Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File:                     Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier:          HbFWGFFXshPLqYvCGHHcEF6nmqPOOICiOgx7iccOaDk=
Subject key identifier:   CE:46:7B:5C:84:03:22:E5:86:74:33:9C:D8:7D:88:06:92:54:A9:52
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer:       /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial:       019D99D0C938700237908BA0D9198CB614BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number:          055B
Signing time:             Fri 17 Apr 2026 05:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:29 +0000
Files and hashes:         1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: lKS78ieiW+K821ygb+EEj9A+0Zato3Sz5sPrBrwUcUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:c9:38:70:02:37:90:8b:a0:d9:19:8c:b6:14:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
        Validity
            Not Before: Apr 17 05:01:29 2026 GMT
            Not After : Apr 18 05:01:29 2026 GMT
        Subject: CN=ce467b5c840322e58674339cd87d88069254a952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b9:32:8c:61:3d:3e:a3:3c:90:bf:ad:93:5e:
                    38:02:f3:4d:0c:37:53:30:05:e9:23:ce:43:21:56:
                    49:1a:94:5a:6d:d8:01:0d:c1:3d:ae:60:12:ab:fc:
                    93:bc:0f:cd:58:79:0f:35:55:8e:2d:93:a2:01:be:
                    7a:13:56:ab:5e:57:ca:45:6b:7d:d9:3c:42:ce:de:
                    b2:93:4a:01:8f:23:14:b8:23:aa:52:6f:56:af:30:
                    2e:f5:89:32:49:45:c5:e0:25:23:9f:b8:12:45:bb:
                    5e:b3:64:57:9a:69:4d:1c:c0:6a:43:8a:96:c4:58:
                    ed:b3:60:88:f5:99:47:ac:e1:69:14:6f:d6:44:44:
                    38:e2:d0:83:66:c1:9e:03:54:db:68:49:2d:33:57:
                    7d:f4:f3:d5:2b:1d:ee:98:da:aa:46:7b:6f:5c:82:
                    8e:d9:e6:85:48:8b:32:f3:a8:eb:ba:29:45:f6:f5:
                    6e:15:b0:b2:f7:90:42:15:e2:d1:2c:5d:b5:23:77:
                    6b:09:cf:e7:18:54:90:af:1f:6c:6a:b3:07:bc:64:
                    dc:a9:82:a0:17:21:c2:f8:ec:44:f7:82:4f:69:c4:
                    f2:8a:2c:37:92:11:93:98:d1:ca:ce:28:b4:56:4a:
                    71:19:28:d4:98:14:16:b3:e5:64:bd:a8:de:06:6d:
                    4b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:7B:5C:84:03:22:E5:86:74:33:9C:D8:7D:88:06:92:54:A9:52
            X509v3 Authority Key Identifier:
                keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:6c:da:03:b5:c2:c7:25:6e:5c:2d:e3:c6:96:d8:f2:df:
         af:a1:98:02:44:3c:eb:e3:86:76:7f:17:3c:9f:20:b8:cc:f5:
         89:87:d6:f5:79:13:be:43:d7:80:f3:2d:39:af:ab:8f:ec:f8:
         a2:b3:ea:43:f7:54:4f:e8:76:82:4d:3d:87:27:bc:fa:43:30:
         9e:df:c9:d3:1e:b1:1c:b7:eb:db:a3:65:63:6f:42:36:d3:49:
         e9:56:10:e3:0b:1e:1a:2b:ae:02:d9:01:ac:c8:76:43:56:d3:
         bb:46:58:79:94:4a:53:70:fe:9b:4b:ca:d0:14:a7:7c:7a:15:
         8c:ae:af:32:eb:a7:16:59:d0:3c:f6:e2:cf:d9:92:6c:67:02:
         f3:87:87:0f:2c:be:2a:1b:31:e3:11:85:0c:03:1a:ad:29:db:
         c3:53:fe:d7:44:fa:aa:c0:7e:10:bc:54:06:d1:68:fb:46:c2:
         d3:5e:5f:aa:14:14:24:5d:0a:2a:f6:d4:ac:29:91:86:6a:9a:
         84:70:52:a2:89:9e:ad:18:8b:08:45:c8:91:18:09:4f:6a:25:
         92:41:9a:e2:be:45:12:5e:9a:a8:92:5c:23:17:80:75:71:92:
         56:13:a2:47:2e:f1:6b:09:91:e7:2a:95:57:64:65:d0:e5:3b:
         6b:22:ea:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Mk4cAI3kIug2RmMthS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZWUxZTdlY2QzMGI4MGEyMDA2ZjUzOGZjZTYzYjI0MjBj
NTdiZTkwHhcNMjYwNDE3MDUwMTI5WhcNMjYwNDE4MDUwMTI5WjAzMTEwLwYDVQQD
EyhjZTQ2N2I1Yzg0MDMyMmU1ODY3NDMzOWNkODdkODgwNjkyNTRhOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bkyjGE9PqM8kL+tk144AvNNDDdT
MAXpI85DIVZJGpRabdgBDcE9rmASq/yTvA/NWHkPNVWOLZOiAb56E1arXlfKRWt9
2TxCzt6yk0oBjyMUuCOqUm9WrzAu9YkySUXF4CUjn7gSRbtes2RXmmlNHMBqQ4qW
xFjts2CI9ZlHrOFpFG/WREQ44tCDZsGeA1TbaEktM1d99PPVKx3umNqqRntvXIKO
2eaFSIsy86jruilF9vVuFbCy95BCFeLRLF21I3drCc/nGFSQrx9sarMHvGTcqYKg
FyHC+OxE94JPacTyiiw3khGTmNHKzii0VkpxGSjUmBQWs+VkvajeBm1LZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5Ge1yEAyLlhnQznNh9iAaSVKlSMB8GA1UdIwQY
MBaAFEHuHn7NMLgKIAb1OPzmOyQgxXvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMt
NTcyODhmN2YzMDg4LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMtNTcyODhmN2YzMDg4
LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBps2gO1
wsclblwt48aW2PLfr6GYAkQ86+OGdn8XPJ8guMz1iYfW9XkTvkPXgPMtOa+rj+z4
orPqQ/dUT+h2gk09hye8+kMwnt/J0x6xHLfr26NlY29CNtNJ6VYQ4wseGiuuAtkB
rMh2Q1bTu0ZYeZRKU3D+m0vK0BSnfHoVjK6vMuunFlnQPPbiz9mSbGcC84eHDyy+
Khsx4xGFDAMarSnbw1P+10T6qsB+ELxUBtFo+0bC015fqhQUJF0KKvbUrCmRhmqa
hHBSoomerRiLCEXIkRgJT2olkkGa4r5FEl6aqJJcIxeAdXGSVhOiRy7xawmR5yqV
V2Rl0OU7ayLq1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:16 2026 by rpki-client