Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File:                     Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier:          +yEuamlYM5jUeG85sXngfDwbyN1gxUP014mtMcGo3ZQ=
Subject key identifier:   BB:CF:1A:87:EB:60:80:12:EC:88:68:6E:8E:B7:E6:EF:12:CF:35:36
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer:       /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial:       019EC3A5007859D2932FA2A03AF8A996FA9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number:          0547
Signing time:             Sun 14 Jun 2026 01:00:31 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:31 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:31 +0000
Files and hashes:         1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: 8IQ2+IGN0oSj7Osa76nevZnbpRlven0rmcmeuLSsFIA=)
                          2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:00:78:59:d2:93:2f:a2:a0:3a:f8:a9:96:fa:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
        Validity
            Not Before: Jun 14 01:00:31 2026 GMT
            Not After : Jun 15 01:00:31 2026 GMT
        Subject: CN=bbcf1a87eb608012ec88686e8eb7e6ef12cf3536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:f4:6a:18:24:95:7c:d2:19:5f:bd:eb:13:
                    92:07:d3:17:03:6e:a6:95:92:de:54:82:6e:df:6d:
                    d2:5a:e4:99:2a:36:67:1f:6e:1e:51:ab:3d:85:3f:
                    06:19:6f:fc:5a:dc:73:2e:19:c9:4b:87:c4:5c:c9:
                    bd:6a:c1:a8:2c:85:5b:f7:bf:fe:67:59:c2:64:b0:
                    99:64:f8:e9:29:29:0c:9e:47:16:9a:c0:2c:c1:f9:
                    c4:d5:72:f1:f7:2b:4b:06:6f:98:3e:bb:eb:33:fc:
                    80:38:05:1e:b7:3a:23:b9:f7:db:48:27:73:5e:2b:
                    f2:f0:ed:28:d5:d4:84:f4:8f:8b:6e:c8:d1:a1:78:
                    53:bd:cd:0d:cc:11:b4:05:62:fb:09:0a:2d:b9:de:
                    52:ba:0c:2f:81:bb:bc:14:10:19:60:c4:50:32:9a:
                    51:07:78:e9:02:7f:ad:e0:39:66:bc:9f:b7:28:87:
                    a0:b0:ec:ca:da:08:b5:dc:56:f6:e5:ab:89:c1:11:
                    59:a9:9b:80:df:27:6b:52:0b:8c:27:40:3c:35:43:
                    ab:21:52:31:7e:04:00:17:ac:7b:da:5d:be:be:0e:
                    21:20:88:da:62:01:ac:22:a8:9c:ee:13:e9:25:cb:
                    d2:06:91:ee:11:77:3f:7e:61:82:dc:c1:5f:51:c5:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CF:1A:87:EB:60:80:12:EC:88:68:6E:8E:B7:E6:EF:12:CF:35:36
            X509v3 Authority Key Identifier:
                keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8a:bb:d6:2c:a8:19:99:de:0f:b3:e4:d1:41:00:99:79:b9:
         74:35:ff:e9:58:78:10:44:d9:6b:d9:70:74:0f:64:f3:ba:0f:
         52:fa:e2:d1:e2:5c:b9:b5:29:dd:01:b0:31:29:41:69:b0:13:
         83:2a:da:b0:d5:14:e2:84:99:53:d2:22:11:15:82:ff:1c:8b:
         34:e1:bf:23:ec:e4:b1:86:5a:74:00:43:34:79:99:51:9f:b8:
         50:90:f7:12:6a:68:9c:8e:56:5e:56:4d:18:53:4d:ce:f7:c6:
         4c:d1:df:a4:e6:f5:06:b1:4f:fd:48:34:90:eb:59:d1:5a:0e:
         35:88:87:ba:20:b9:cc:20:79:3c:1d:66:8c:34:96:6c:16:29:
         63:8f:87:a0:b5:58:1f:43:8f:56:ef:42:9c:54:97:de:a7:90:
         ce:ea:3d:e2:a2:98:0d:10:1e:9a:ec:47:c9:f5:1c:b6:4e:94:
         5b:52:37:2b:6f:e7:03:84:8f:60:a2:8a:5d:b1:99:89:70:40:
         d9:7b:44:df:f2:77:53:3f:39:eb:43:80:0d:14:a3:ea:41:a0:
         89:10:f4:66:4d:3c:f4:07:f6:60:3d:2e:19:fb:f7:38:ca:14:
         69:ea:d5:59:28:b6:ab:75:1f:f7:70:28:1f:38:10:62:23:0d:
         fc:4f:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:20:23 2026 by rpki-client