Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File:                     QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier:          S06/avGoUBxaETvBQbdauaFhcNIx0QgXI8jR1NYqS1E=
Subject key identifier:   98:E7:C8:D1:C5:12:18:57:56:77:99:DC:D3:D8:98:BA:0A:37:37:B5
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer:       /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial:       019DA3E5D3B4EF4964062620B92983396615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number:          1822
Signing time:             Sun 19 Apr 2026 04:00:41 +0000
Manifest this update:     Sun 19 Apr 2026 04:00:41 +0000
Manifest next update:     Mon 20 Apr 2026 04:00:41 +0000
Files and hashes:         1: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: ewVTsVfsRSGdRHMyHeNSQIbAe99ytE8GZxBbHZxjfuI=)
                          2: bgpTMrzfW7CHzYzGyELGTZfYatA.roa (hash: 8Ca3eykdBAqM1JLqwTpF6Ihh+Qzj9biCwnw8ueEG7vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e5:d3:b4:ef:49:64:06:26:20:b9:29:83:39:66:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
        Validity
            Not Before: Apr 19 04:00:41 2026 GMT
            Not After : Apr 20 04:00:41 2026 GMT
        Subject: CN=98e7c8d1c5121857567799dcd3d898ba0a3737b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:00:b4:d4:c7:a5:6b:d9:76:7f:6f:39:26:
                    81:cb:a7:41:2f:23:b4:d9:eb:a1:7c:d9:4a:71:f5:
                    5c:62:c1:eb:c3:3a:2c:18:f3:e3:05:08:36:5d:ac:
                    a1:1e:25:06:a3:52:8d:7b:c6:e8:3c:7b:04:07:76:
                    5c:ad:25:01:f2:f9:91:80:61:3f:8e:82:2c:e2:fd:
                    b5:e2:73:92:57:b2:80:9e:f3:11:ae:eb:17:ca:fc:
                    2f:6b:3f:02:2b:0b:7f:6d:2c:17:d2:f9:21:53:72:
                    b7:66:ba:8d:0b:b9:c9:08:54:52:74:49:f7:8c:9f:
                    79:5a:1a:d1:69:eb:d5:c7:aa:b8:c3:23:98:52:46:
                    f5:38:1e:1a:23:1c:a3:e4:55:fc:61:ac:b8:67:80:
                    1c:65:0f:0b:6f:02:af:41:f4:a4:28:6c:ec:04:2f:
                    a9:47:3e:6e:85:35:a6:1c:ca:ed:3f:ad:ff:94:05:
                    94:a6:75:7a:6c:d5:9f:0f:ec:62:be:dc:00:a2:43:
                    fd:68:ad:29:3b:34:3b:cb:c0:6b:8f:35:5e:d9:dc:
                    19:68:58:67:b0:47:5b:1a:b8:c1:55:9d:ab:4d:95:
                    60:1b:cd:e6:e3:88:26:f4:41:6f:f8:72:c2:9d:53:
                    05:3e:05:a3:30:fb:7d:83:4f:48:a5:08:89:08:2c:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E7:C8:D1:C5:12:18:57:56:77:99:DC:D3:D8:98:BA:0A:37:37:B5
            X509v3 Authority Key Identifier:
                keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3a:3a:47:39:79:67:cc:7d:e0:dc:cf:e6:d9:47:95:dd:08:
         0c:a3:42:ef:6d:e8:e0:51:f0:d7:18:9a:4e:36:6b:9d:bf:50:
         d0:62:71:e8:f0:a5:20:0b:1a:4b:74:5c:da:04:43:db:db:c4:
         23:db:31:94:71:78:de:82:4a:a0:ce:46:df:d8:77:16:41:b0:
         81:fd:f3:b7:c4:ed:50:12:42:1d:31:f0:31:31:a3:71:07:38:
         3d:20:73:c8:81:ca:d8:8d:90:1a:3a:55:20:91:fe:88:bf:fe:
         96:cd:5a:b7:1e:c8:2a:2d:a4:84:e3:0f:2b:2e:66:30:a8:3c:
         46:cf:41:69:03:15:8a:75:9b:c5:e6:10:b2:ca:ab:73:76:8d:
         34:8a:bc:c9:db:c0:86:6b:6d:b6:a0:9b:c4:cd:a3:12:d1:a8:
         3f:fe:94:4d:8b:5b:2b:c7:0d:b3:c2:80:d8:ce:bf:d9:9b:96:
         12:ca:3b:21:8b:a4:c0:1e:df:48:c8:ec:7c:d1:63:7c:94:36:
         0a:38:76:e0:50:ca:f0:35:d9:d9:d6:58:bd:17:f0:1a:f1:06:
         1c:78:eb:be:6e:06:28:ba:5f:04:cb:86:e5:b3:0a:a2:84:b9:
         97:87:d2:d8:9e:17:75:c6:b9:e2:64:aa:b7:35:f9:3b:1b:d0:
         34:77:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:30 2026 by rpki-client