Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          rnsIuQsrAnGNM4wMHfFSShMkPeSB/xGcidHca3/ysAw=
Subject key identifier:   EA:B2:C0:80:D5:3F:9C:27:CB:F0:0F:5E:76:37:2D:3C:FD:58:BA:7D
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       019D9B512DC528D1FA4A5561DC8DEEF5626F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          1854
Signing time:             Fri 17 Apr 2026 12:01:21 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:21 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:21 +0000
Files and hashes:         1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=)
                          2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: 9WJmKN0950XvkDGxvL4HaYOgykQP7YwDiHx3+yoC3n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:2d:c5:28:d1:fa:4a:55:61:dc:8d:ee:f5:62:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: Apr 17 12:01:21 2026 GMT
            Not After : Apr 18 12:01:21 2026 GMT
        Subject: CN=eab2c080d53f9c27cbf00f5e76372d3cfd58ba7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:2a:b5:ed:a0:f1:9f:fa:44:39:e7:3f:c9:
                    24:2c:fb:e9:67:91:73:d3:97:97:14:a8:3a:bf:fd:
                    7c:37:63:51:ed:95:53:fb:d4:c3:85:50:a6:3f:cf:
                    7c:80:a6:fb:d3:b9:9f:8c:2d:a2:28:71:e9:d0:f7:
                    6a:ef:32:58:3c:b5:35:88:ea:7f:26:b3:01:5a:1e:
                    a9:03:6a:08:6d:6a:81:98:60:8e:0d:fa:69:af:1e:
                    2a:8a:53:a5:03:ba:7f:06:d2:64:31:ef:84:35:bc:
                    9f:75:61:a5:dd:a7:c5:d9:17:7d:43:8e:29:e5:47:
                    cb:58:94:75:84:c8:1d:2a:b1:b7:57:30:21:e3:6d:
                    0b:45:0a:75:5d:79:0b:2a:70:4f:d0:0c:be:10:13:
                    29:21:34:6d:e1:37:0f:d3:14:c7:d3:a4:50:f9:08:
                    27:8b:05:42:37:c0:20:fb:27:ea:74:8c:47:d1:8e:
                    aa:a9:57:40:c1:5f:87:ed:62:3b:89:0f:c7:b0:ed:
                    7b:0b:70:b1:69:9a:36:7f:d1:7d:7a:3a:bc:1d:6d:
                    a3:ed:13:6e:a0:1f:15:50:c6:ea:d3:91:0b:6b:af:
                    b0:79:44:5c:a0:0f:2d:cc:67:7b:b9:55:38:82:13:
                    b3:ac:9c:5f:3d:64:af:55:58:56:d0:7a:af:8e:1a:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:C0:80:D5:3F:9C:27:CB:F0:0F:5E:76:37:2D:3C:FD:58:BA:7D
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f0:b2:ba:17:97:d6:be:f4:56:da:8a:52:18:4e:68:3d:14:
         c8:f0:dc:a5:a9:35:e7:26:e9:e4:72:45:68:a7:6d:21:94:bd:
         14:b0:f2:83:0d:58:0e:92:c7:31:72:1d:88:f5:5c:06:15:81:
         22:c7:be:66:38:2e:4c:36:f9:5d:5b:c0:a2:16:06:81:cc:8c:
         36:52:cb:a2:94:15:9f:25:3e:a6:2a:91:35:50:34:01:04:80:
         6b:95:8e:bd:37:e4:8f:b6:c2:b5:d3:34:e1:fb:4d:81:65:23:
         35:94:ce:64:00:cc:c7:d8:ad:2d:3c:33:4f:66:1e:da:2e:24:
         cb:ab:64:37:98:24:5b:ff:37:b6:74:54:fe:8e:24:2f:49:49:
         07:9f:a2:5a:38:ff:08:e5:36:85:02:50:9b:0f:ae:2a:35:5b:
         fb:b1:f3:00:98:f6:57:76:a3:ae:cd:0c:3f:57:3b:b7:19:26:
         aa:4a:e5:3e:0d:1a:fc:32:94:fc:bd:ca:1d:7e:0e:73:6b:55:
         c2:ff:38:f6:8c:f4:f8:92:2b:43:3c:70:b2:14:8a:b3:a7:ae:
         5f:ec:0b:02:5f:12:e3:ac:f6:9b:a8:98:b8:2f:4d:9c:a7:da:
         10:c2:3f:82:30:b8:03:71:a4:e1:b5:e6:dc:41:44:2f:42:e2:
         44:19:3a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:07 2026 by rpki-client