Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
File:                     Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json)
Hash identifier:          CmVZUdoOvbiIt5XZko5b/PABtjAS5FyOQpWwl0wL5Uk=
Subject key identifier:   E8:93:E0:2D:80:B8:76:B6:34:43:1E:51:01:A2:35:AD:13:EC:D9:0F
Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Certificate issuer:       /CN=41b89bd3736ce4f008473965fdae4074567cda03
Certificate serial:       019D98F4811BBBA8C5D811787524409066DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
Manifest number:          0E38
Signing time:             Fri 17 Apr 2026 01:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:53 +0000
Files and hashes:         1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: QfSqE7guhhMEnKOcA9Lr8V+cI6z/W9kF+MLHViFIQFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:81:1b:bb:a8:c5:d8:11:78:75:24:40:90:66:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03
        Validity
            Not Before: Apr 17 01:00:53 2026 GMT
            Not After : Apr 18 01:00:53 2026 GMT
        Subject: CN=e893e02d80b876b634431e5101a235ad13ecd90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7d:c8:79:73:3e:eb:c4:be:d7:97:74:11:34:
                    01:b3:91:c1:48:ca:76:a7:42:cf:9d:4f:3e:4f:c8:
                    1b:05:8c:5c:61:fb:12:4a:e4:d7:21:41:e4:90:3a:
                    cd:75:56:83:1a:e0:85:19:ff:c3:44:23:5c:a2:08:
                    49:e1:bd:b2:58:55:2e:1c:1d:a9:50:57:81:28:45:
                    57:09:9d:38:75:b3:09:de:43:35:8a:89:2d:1b:86:
                    c2:94:ee:3c:63:c5:42:46:64:14:93:80:77:9a:7a:
                    69:f1:10:b8:2f:fe:6f:84:4d:b3:b8:99:68:ee:9a:
                    28:ea:cb:9d:be:f8:92:85:7a:90:6a:ba:3c:ee:95:
                    20:e7:a8:2a:34:7f:ff:35:21:f2:a3:79:76:e8:dc:
                    d5:95:6a:4e:2c:34:3e:f3:44:ce:0b:63:99:79:b7:
                    9b:55:84:1a:99:a4:1b:0f:13:57:cd:23:02:87:45:
                    f9:d4:b3:29:58:d4:e2:16:4c:75:a2:cc:04:46:3a:
                    a1:ed:15:a8:df:d0:20:03:ac:98:c4:dd:67:8b:e2:
                    d5:82:6d:03:5b:7e:df:df:d6:29:dc:d5:b4:17:92:
                    bd:60:80:35:0b:13:fc:79:ac:ce:c3:27:cc:55:90:
                    54:29:78:7f:b4:4e:a0:94:a0:3b:d7:ea:ad:82:1c:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:93:E0:2D:80:B8:76:B6:34:43:1E:51:01:A2:35:AD:13:EC:D9:0F
            X509v3 Authority Key Identifier:
                keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:82:26:0d:5a:f3:55:f4:79:79:27:6e:67:f1:77:fd:b5:51:
         88:8f:51:ea:65:c2:83:9d:29:bc:9e:1d:f7:cb:45:59:c6:a2:
         38:14:68:cb:d8:56:7e:a7:34:3e:58:36:ea:f6:9f:aa:d8:92:
         24:2e:fc:3d:5d:1a:3e:26:b4:18:08:98:66:1a:18:47:1b:64:
         8c:48:65:69:fd:79:bc:e0:01:92:7d:c9:b6:32:fd:bf:a6:f0:
         9d:3a:56:72:f3:26:dc:d1:3a:14:d4:4a:98:4b:13:ec:15:c6:
         d6:10:0a:cb:15:93:13:af:b4:29:8b:99:af:34:e7:0c:1c:8e:
         d5:72:6d:c5:a3:b7:84:70:00:c0:3d:be:bd:d2:e4:96:73:48:
         6a:75:99:31:08:10:bc:a5:99:d1:36:f5:73:a8:21:25:60:14:
         3c:aa:58:61:36:a7:49:56:dd:68:cd:26:91:0d:a8:9d:49:8b:
         7f:f1:be:21:e5:2e:33:22:d8:aa:d2:80:c7:a6:4b:ec:37:d6:
         df:a7:89:da:e8:c8:73:0e:e5:0b:63:e5:b5:5f:66:b0:89:94:
         04:eb:df:76:99:66:5f:d7:44:64:85:a5:c1:bd:f8:0b:b3:6a:
         63:00:16:2e:1d:97:7a:9d:a2:15:1d:1f:88:19:30:67:84:17:
         0a:f5:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:19 2026 by rpki-client