Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File:                     cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier:          zOivSZ4zkch11pFlcX7Xs4EXGr+EcSjh7x+FCWLfdpI=
Subject key identifier:   2B:AD:4B:C7:05:EE:FF:BE:91:00:DA:45:EA:E1:C2:79:61:D9:BB:63
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       019D9C99F2CDAE9858B957E336B2E603729F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number:          1259
Signing time:             Fri 17 Apr 2026 18:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:27 +0000
Files and hashes:         1: 5HKPTePj8fMVOPruXg3CGjpYfBI.roa (hash: wJlvHXRl4ES/+26PUI+1bZ8cgmanlQgp2ib+ElfT+Hk=)
                          2: StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa (hash: ByVhRdCqJLu1JdsaujozowtcN3r+tlHqhV772GdmWjU=)
                          3: WY6pvsgJR7LRmk_zcT_H6lPiyNM.roa (hash: s9khrceBdwiskxC2l1lsQTmPFSMRENlWQQ8ETb/4LxA=)
                          4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: +Pp02uwOykJdTvv6WC53wcZoFq6R4u9be6Y6Sn9azRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:99:f2:cd:ae:98:58:b9:57:e3:36:b2:e6:03:72:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: Apr 17 18:00:27 2026 GMT
            Not After : Apr 18 18:00:27 2026 GMT
        Subject: CN=2bad4bc705eeffbe9100da45eae1c27961d9bb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:d8:cf:ad:0d:e2:43:c0:0b:32:71:8d:e2:
                    f3:fe:f6:7d:d4:26:95:fb:e3:2e:6e:40:bc:9e:da:
                    37:68:41:87:bd:cb:4f:92:d1:48:9e:10:95:34:13:
                    15:f1:a4:7b:5e:99:a4:ed:44:5c:3b:89:98:0a:a2:
                    3d:ec:9b:26:ff:20:ec:c8:c0:ab:c4:ef:30:2e:ad:
                    08:db:9c:fb:1d:79:99:10:be:ae:ba:3e:a2:17:30:
                    bb:fc:fe:25:b0:3d:62:1f:75:02:3c:be:8a:3f:58:
                    43:28:e8:52:8f:c8:5b:7c:4d:4f:db:c7:bf:e2:92:
                    a1:df:8e:3e:31:d7:d3:f8:98:4e:26:c7:f6:d9:7d:
                    35:ba:f0:ef:ac:59:a4:fa:38:15:1b:2b:b1:11:e6:
                    e9:a5:8c:a5:a2:4a:b8:06:51:36:60:50:2b:46:cb:
                    cc:9e:6f:6a:60:52:71:71:5d:70:22:de:0f:f8:33:
                    bc:5a:1b:11:6b:1a:41:1d:0d:97:be:09:a2:51:51:
                    d7:eb:45:21:cb:1a:85:86:75:0f:5e:5f:a3:a7:af:
                    c9:8b:c8:15:05:80:c1:45:b2:ad:48:6e:e1:a2:83:
                    66:87:18:53:0a:ed:fb:31:0e:47:d1:2b:cc:2a:db:
                    0a:e4:ac:22:66:ef:08:68:cf:b6:5d:0c:6b:93:6b:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:4B:C7:05:EE:FF:BE:91:00:DA:45:EA:E1:C2:79:61:D9:BB:63
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:44:39:b3:74:dc:4a:1f:04:9e:83:ec:1b:68:b0:2b:a9:
         9e:36:84:85:da:9a:74:93:0d:48:5b:d7:34:c6:a6:71:73:1b:
         5d:7b:70:80:49:0d:3d:59:8c:96:8c:60:19:d7:7b:20:e9:02:
         3a:5d:78:b9:24:86:3f:04:d7:84:88:d8:af:cf:62:62:b4:11:
         60:c6:53:d9:ef:01:4a:f1:50:80:b3:8f:71:ca:fd:d8:e8:eb:
         91:e5:42:e7:39:99:e1:8e:a0:5a:49:09:93:10:99:de:1c:3e:
         b1:ba:49:3e:30:97:9e:d4:75:55:b5:ae:d9:74:65:9a:ba:c0:
         aa:04:af:15:82:50:e0:69:26:95:eb:4e:eb:6b:01:21:8b:e5:
         73:dd:1f:2e:6a:01:28:d8:43:e9:c1:a2:1f:bd:e8:47:1d:30:
         3a:72:f1:f5:25:c6:55:5d:fa:0d:32:fc:eb:8a:5d:7f:d6:db:
         d9:69:dc:0f:85:53:a5:1b:70:1c:ce:87:55:6f:19:f9:b8:c1:
         eb:b1:93:8a:0b:0d:11:de:68:dd:39:04:a6:1f:1d:ff:fa:ce:
         95:94:b9:7d:a7:8d:bb:02:c4:43:4f:0f:8e:9f:15:30:3b:f9:
         7a:41:c5:29:86:f7:5d:85:bc:c2:35:24:c7:5e:f2:2f:af:82:
         21:ad:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:20 2026 by rpki-client