Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File:                     qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier:          fBkpPTMGMHDRdVi269nj/wIAy5V0eySrhOnCaT7vUk0=
Subject key identifier:   95:AB:3D:E8:2B:84:AD:CC:6A:6F:2B:09:5C:D8:BC:7E:B7:3B:EF:85
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer:       /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial:       019D9962A7027427163CEAE451F3D8CD1E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number:          0DC5
Signing time:             Fri 17 Apr 2026 03:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:12 +0000
Files and hashes:         1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: evTXGRbtI1G7rIq4bQBwVtozd3GzpXkLuBsXMXDrgcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:a7:02:74:27:16:3c:ea:e4:51:f3:d8:cd:1e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
        Validity
            Not Before: Apr 17 03:01:12 2026 GMT
            Not After : Apr 18 03:01:12 2026 GMT
        Subject: CN=95ab3de82b84adcc6a6f2b095cd8bc7eb73bef85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:4e:f7:7e:0f:aa:9f:f4:d6:66:c0:5b:08:
                    e0:7c:61:a7:ce:65:b6:e8:d1:71:2f:1e:f8:e9:22:
                    c7:9e:3c:1c:07:eb:d8:62:fb:95:13:9e:63:7a:8f:
                    4c:38:0e:97:8f:6b:10:90:3f:45:4c:16:c0:fe:1a:
                    cd:00:18:66:89:65:7c:39:87:e9:ff:fa:16:e3:ea:
                    a6:1b:c5:1d:c2:e7:20:69:b9:3d:b3:87:36:f3:08:
                    c8:89:8d:aa:2c:1b:6e:c4:72:53:82:e8:d5:34:99:
                    e5:38:03:92:f5:9f:1c:8d:27:5b:a1:67:78:8c:9f:
                    43:c4:94:89:de:65:85:c2:30:32:2e:22:f0:96:7e:
                    7b:45:12:63:37:8c:99:6c:c3:52:d3:3f:c2:dc:29:
                    32:61:12:15:12:9f:f7:28:1a:73:f2:8b:00:ff:58:
                    78:4f:e9:29:c8:7e:fa:a2:53:18:0e:3a:4d:6e:f9:
                    0f:0f:ed:44:39:70:3a:c6:19:9b:09:f6:47:ef:98:
                    89:88:b2:55:f5:f4:7a:73:a2:85:e0:78:ab:1b:ec:
                    f6:f3:03:fd:bc:5e:60:b5:6f:ff:ee:7f:a1:c3:ac:
                    30:2c:2c:07:0c:3c:ca:ef:e1:2a:1a:74:2b:ba:f3:
                    33:ae:59:2d:d0:c0:23:e5:16:ba:70:d9:1a:99:dd:
                    45:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AB:3D:E8:2B:84:AD:CC:6A:6F:2B:09:5C:D8:BC:7E:B7:3B:EF:85
            X509v3 Authority Key Identifier:
                keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7d:3a:b4:62:cf:57:7b:44:f6:ee:e6:b1:ca:bf:a0:0c:87:
         74:a5:36:1a:fd:f8:82:01:01:44:2f:88:e6:ea:52:aa:15:4b:
         7d:4d:3c:4c:9a:eb:e1:cb:b9:fc:7b:e7:42:9b:ea:e5:d2:19:
         41:f6:e7:95:b2:38:ed:fd:0e:69:97:61:2a:d2:4f:7e:54:8a:
         e9:e0:dc:cf:13:2c:f1:f0:5e:b5:4e:bc:8d:9a:d1:0e:5e:d1:
         bb:16:8b:0f:8d:c8:74:91:f7:b4:a7:e5:5a:d4:da:a0:c1:08:
         c2:a8:31:cc:52:01:19:ba:92:e4:84:7f:e0:fc:f8:fd:12:4c:
         4f:89:e1:c7:fc:76:2f:34:da:f2:ee:67:f6:46:be:ea:f9:81:
         13:3c:50:d2:d6:41:6d:c1:97:72:ff:14:6f:c9:6f:58:4d:d6:
         14:c8:7a:6c:a7:e4:49:42:5e:00:1d:b4:46:0c:f9:29:cb:8c:
         0d:e0:fc:97:40:bc:9a:2d:53:5b:2f:ce:8b:11:72:c1:b3:c4:
         7c:bc:4e:44:09:ca:ef:f9:6e:40:5e:72:74:fc:fc:2a:c9:89:
         a6:93:85:3b:e8:58:83:a1:a9:3c:a1:a1:d6:25:05:77:8d:de:
         fe:95:49:0c:37:66:a2:de:b0:87:e3:6e:8a:08:56:c3:ae:e5:
         44:c1:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:41 2026 by rpki-client