Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
File:                     Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft (raw, json)
Hash identifier:          aMOfuTN/+EIDqYh57nYWDpQJpJEo8zhEGPcoOc0HIDI=
Subject key identifier:   22:99:CC:02:1D:47:43:89:B7:AA:67:4E:D0:BC:EC:DF:85:D8:C2:69
Authority key identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
Certificate issuer:       /CN=42afd560d513077e339fabfe0ccda90940bdd814
Certificate serial:       019DA378898F4E067AF24C9CCA326A79851F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
Manifest number:          18C5
Signing time:             Sun 19 Apr 2026 02:01:18 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:18 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:18 +0000
Files and hashes:         1: Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl (hash: ++RQ+d2zxaFGGEJVZwUUL9MU9mEGGoRaisbYjij+eXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:89:8f:4e:06:7a:f2:4c:9c:ca:32:6a:79:85:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42afd560d513077e339fabfe0ccda90940bdd814
        Validity
            Not Before: Apr 19 02:01:18 2026 GMT
            Not After : Apr 20 02:01:18 2026 GMT
        Subject: CN=2299cc021d474389b7aa674ed0bcecdf85d8c269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:a9:21:d7:9e:3a:ea:af:bf:29:79:37:6e:
                    0e:fa:35:50:73:9f:c2:35:ed:a2:e4:fe:fd:fe:04:
                    bd:fd:46:ea:5e:f0:6f:90:71:a5:3c:fb:92:47:d7:
                    88:76:5f:3e:de:c7:ab:c8:38:7e:63:60:6c:3f:1f:
                    a8:f9:6f:0d:bc:c6:36:55:8b:78:49:d0:8d:69:03:
                    95:63:99:f2:8b:b2:7e:67:9f:dd:86:7b:06:53:d0:
                    0d:e9:c7:23:47:23:8d:43:17:28:9a:dc:7e:76:a6:
                    26:5d:f5:1c:d7:cb:fc:f8:b5:2d:63:a9:ee:2f:52:
                    7a:58:ed:19:10:dc:d5:3a:50:a6:1f:24:d3:57:dc:
                    43:42:41:a4:18:88:f8:51:61:61:9d:62:07:9d:d8:
                    e6:9d:b8:c7:2a:40:f0:94:b6:d7:dc:a8:97:1f:7b:
                    7c:47:ea:7f:aa:16:12:87:a1:c0:7f:a6:db:95:00:
                    a4:c7:23:58:e6:19:7f:ab:bc:7a:8b:89:9c:9e:c8:
                    75:49:c0:d4:69:0c:9d:62:e1:bf:bb:05:df:02:24:
                    f1:52:c1:8f:4a:1e:bd:9a:b4:e8:1b:ad:7a:3a:7e:
                    6c:a5:df:62:11:41:04:29:bb:f6:35:f1:80:09:b3:
                    fb:3f:b2:e5:0e:55:d8:79:20:b8:93:bc:a1:0f:0b:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:CC:02:1D:47:43:89:B7:AA:67:4E:D0:BC:EC:DF:85:D8:C2:69
            X509v3 Authority Key Identifier:
                keyid:42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:48:49:f8:cb:af:cf:09:e6:c2:dc:32:13:8b:de:b9:9a:
         f5:4a:e6:cd:12:78:f4:1a:dd:39:d2:06:e4:0b:61:23:9f:01:
         c8:27:9a:b0:ed:13:2a:22:f5:41:8c:88:4c:21:74:e2:3a:3b:
         d9:8e:05:e6:d1:de:2d:38:3d:f9:b0:cc:a8:ad:02:33:74:eb:
         66:d5:92:72:6c:57:55:79:96:24:57:d8:64:08:7c:ae:14:fa:
         33:7d:42:1b:e9:f4:72:66:be:9d:b4:a3:13:ad:90:18:8a:a0:
         97:15:63:1c:f1:f5:f5:33:93:5a:5b:c0:f4:1e:ba:25:8b:2c:
         c8:09:6f:70:c1:88:8d:39:54:4a:0e:5f:0a:73:b0:56:16:f4:
         ed:97:d6:07:3b:61:ea:ee:67:34:9f:17:18:c8:14:af:45:19:
         55:ec:11:51:d8:6a:65:b9:7d:3b:c5:14:41:b9:4d:4d:fc:01:
         cd:42:46:15:66:72:34:f9:8a:15:b2:85:54:c6:68:ef:7a:5c:
         79:2b:06:02:85:3b:45:4b:31:42:8b:82:1c:19:a8:c3:bc:10:
         2e:f8:80:bc:e5:0e:bf:d3:3a:56:32:38:fb:6d:18:88:05:c9:
         28:05:d2:0e:bf:c5:4d:83:90:0f:5b:00:62:74:14:b1:c8:34:
         ce:25:95:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeImPTgZ68kycyjJqeYUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYWZkNTYwZDUxMzA3N2UzMzlmYWJmZTBjY2RhOTA5NDBi
ZGQ4MTQwHhcNMjYwNDE5MDIwMTE4WhcNMjYwNDIwMDIwMTE4WjAzMTEwLwYDVQQD
EygyMjk5Y2MwMjFkNDc0Mzg5YjdhYTY3NGVkMGJjZWNkZjg1ZDhjMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuKpIdeeOuqvvyl5N24O+jVQc5/C
Ne2i5P79/gS9/UbqXvBvkHGlPPuSR9eIdl8+3seryDh+Y2BsPx+o+W8NvMY2VYt4
SdCNaQOVY5nyi7J+Z5/dhnsGU9AN6ccjRyONQxcomtx+dqYmXfUc18v8+LUtY6nu
L1J6WO0ZENzVOlCmHyTTV9xDQkGkGIj4UWFhnWIHndjmnbjHKkDwlLbX3KiXH3t8
R+p/qhYSh6HAf6bblQCkxyNY5hl/q7x6i4mcnsh1ScDUaQydYuG/uwXfAiTxUsGP
Sh69mrToG616On5spd9iEUEEKbv2NfGACbP7P7LlDlXYeSC4k7yhDwvK2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKZzAIdR0OJt6pnTtC87N+F2MJpMB8GA1UdIwQY
MBaAFEKv1WDVEwd+M5+r/gzNqQlAvdgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFfVllOVVRCMzR6bjZ2LURNMnBDVUM5MkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81NDliOGItNjQ5NC00YTkyLWE5NGUt
Y2Y4Y2UyMmMzYWY3LzEvUXFfVllOVVRCMzR6bjZ2LURNMnBDVUM5MkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81NDliOGItNjQ5NC00YTkyLWE5NGUtY2Y4Y2UyMmMzYWY3
LzEvUXFfVllOVVRCMzR6bjZ2LURNMnBDVUM5MkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIr9ISfjL
r88J5sLcMhOL3rma9UrmzRJ49BrdOdIG5AthI58ByCeasO0TKiL1QYyITCF04jo7
2Y4F5tHeLTg9+bDMqK0CM3TrZtWScmxXVXmWJFfYZAh8rhT6M31CG+n0cma+nbSj
E62QGIqglxVjHPH19TOTWlvA9B66JYssyAlvcMGIjTlUSg5fCnOwVhb07ZfWBzth
6u5nNJ8XGMgUr0UZVewRUdhqZbl9O8UUQblNTfwBzUJGFWZyNPmKFbKFVMZo73pc
eSsGAoU7RUsxQouCHBmow7wQLviAvOUOv9M6VjI4+20YiAXJKAXSDr/FTYOQD1sA
YnQUscg0ziWVjw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:02 2026 by rpki-client