Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
File:                     qQ_wEQVOz-aKitx94mit5sCCdxE.mft (raw, json)
Hash identifier:          H12D18QIxDCULrHsvm+8X8ww65VsWAJeZIjhS4yArHI=
Subject key identifier:   51:90:F7:47:0C:E5:9B:93:4F:D3:32:B4:F8:A9:3A:03:60:05:F3:9D
Authority key identifier: A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
Certificate issuer:       /CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Certificate serial:       019D98F45F010004B7F5DEBEDB265FE4FE47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
Manifest number:          18BD
Signing time:             Fri 17 Apr 2026 01:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:45 +0000
Files and hashes:         1: qQ_wEQVOz-aKitx94mit5sCCdxE.crl (hash: rLhiPzmIHdzfNZcf5Oc7dP0Ev7l8atEnysHXqXjN1w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:5f:01:00:04:b7:f5:de:be:db:26:5f:e4:fe:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90ff011054ecfe68a8adc7de268ade6c0827711
        Validity
            Not Before: Apr 17 01:00:45 2026 GMT
            Not After : Apr 18 01:00:45 2026 GMT
        Subject: CN=5190f7470ce59b934fd332b4f8a93a036005f39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:be:17:60:18:4f:35:d8:cf:10:75:b0:e4:
                    9f:6f:42:10:fb:c5:74:e8:97:5b:71:ca:c6:39:a4:
                    30:df:fc:6e:09:ce:c7:16:b6:9c:0a:60:ca:7f:4b:
                    8f:9c:2a:f7:8c:cd:1a:5f:a6:7c:5f:64:0f:90:89:
                    24:31:4f:92:63:5f:65:5e:aa:00:79:c6:ea:07:6f:
                    db:0b:fe:ba:65:e3:95:91:75:8a:18:c4:d2:19:28:
                    99:5a:ec:7c:63:38:0e:5d:25:58:c8:1d:ca:83:23:
                    17:d5:09:48:4b:c2:f9:ee:c3:0b:f3:70:ba:81:ce:
                    5d:21:ec:69:a2:25:c2:fc:ab:61:8e:a4:57:ae:8a:
                    a2:a2:ff:7b:ed:4a:9f:9a:ef:94:36:b7:69:35:b7:
                    46:36:2f:7b:40:fd:c0:5f:55:55:f1:cc:e9:4d:5d:
                    a1:99:5a:ab:07:68:e8:28:60:f5:47:9f:ba:37:c9:
                    e6:4f:a7:23:4b:cb:d3:93:31:11:bd:da:44:be:04:
                    39:3a:c2:1c:8f:24:e3:64:9f:db:11:e0:3e:08:89:
                    05:d2:9d:1c:f8:fd:b2:3d:1e:9b:94:86:c0:05:6b:
                    4b:73:7f:48:50:45:50:b0:45:df:6a:64:7a:37:8c:
                    83:14:57:94:5b:41:47:24:6d:ff:fc:5c:43:7c:0c:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:90:F7:47:0C:E5:9B:93:4F:D3:32:B4:F8:A9:3A:03:60:05:F3:9D
            X509v3 Authority Key Identifier:
                keyid:A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:53:c6:60:95:b2:f6:a7:c9:46:c2:af:0d:50:26:2e:49:
         01:c0:20:4d:54:b0:cf:fa:41:6e:3a:51:2c:fc:49:3e:58:c0:
         cc:05:93:b4:27:a7:db:a5:89:1e:e2:e6:47:f9:7c:49:df:ea:
         ec:a1:14:fe:2b:8e:36:d6:92:1e:8b:da:a4:68:b6:0b:82:ea:
         7f:51:a2:2d:02:4b:5e:a4:f9:e1:37:fb:84:bd:ac:49:55:a4:
         e1:24:d1:47:fc:c5:a9:8f:de:23:81:1e:b5:05:76:5c:8b:77:
         91:9e:f8:a9:6a:71:39:e3:72:d5:c7:dc:c9:f5:b5:c5:2c:8b:
         d1:b9:30:05:30:ef:25:f5:80:d6:c2:ed:5f:86:9e:df:cd:0a:
         cb:ce:25:0a:54:94:5d:45:37:a0:73:9f:63:13:42:7e:e0:07:
         12:12:cc:79:3b:00:2c:48:88:ce:27:8c:5d:5b:45:43:55:72:
         19:5c:46:d3:f8:40:ef:3a:ef:91:ce:a3:13:08:97:2b:dd:be:
         72:46:28:bf:83:3c:a9:f5:57:28:10:ef:05:1c:13:1d:ae:57:
         9c:e1:1f:e9:79:42:30:bf:ac:38:e9:c8:33:4f:98:19:13:12:
         59:80:8b:14:2f:16:00:f8:75:b1:24:1d:a1:8c:30:ba:36:f5:
         f0:74:e7:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9F8BAAS39d6+2yZf5P5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGZmMDExMDU0ZWNmZTY4YThhZGM3ZGUyNjhhZGU2YzA4
Mjc3MTEwHhcNMjYwNDE3MDEwMDQ1WhcNMjYwNDE4MDEwMDQ1WjAzMTEwLwYDVQQD
Eyg1MTkwZjc0NzBjZTU5YjkzNGZkMzMyYjRmOGE5M2EwMzYwMDVmMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzy+F2AYTzXYzxB1sOSfb0IQ+8V0
6JdbccrGOaQw3/xuCc7HFracCmDKf0uPnCr3jM0aX6Z8X2QPkIkkMU+SY19lXqoA
ecbqB2/bC/66ZeOVkXWKGMTSGSiZWux8YzgOXSVYyB3KgyMX1QlIS8L57sML83C6
gc5dIexpoiXC/KthjqRXroqiov977Uqfmu+UNrdpNbdGNi97QP3AX1VV8czpTV2h
mVqrB2joKGD1R5+6N8nmT6cjS8vTkzERvdpEvgQ5OsIcjyTjZJ/bEeA+CIkF0p0c
+P2yPR6blIbABWtLc39IUEVQsEXfamR6N4yDFFeUW0FHJG3//FxDfAy+aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGQ90cM5ZuTT9MytPipOgNgBfOdMB8GA1UdIwQY
MBaAFKkP8BEFTs/miorcfeJorebAgncRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFfd0VRVk96LWFLaXR4OTRtaXQ1c0NDZHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iYTczYTItZjBlNi00NzZmLTgxMzMt
ZTk5Mjc3MDM3YTQzLzEvcVFfd0VRVk96LWFLaXR4OTRtaXQ1c0NDZHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iYTczYTItZjBlNi00NzZmLTgxMzMtZTk5Mjc3MDM3YTQz
LzEvcVFfd0VRVk96LWFLaXR4OTRtaXQ1c0NDZHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZhTxmCV
svanyUbCrw1QJi5JAcAgTVSwz/pBbjpRLPxJPljAzAWTtCen26WJHuLmR/l8Sd/q
7KEU/iuONtaSHovapGi2C4Lqf1GiLQJLXqT54Tf7hL2sSVWk4STRR/zFqY/eI4Ee
tQV2XIt3kZ74qWpxOeNy1cfcyfW1xSyL0bkwBTDvJfWA1sLtX4ae380Ky84lClSU
XUU3oHOfYxNCfuAHEhLMeTsALEiIzieMXVtFQ1VyGVxG0/hA7zrvkc6jEwiXK92+
ckYov4M8qfVXKBDvBRwTHa5XnOEf6XlCML+sOOnIM0+YGRMSWYCLFC8WAPh1sSQd
oYwwujb18HTnkw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:33 2026 by rpki-client