Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File:                     Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier:          /4JgFankcFLQwUSdT+hgmusnebdaEW4ZF5tfpXuHU48=
Subject key identifier:   34:98:48:E5:DA:AC:0A:CC:2E:40:12:92:2D:8E:BB:39:16:5D:C6:E6
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer:       /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial:       019D9B87B71BC2E6A0BF8477EC29B8E1309A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number:          0AE3
Signing time:             Fri 17 Apr 2026 13:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:55 +0000
Files and hashes:         1: INg4xIGRSCSOu3-OcCQpHM9H_6g.roa (hash: eyyAVDJZ4GJowJ2sqgQCguwo5z9rwMoMjyVN47CKOxU=)
                          2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: p6vlGn9C3VrDbTiD3vdOhTubXKJBkHiN9vaJzTqKJ3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:b7:1b:c2:e6:a0:bf:84:77:ec:29:b8:e1:30:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
        Validity
            Not Before: Apr 17 13:00:55 2026 GMT
            Not After : Apr 18 13:00:55 2026 GMT
        Subject: CN=349848e5daac0acc2e4012922d8ebb39165dc6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:c2:77:e9:7d:81:5c:02:2f:3a:5a:8c:2e:
                    85:c9:25:1c:0e:a4:fa:f7:9c:02:b5:fe:f9:0f:4a:
                    ed:e4:86:19:ca:eb:d8:3f:bd:c7:ac:d0:9a:1a:40:
                    97:a2:0c:6d:ff:87:ab:be:29:de:43:e4:21:7d:54:
                    d6:e1:c3:13:a0:72:c2:8a:ff:46:0b:ae:57:1b:08:
                    d6:ee:1d:d7:86:01:73:66:6c:4e:33:37:a8:0a:d2:
                    22:0e:86:44:0a:ca:3f:22:55:bb:4d:4a:bc:d7:51:
                    f1:8d:b7:20:3a:83:cb:52:aa:d2:12:12:7e:24:fd:
                    ce:2b:17:48:e8:c3:a5:0d:bf:70:3f:12:1f:de:d9:
                    24:61:14:70:7f:4a:3d:98:cf:c5:83:30:dd:bb:0a:
                    59:95:de:d1:bf:4e:33:33:5c:ec:ff:79:46:9a:00:
                    75:7f:c1:e2:05:f1:29:2b:ad:7a:10:08:78:32:6a:
                    1d:26:4a:4e:32:97:cc:65:88:d1:a0:d3:6b:ae:b7:
                    39:c3:61:ad:97:f9:82:96:c1:4e:6d:15:7c:c2:01:
                    bd:dc:e4:0c:63:f0:a5:12:01:13:b6:20:f9:7e:da:
                    9d:f9:ac:ef:73:f1:c8:7f:00:33:9a:e1:2e:5e:aa:
                    b7:0a:58:51:81:04:80:b1:49:51:c2:cb:14:93:43:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:98:48:E5:DA:AC:0A:CC:2E:40:12:92:2D:8E:BB:39:16:5D:C6:E6
            X509v3 Authority Key Identifier:
                keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:5e:41:1f:69:16:2f:b2:85:c2:db:94:d8:7a:2b:94:9b:
         f7:c5:a6:c6:94:78:11:4a:fd:5f:2a:3c:ff:43:fa:84:4e:22:
         3c:c6:9c:b2:5e:06:40:64:32:7a:3e:9a:95:90:ac:38:9f:50:
         83:cd:08:c8:73:58:b4:e8:a9:53:34:03:e0:69:05:47:22:c0:
         43:12:06:f6:cb:24:11:8b:c7:2c:3d:59:eb:fe:1e:1d:0a:21:
         53:bc:1d:64:a1:c2:91:93:ec:09:a3:7c:6f:05:27:63:06:d3:
         d8:0b:7b:a3:20:b3:dd:40:74:af:1e:e9:86:26:2e:1f:33:a5:
         88:41:c2:0a:5c:61:dc:1f:17:ee:a6:bb:a1:7b:2a:6c:45:38:
         29:93:5e:3b:ce:42:a2:ab:36:7f:60:b4:7c:3f:b6:b6:72:6c:
         df:52:df:b3:67:61:7d:8a:a0:03:33:07:d1:25:97:f1:b8:a3:
         e2:44:04:e3:e9:92:da:09:be:ca:ae:b9:1c:41:c6:f2:24:cb:
         38:c6:d1:5c:9c:13:d0:03:2e:a1:4a:20:8a:f6:7f:71:d2:c8:
         00:5a:d4:ba:61:64:88:ea:e1:b4:8c:4f:9e:5e:96:6c:27:a8:
         c5:15:ca:63:39:3b:ed:32:86:0e:5c:1c:27:e7:fc:5c:cc:be:
         af:6c:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:18 2026 by rpki-client