Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          dxlqJD1uTBu04ZofvC8Lp1PUppEBVqYfceiHlb9vplo=
Subject key identifier:   A7:6D:BB:9F:71:6A:B3:84:F1:FF:D6:C9:31:CD:59:0A:93:FA:27:1F
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       019DA3E63B8B14D471866D3E236A104BBD43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          04C2
Signing time:             Sun 19 Apr 2026 04:01:07 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:07 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:07 +0000
Files and hashes:         1: 52DLcP5QY9pi7vojxO_II_zfgcQ.roa (hash: RzKzGr4Ea3LAud+NmUq6w6faNUNWCiigM9sI+gxiGqs=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: P6Z2uBELY+5SRlk7iD0VQP57DWmKK5n+lwbFQCABGoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:3b:8b:14:d4:71:86:6d:3e:23:6a:10:4b:bd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Apr 19 04:01:07 2026 GMT
            Not After : Apr 20 04:01:07 2026 GMT
        Subject: CN=a76dbb9f716ab384f1ffd6c931cd590a93fa271f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:c4:9f:74:64:a5:9e:76:9b:be:e5:7b:4c:
                    96:da:24:0d:ac:a0:1f:c9:30:11:e3:d5:5d:f0:32:
                    9d:e3:19:55:5d:6e:42:2f:4c:3f:61:41:1a:17:d0:
                    e7:fd:94:1f:f9:e1:3f:a8:75:f5:02:5d:61:9f:d8:
                    aa:82:9f:2e:b0:9f:74:50:ee:6b:70:c5:51:f7:83:
                    73:f1:18:94:d2:a5:fc:be:94:6f:9e:55:d7:12:9b:
                    32:85:1a:df:f1:98:af:22:13:b1:bb:9b:10:be:7b:
                    78:c2:72:ac:0e:cb:d8:79:71:ce:0c:29:95:37:f8:
                    1c:d6:93:1b:51:fb:52:d5:23:e8:68:71:ea:32:2a:
                    d5:0e:05:7d:69:70:e7:5d:c3:15:97:0e:94:34:44:
                    56:6a:f6:61:18:85:e4:ff:09:71:0b:17:5e:1b:6d:
                    70:0e:6b:f5:ed:f4:12:48:7f:f3:e7:a2:aa:cc:12:
                    b9:9c:b1:1e:a3:2b:1f:23:8a:90:00:25:70:90:54:
                    f9:35:1d:3c:30:36:39:04:8a:8c:e4:cb:15:ca:a8:
                    b8:1c:66:7a:96:0b:c8:33:5a:49:24:07:6d:74:9b:
                    38:3c:e5:44:73:4a:67:27:96:69:3f:58:85:c2:14:
                    c7:ef:e6:10:75:69:98:21:6b:ee:47:49:9a:e1:84:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6D:BB:9F:71:6A:B3:84:F1:FF:D6:C9:31:CD:59:0A:93:FA:27:1F
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:c4:59:fd:c5:ba:e6:aa:ce:f7:58:90:c4:c0:58:88:9a:
         f6:11:63:c1:53:a7:ea:fa:7c:15:7c:e9:9e:cd:88:f9:48:aa:
         1e:76:52:6f:3f:8c:ef:63:fc:a3:1c:5e:c5:88:af:05:a3:1a:
         b9:d4:35:4f:65:0a:49:15:c6:45:95:cc:b3:b2:43:e7:6b:b7:
         52:6f:9b:f3:fa:9e:ac:77:b2:bc:11:d3:7d:3e:7f:e1:5b:eb:
         a3:56:98:ab:ca:fa:da:c7:32:ec:34:16:fa:78:9d:ea:e0:7a:
         53:e0:20:80:d9:0f:b2:88:4c:12:44:5d:1b:1e:44:45:8b:d9:
         37:6b:46:83:47:b4:f4:5b:8a:54:4d:7d:87:83:47:51:63:17:
         4b:76:54:13:df:c8:6d:3a:74:aa:45:77:29:8a:a4:06:15:47:
         32:23:e4:fc:eb:5f:0c:f1:d0:34:bb:4b:b6:fa:65:00:f2:f7:
         12:25:3e:91:31:df:9f:f4:8a:ac:87:db:b6:a9:9e:57:9f:10:
         fc:41:3a:f7:48:bf:38:10:ec:b9:82:c1:3b:c3:db:d7:7f:74:
         f2:bb:9a:3d:5e:36:4e:c4:b1:90:08:5f:c1:b6:38:d2:46:52:
         73:7a:eb:43:31:4f:36:46:16:bf:78:44:c8:8a:a6:29:d6:ab:
         32:2e:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:18 2026 by rpki-client