1e:5e:8e:a8:77:53:13:eb:00:e6:95:
         db:f7:f3:47:e4:7f:9b:1a:fb:c8:3d:1e:29:8d:b7:37:ed:ab:
         7f:bf:c7:01:0e:4e:1a:dd:79:6b:91:f7:6d:e9:42:61:df:ef:
         1f:ed:e2:cc:d0:98:f5:32:64:de:37:7a:ac:35:cf:51:9f:4b:
         66:81:b4:4e:c4:fb:4a:2d:91:80:55:00:a7:e1:ce:2e:01:5c:
         f7:a4:4c:c8:6a:3a:64:81:fe:fb:b0:87:97:47:ae:fb:cf:6e:
         b8:9c:e6:44:dc:70:bb:48:b2:f2:b7:e9:42:b4:98:58:65:1e:
         34:44:f1:47:14:30:1a:ec:1b:e0:22:79:30:57:e4:82:a0:af:
         36:03:6c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:51 2026 by rpki-client