Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File:                     1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier:          901qBmJpNsDoNYl3nvIMGmRT3IpcjrVD/S/vGpwDAXY=
Subject key identifier:   21:35:5D:BC:9D:39:E8:76:2F:9D:EB:91:0E:F1:ED:56:50:D9:70:D3
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer:       /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial:       019EC14899E09798399C3BB507785576D096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number:          1150
Signing time:             Sat 13 Jun 2026 14:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:21 +0000
Files and hashes:         1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: dkT9qky/V3lZt3dehPc5EXaFlhU7eLbX4y/3mLxqSNc=)
                          2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:99:e0:97:98:39:9c:3b:b5:07:78:55:76:d0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
        Validity
            Not Before: Jun 13 14:00:21 2026 GMT
            Not After : Jun 14 14:00:21 2026 GMT
        Subject: CN=21355dbc9d39e8762f9deb910ef1ed5650d970d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:2a:20:f7:48:9b:2b:b8:97:9e:62:5c:21:
                    e4:fc:c8:7a:83:9e:12:5d:90:66:64:93:7c:b1:0d:
                    41:5a:76:b0:a6:f9:75:cd:9b:9d:ac:24:66:34:9f:
                    d9:a4:1e:45:02:1d:61:59:02:69:38:53:05:b4:0b:
                    f4:f8:3f:df:ae:09:9d:f5:7e:bd:2b:0f:1f:0f:52:
                    d0:af:8f:76:81:4d:2e:67:e2:6a:4d:57:0f:ff:fa:
                    13:c8:7f:92:ce:d0:5d:b0:2e:1c:0d:bc:53:d8:7e:
                    23:dd:73:bc:8d:06:d0:e1:d9:36:4c:91:9b:d8:48:
                    b8:12:19:85:d8:96:73:1c:a2:ab:c5:69:5d:7f:20:
                    f8:df:4a:dc:aa:de:94:32:87:69:42:53:67:ec:95:
                    47:86:a4:d7:cf:e2:a5:04:27:93:ab:1c:76:90:7c:
                    3a:68:2a:cd:3f:d1:ee:31:c4:7d:6f:0f:31:53:92:
                    09:38:bf:2a:b3:4c:8f:25:6b:ba:ae:d9:4d:67:2d:
                    73:d5:ac:df:4e:33:c4:41:02:e2:4b:16:16:7c:9a:
                    c4:c1:4a:ee:1d:eb:ba:a0:b6:1e:3c:d6:e3:6d:a7:
                    2c:9a:b2:23:31:15:52:60:42:92:2c:82:ab:24:71:
                    de:d9:22:69:7d:ae:ba:3b:fd:8f:35:fb:11:9d:d9:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:35:5D:BC:9D:39:E8:76:2F:9D:EB:91:0E:F1:ED:56:50:D9:70:D3
            X509v3 Authority Key Identifier:
                keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:5f:67:1f:56:f2:69:2b:70:0a:1c:6f:9b:0f:97:5a:b3:
         5c:ea:b9:ad:cd:1e:16:da:5b:ae:e8:dc:03:f7:6d:00:42:da:
         d8:f3:7b:00:b4:45:5c:6b:04:69:fb:2c:59:24:b2:6c:96:1a:
         8a:e6:b6:5e:ae:de:19:37:89:ef:12:9c:b9:88:1c:10:b0:71:
         b3:26:28:19:5b:4e:50:47:1e:a0:34:75:a0:2e:00:10:4a:32:
         04:26:f6:d6:75:74:27:0c:81:44:2a:61:27:38:c9:e4:e3:94:
         69:1f:ce:d0:5f:49:da:6f:6e:ef:44:ea:3c:eb:e2:da:2c:39:
         40:bd:55:9e:ec:79:67:6f:9c:e3:1c:5f:67:e8:27:c3:a5:d8:
         d7:54:1c:ab:a1:38:ca:cf:e0:9d:b2:f3:09:f8:ba:d6:a2:e6:
         5b:23:5d:10:93:f2:7e:fb:1c:ea:6d:58:dc:86:fe:40:31:18:
         d5:05:7e:a7:65:03:f7:6e:28:35:1d:6a:c2:f6:5c:90:1d:14:
         2e:d4:61:df:a7:7d:94:a7:74:37:97:47:4e:71:dc:2a:6f:44:
         a6:4a:63:b0:a5:76:35:99:c0:42:1e:c8:5f:0f:06:9b:f9:7d:
         e9:42:24:af:25:ed:e3:9b:16:65:ce:2a:31:ea:c0:ab:cb:e2:
         6f:c3:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:27 2026 by rpki-client