Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File:                     QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier:          Hf5A9CQeG95bc54c82wJdwNpeQ1TLEyckh0MoWaUoWs=
Subject key identifier:   F7:B3:47:97:2B:4D:EF:0B:C0:F1:3B:F1:5E:46:1B:FA:F3:6B:B3:05
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer:       /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial:       019D97E188DA93C9547866A4A04CF85C5A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number:          164A
Signing time:             Thu 16 Apr 2026 20:00:33 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:33 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:33 +0000
Files and hashes:         1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
                          2: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: OmIEHQJeq3arS5DVEiZkOWrgITXyKRjtuMCMqOZvb/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:88:da:93:c9:54:78:66:a4:a0:4c:f8:5c:5a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
        Validity
            Not Before: Apr 16 20:00:33 2026 GMT
            Not After : Apr 17 20:00:33 2026 GMT
        Subject: CN=f7b347972b4def0bc0f13bf15e461bfaf36bb305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:a5:75:9e:23:7f:b6:5a:ff:6a:fc:19:8c:
                    28:48:c1:16:ab:63:ee:e3:13:09:aa:ed:4b:b4:e8:
                    64:01:5b:3b:49:8e:f9:33:3e:45:88:84:00:28:1e:
                    c8:e5:b1:23:14:87:ae:a7:24:e5:93:fc:0b:52:e7:
                    d1:12:e9:3c:6d:cb:44:59:1e:80:73:92:48:98:f8:
                    41:6e:14:ee:ce:17:a0:4c:69:c0:45:b6:71:8e:e8:
                    d1:39:dd:13:8f:cc:53:e6:5a:2b:f0:5c:00:6f:33:
                    c6:af:ac:86:c2:06:71:a2:03:aa:8a:48:6a:61:7a:
                    44:87:8a:ae:b1:77:4f:be:7c:ca:f1:83:77:73:bb:
                    df:df:51:1c:26:c8:47:57:50:c6:f0:8b:23:f3:ae:
                    86:ec:99:11:50:26:fa:e6:b7:d3:18:74:c9:e3:bc:
                    82:d7:15:af:86:7d:7d:31:e6:3a:81:f2:5e:ff:e7:
                    77:7c:aa:1e:25:32:9a:ab:ce:2a:a3:5a:72:00:62:
                    e2:fc:b4:62:42:12:b3:4e:d3:59:fc:99:c3:c8:86:
                    8b:50:d9:c7:55:9b:2f:da:81:7d:0b:be:90:e6:a7:
                    8c:bc:7f:bf:b1:3d:ad:81:6f:36:03:f2:d9:a8:8d:
                    f4:e4:46:66:a1:d0:ea:c6:5a:be:92:3f:0f:19:0c:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B3:47:97:2B:4D:EF:0B:C0:F1:3B:F1:5E:46:1B:FA:F3:6B:B3:05
            X509v3 Authority Key Identifier:
                keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:49:95:3f:da:6c:e6:b0:85:c1:07:ae:43:0d:89:30:f7:44:
         d3:de:5c:a9:96:d7:62:00:8e:2e:f9:df:f9:f8:07:a4:7d:2f:
         d2:d7:c7:c8:d5:1e:b7:f1:cd:b5:14:bf:04:c7:6d:05:a2:ee:
         ba:ab:59:31:a0:ee:f6:05:d2:8d:10:63:cd:bc:d1:4d:a1:a8:
         64:79:a5:24:b1:91:5a:6e:51:eb:74:08:1f:9a:8b:c6:89:05:
         95:c2:53:a8:12:4b:01:6e:17:e8:78:aa:a0:72:c8:15:da:e2:
         30:0b:0a:61:5b:12:73:da:59:7f:e5:a9:59:64:8c:ab:6b:bf:
         01:b7:9e:4c:bb:b8:57:65:c3:6a:2e:2b:02:51:74:eb:85:c0:
         c9:79:bb:4e:43:e0:49:ab:e8:fd:28:8b:ee:b5:b2:51:68:4a:
         f5:20:ae:f8:51:56:f6:eb:1f:8a:4d:58:9e:98:47:7e:30:ab:
         60:75:29:e0:f4:3c:32:65:fa:ae:ce:a2:e0:c1:a9:b6:d8:8e:
         b9:8f:db:bb:ad:5f:7a:ca:82:e6:d9:28:54:e9:85:27:c0:e8:
         e6:9a:ef:a4:c1:d4:b1:9b:ef:b7:d5:5f:44:14:c2:9f:bb:73:
         8b:53:94:fb:6d:7f:1e:1e:74:f0:f7:8c:97:d5:74:ee:81:10:
         c5:5d:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:54 2026 by rpki-client