Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File:                     Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier:          AblZ0mTL+QWkWhuOunINtbT8YT+bYo7u84WYZSVBGuo=
Subject key identifier:   F7:A7:8E:8A:75:F8:63:C9:5A:92:88:E8:34:D1:BA:6F:CF:C6:13:7B
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer:       /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial:       019D9BF53D3D709A2CA718B08B99B0192F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number:          05DB
Signing time:             Fri 17 Apr 2026 15:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:33 +0000
Files and hashes:         1: C8KAjAmMo4zHOxPsP5u33kaFWlY.roa (hash: U4UKkIWDo1A35uGyB5LLNTGRRGiNn0SaaQUFdLefZ24=)
                          2: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: tYzFe3FVijRKRbBdX9awfJL+zyv/YwWyBGwjVjYxVcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:3d:3d:70:9a:2c:a7:18:b0:8b:99:b0:19:2f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
        Validity
            Not Before: Apr 17 15:00:33 2026 GMT
            Not After : Apr 18 15:00:33 2026 GMT
        Subject: CN=f7a78e8a75f863c95a9288e834d1ba6fcfc6137b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:10:dc:06:b1:b5:3d:56:e2:6a:d2:e9:82:70:
                    53:71:70:a5:d2:42:30:72:0f:6f:af:f4:04:b6:2e:
                    0f:a9:29:59:2c:8c:69:72:ef:76:04:4f:c4:d7:b4:
                    ac:a8:4a:f2:12:64:f4:ea:a5:a9:80:5f:d9:80:ec:
                    44:a5:d0:ed:24:48:31:45:4a:9b:2c:be:71:bd:2a:
                    ff:3b:9d:91:39:0d:34:10:96:88:69:52:c0:78:ad:
                    51:14:8b:7e:b2:4e:36:90:ff:a5:67:79:29:83:02:
                    a5:bc:a4:24:9b:e0:3f:b0:80:9b:59:3b:4d:4d:cc:
                    8e:08:0a:ad:b0:70:c5:16:74:72:dc:5a:b4:8b:a7:
                    71:f5:07:c4:ea:6e:0d:0f:f2:97:7a:04:b2:fc:ae:
                    3d:99:61:b8:69:03:19:7e:51:04:83:b1:ff:78:e5:
                    a2:a5:98:3a:5c:32:2e:31:cd:4e:af:85:ff:28:08:
                    15:ad:92:90:12:20:85:0f:dc:9c:c1:0d:e1:97:7f:
                    c1:20:36:91:46:2d:eb:6d:1e:f2:b8:3b:72:7e:8a:
                    5c:ad:fb:53:66:ba:09:e8:a9:16:7b:0c:89:57:5c:
                    e6:6c:ab:cf:ac:e0:48:c5:88:b4:20:74:cb:9b:b7:
                    99:05:e8:72:fa:5a:03:a9:3f:ab:3a:60:de:14:70:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A7:8E:8A:75:F8:63:C9:5A:92:88:E8:34:D1:BA:6F:CF:C6:13:7B
            X509v3 Authority Key Identifier:
                keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ec:06:ba:3f:09:37:a0:3b:8f:d4:a9:e0:8d:7e:fe:cf:f6:
         a4:67:b4:f2:35:5b:4a:ea:71:cc:b9:52:ec:2d:89:af:98:1c:
         6e:5a:79:5a:3d:32:68:56:64:b6:ef:db:20:55:cc:fe:e1:22:
         e1:46:9a:20:f9:23:71:19:e2:35:a6:51:3f:b9:f7:0e:3f:42:
         b3:b1:55:f3:bb:4b:f5:be:92:1b:f9:38:18:27:b7:dd:3a:3e:
         dc:2c:05:a1:8c:40:d0:17:7c:11:9c:5b:94:32:33:19:1a:34:
         2f:a5:0b:4e:ca:b0:ea:df:a7:da:3a:39:0d:10:02:02:91:28:
         5d:9e:cc:91:9e:12:bc:5f:ed:53:6d:0a:c8:89:44:40:12:97:
         90:4e:91:d4:1a:ce:55:87:4a:8c:04:c9:cc:3a:5c:be:49:12:
         74:99:fb:52:a5:6a:42:e2:e1:da:b3:7f:5b:7a:50:e8:4b:98:
         1d:fb:7d:8f:85:06:7d:cd:e6:8a:a8:94:bb:92:ad:0d:57:4b:
         be:b0:91:2f:cf:1b:23:c9:1e:bd:10:2b:00:80:cf:e9:dd:48:
         1d:62:db:5e:e5:fe:b3:45:a8:8a:96:ee:7d:b4:6f:80:2b:28:
         d5:d2:75:d9:19:b8:35:ea:e4:ff:37:4e:2a:ee:49:cb:1d:a4:
         4d:ff:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:02:43 2026 by rpki-client