Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File:                     qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier:          YpX8jZSpDMpxtAbu9hTbKcjGmBJOT37de+avea464OM=
Subject key identifier:   F2:BE:93:47:79:D4:E0:4A:B7:F3:B2:CF:51:2B:67:42:79:FC:2E:C1
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer:       /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial:       019D9B510942BD09E2CEC84CF58889BC71DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number:          0DC6
Signing time:             Fri 17 Apr 2026 12:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:12 +0000
Files and hashes:         1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: 64xF7EiQBk4IeuZCcDXyPtOxwF/ZRTpaUWqtBrnfydc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:09:42:bd:09:e2:ce:c8:4c:f5:88:89:bc:71:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
        Validity
            Not Before: Apr 17 12:01:12 2026 GMT
            Not After : Apr 18 12:01:12 2026 GMT
        Subject: CN=f2be934779d4e04ab7f3b2cf512b674279fc2ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:12:2b:ac:bd:00:c0:9e:04:86:e3:9a:e1:
                    7c:af:1b:fc:93:28:1a:4f:57:ec:ea:0c:f0:aa:e8:
                    58:fb:81:70:43:9e:39:67:0c:b2:19:22:6a:0e:cb:
                    67:e5:97:d2:28:89:b2:9a:14:03:1d:ec:12:ee:38:
                    b9:8b:ea:c2:95:d2:0c:5b:eb:eb:b8:1b:a9:20:9b:
                    50:60:96:4c:ce:d0:f6:f3:e8:24:e4:81:de:a9:36:
                    7f:12:56:52:0f:6e:d4:f8:82:3c:71:74:3b:62:a5:
                    62:05:56:5c:28:5c:6d:61:f0:0b:08:12:7b:61:bf:
                    ac:31:18:b5:43:12:64:41:fc:ca:b0:d2:90:ec:27:
                    81:93:5e:50:0e:a7:4e:c7:95:f3:f2:b6:92:57:2b:
                    85:1f:2f:19:0b:d2:76:14:86:37:fd:22:de:f1:d8:
                    03:20:f3:d0:d2:f9:fb:f4:4e:ea:71:fe:f1:33:21:
                    5b:a9:1a:f8:4c:c1:92:6c:61:65:5b:df:82:3b:2d:
                    e8:0e:8d:ed:01:65:18:da:41:7a:b0:55:14:e6:5c:
                    83:8d:89:df:0c:5f:1d:23:d9:08:0b:51:47:91:a8:
                    62:67:3b:47:cc:24:e5:4d:e3:85:6f:b8:f8:9b:63:
                    c4:5a:95:cb:42:9c:af:40:d5:3c:8e:ec:74:ce:b5:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BE:93:47:79:D4:E0:4A:B7:F3:B2:CF:51:2B:67:42:79:FC:2E:C1
            X509v3 Authority Key Identifier:
                keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c3:4e:da:ee:3e:22:ad:f4:f5:8b:24:62:95:46:d5:ac:59:
         16:75:74:2e:5c:92:54:b5:79:75:bf:d8:12:19:2c:c9:90:81:
         17:54:2a:d0:98:93:a1:84:ac:dd:cd:b4:78:e8:b1:6a:de:72:
         f6:7e:4a:a2:e1:06:3e:6d:f8:f8:47:ff:0c:29:1e:7a:fa:82:
         be:1a:73:b8:46:52:91:73:bb:55:2c:bc:30:1e:21:8b:92:32:
         ae:2f:40:f3:5c:08:5d:74:47:51:49:b3:73:7a:87:9d:61:7d:
         4e:ce:b1:3c:17:b7:8c:2a:19:f8:6f:fd:79:a1:7a:db:a4:80:
         fc:db:a9:7c:94:3c:14:72:b4:f3:4f:44:39:2b:6a:0f:6f:cf:
         60:ca:3c:d7:f2:81:3d:51:e3:0c:0b:07:08:73:dd:fa:df:1c:
         56:6d:8e:87:7f:e5:5f:bf:45:1b:d9:fc:a6:7a:6a:24:8b:7d:
         05:94:f7:84:45:fd:76:1c:08:60:f0:4c:76:ea:6b:b6:a2:bd:
         b6:f9:2c:98:60:1a:de:c8:94:e1:aa:fd:e7:37:64:e1:7c:1b:
         95:f9:74:10:9f:84:94:05:2e:aa:0f:29:3d:53:42:f8:23:7a:
         59:f3:19:2b:ba:f9:b8:80:f8:17:2f:76:69:72:dc:7a:f9:f3:
         74:a0:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:55 2026 by rpki-client