Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
File:                     sq89ZYtJTLFxUgbFzXbnkuckfvc.mft (raw, json)
Hash identifier:          cAmYnw4GkkXIDfTGbGL+gVxs9qNy6Bk+J4nP9Kd/PJw=
Subject key identifier:   5E:4C:CE:8C:A7:CC:D7:88:8B:2B:EE:4D:64:30:AE:59:EF:FC:23:5F
Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
Certificate issuer:       /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Certificate serial:       019D99622A87173DF37CB53A973B8EEC6570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
Manifest number:          074F
Signing time:             Fri 17 Apr 2026 03:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:40 +0000
Files and hashes:         1: ZoA4ZVqC0ZLffn6V-FB9F10l7pU.roa (hash: aHUNwJ+YvxKRTJDaD0sMuoyAC4QGr+TPQfR1XTwxQGw=)
                          2: sq89ZYtJTLFxUgbFzXbnkuckfvc.crl (hash: JiOxYEZ5mKPRiUd+2jnBGKiVynopKhKGAUy8pEdJfus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:2a:87:17:3d:f3:7c:b5:3a:97:3b:8e:ec:65:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
        Validity
            Not Before: Apr 17 03:00:40 2026 GMT
            Not After : Apr 18 03:00:40 2026 GMT
        Subject: CN=5e4cce8ca7ccd7888b2bee4d6430ae59effc235f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:d1:26:2e:99:4d:07:37:88:0d:49:3a:c8:
                    5d:86:76:d6:6d:a1:61:14:3e:00:ed:59:a9:5a:36:
                    b1:6d:5f:5a:e6:48:38:32:75:61:d9:e4:ff:2a:a3:
                    1f:89:26:91:8e:37:fa:85:e2:f0:1e:58:1b:83:fa:
                    38:2b:55:1d:5e:12:6d:a1:03:21:78:46:48:47:85:
                    c7:16:9b:26:37:8c:d7:1a:1b:c8:61:67:70:52:a5:
                    41:52:01:43:46:b9:24:5d:9d:90:cf:47:2b:32:96:
                    cb:b1:82:84:76:8d:d4:1f:f5:5e:d4:02:dd:2e:32:
                    e1:4b:d9:98:99:55:74:6b:99:06:cb:77:f7:15:e5:
                    24:a8:37:5c:a6:b9:9e:20:41:29:7f:57:79:09:38:
                    ad:64:2b:dd:a0:be:03:5d:5e:9a:0e:c1:91:2b:53:
                    7b:f5:8c:3e:72:37:65:e5:85:21:44:ba:7d:cb:6d:
                    29:14:14:27:50:9b:aa:3a:d6:07:3c:2a:26:11:54:
                    30:9a:bc:0a:1a:e2:b0:a2:7b:25:2d:0a:fa:24:14:
                    75:84:4d:27:70:ce:71:56:4d:56:38:e6:c0:b5:d1:
                    d4:8d:0b:80:ed:82:79:cc:7a:46:74:8c:63:d7:68:
                    f5:bd:23:38:bf:55:c4:3e:41:42:0c:e5:ae:6d:c2:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4C:CE:8C:A7:CC:D7:88:8B:2B:EE:4D:64:30:AE:59:EF:FC:23:5F
            X509v3 Authority Key Identifier:
                keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1e:0c:b1:23:0f:61:78:1e:54:63:f8:80:92:15:b6:fe:0e:
         15:d9:d0:2f:ef:8a:2f:59:83:14:7b:35:68:7d:27:ea:25:5d:
         4f:42:d6:84:f5:c8:a0:7c:5b:5c:a3:df:72:c0:14:be:6d:f1:
         47:b7:8c:94:51:0f:c3:32:50:ef:4a:c4:5c:35:a9:c5:62:58:
         ef:66:f1:11:c0:2e:18:f7:0f:97:3a:5f:71:96:7c:3b:ca:61:
         d8:65:e3:1d:5e:55:09:36:6c:c6:79:1a:01:cc:0c:9f:1b:05:
         7e:0f:c7:bb:41:29:39:29:45:e6:8a:41:57:ec:37:e4:d6:44:
         2b:90:17:ff:4d:5b:f7:4c:8b:08:50:46:b0:81:e4:67:c2:3e:
         67:6e:27:47:64:df:7e:8f:8e:f3:de:fc:c7:b7:7f:33:1d:c8:
         d7:ea:62:97:2a:09:c6:89:6a:65:0e:bb:4d:6c:ae:96:f6:5d:
         40:66:b3:4f:53:1a:dd:14:02:98:f4:60:59:ea:63:21:6c:2a:
         a2:df:1b:64:5d:11:e1:df:db:96:42:a8:9d:0e:25:e6:a8:28:
         77:d9:18:c7:f7:08:46:34:20:b7:00:d1:16:a7:aa:4c:2c:19:
         3a:8c:58:fe:8d:b6:55:54:74:4d:d0:13:d2:b9:6f:87:9e:ed:
         37:ee:f3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:57:38 2026 by rpki-client