Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File:                     qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier:          t/EIzuwJ1U7JW9apjRAzFzy1zRxIlz6MFY8BRVCfB24=
Subject key identifier:   DA:F9:B6:48:09:61:43:73:00:38:3C:A9:E1:E9:D3:A3:5C:78:00:81
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer:       /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial:       019EBE7FA5C56DAF91E37711FA74F16D766C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 01:01:36 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:36 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:36 +0000
Files and hashes:         1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
                          2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
                          3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: M3cwbM6Ste9x10Klopn0ElAR8rkLRnqpXjXGUZBNY5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:a5:c5:6d:af:91:e3:77:11:fa:74:f1:6d:76:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
        Validity
            Not Before: Jun 13 01:01:36 2026 GMT
            Not After : Jun 14 01:01:36 2026 GMT
        Subject: CN=daf9b6480961437300383ca9e1e9d3a35c780081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:69:47:a7:e7:fd:bd:96:0c:4e:91:63:7a:
                    b9:9e:bc:b1:82:8c:4c:e1:2c:e3:0b:29:7e:d9:2f:
                    84:cd:b1:78:86:14:97:70:c4:2d:bf:c7:9c:a9:eb:
                    f2:74:88:35:79:76:29:fe:8c:21:c4:d0:1e:04:92:
                    f9:76:e2:0b:9f:4c:c9:d3:f5:46:03:7a:a8:7d:62:
                    93:38:69:e9:28:6b:e3:1e:5b:32:b6:17:9a:b9:32:
                    d3:56:1e:bc:dc:54:d6:4a:c7:87:da:25:e1:d9:84:
                    b1:d0:9c:e8:cf:90:78:e3:82:f8:0e:79:85:0c:6f:
                    f4:8e:a9:75:15:99:83:49:e7:2a:38:ec:ae:f7:47:
                    33:d3:ca:41:f5:65:00:27:bb:f7:ce:c1:71:ea:97:
                    0e:8c:b1:4d:80:c9:98:11:8f:d5:0a:c6:9d:76:1b:
                    1c:03:73:6d:18:f5:0d:3b:a9:90:d4:56:d3:38:be:
                    eb:fe:01:fd:78:73:ac:16:33:07:ed:4e:23:39:e9:
                    d3:75:34:ed:3c:e0:93:33:68:09:19:71:98:5b:b0:
                    ca:dd:b6:17:83:c8:66:32:cf:a1:cb:68:24:a8:2c:
                    ca:5b:ca:2f:fe:d1:60:0a:e8:4e:e3:17:5e:7e:44:
                    88:d3:06:c1:0b:ba:a1:91:52:83:07:4d:d9:20:13:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F9:B6:48:09:61:43:73:00:38:3C:A9:E1:E9:D3:A3:5C:78:00:81
            X509v3 Authority Key Identifier:
                keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:48:22:7a:a1:f3:1f:60:43:6a:56:2b:09:66:5f:dc:ef:02:
         6e:f7:95:43:53:48:25:6c:09:df:cd:88:e7:47:e5:0b:73:9d:
         b4:83:bd:50:3c:24:66:19:a3:0b:7b:ba:96:a6:6f:4d:65:44:
         ec:f7:59:8a:c7:3b:53:ee:99:3a:d2:88:5c:c3:21:e5:5f:90:
         06:ff:73:e2:cf:4d:ee:4b:d2:2f:ee:c0:08:6d:41:ab:68:cb:
         3d:42:14:7f:fa:15:f8:be:cf:87:d1:11:a5:45:b0:18:57:02:
         03:12:05:4c:0a:03:e2:85:04:1c:6a:19:06:df:e6:7b:44:51:
         b5:b0:3e:c3:94:38:99:c9:70:06:da:4a:17:90:21:81:3a:ee:
         ff:09:d6:b6:cc:3e:5e:7c:e6:0f:47:54:55:a3:27:e8:7f:73:
         15:17:87:e8:83:a4:11:b5:eb:c7:8f:85:7e:1b:dd:e3:a9:da:
         4b:60:a7:1f:b5:f6:27:f8:71:5a:43:ed:c7:d0:a8:48:cd:f1:
         fc:b9:a8:a3:7f:3b:c8:fe:b3:f2:05:0b:6a:dc:f7:3d:93:16:
         69:52:c2:01:cc:9b:a9:4b:0c:6f:79:05:2c:f0:0c:5a:45:a6:
         ae:12:fb:68:77:a2:75:10:c1:df:9e:ac:cd:67:aa:04:59:1a:
         f0:0d:4a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:54 2026 by rpki-client