Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File:                     QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier:          8j64KmpCcfDm6OIz1sDhP5P3Q0LIaVIFd8bkxSJZfm4=
Subject key identifier:   FF:2A:F5:26:BC:27:50:38:27:DD:48:08:AB:08:78:82:0C:8E:65:32
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer:       /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial:       019EBFC81A6AE1A827E91017D4FA6B65EE04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 07:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:22 +0000
Files and hashes:         1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
                          2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: 08QjdkRa+bIKg3siZYwOPBCd3D36kKat6CQe/VKMIWU=)
                          3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
                          4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:1a:6a:e1:a8:27:e9:10:17:d4:fa:6b:65:ee:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
        Validity
            Not Before: Jun 13 07:00:22 2026 GMT
            Not After : Jun 14 07:00:22 2026 GMT
        Subject: CN=ff2af526bc27503827dd4808ab0878820c8e6532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:72:a6:f2:c8:0a:a0:a0:7e:18:9d:62:0c:
                    a4:7d:02:c9:eb:99:aa:de:87:2f:14:cb:0a:d0:2d:
                    f7:83:33:bc:fe:13:9d:c3:de:b7:8c:86:6c:9f:ed:
                    74:fa:d8:0d:a4:c6:51:cf:91:d7:66:56:54:31:93:
                    50:7a:24:d2:54:ed:6e:a3:44:cf:c1:f4:da:25:4c:
                    08:c4:bc:3c:5b:f8:e2:29:2a:9e:80:88:ba:fe:ed:
                    87:89:bb:fa:95:ce:41:52:e2:50:8b:1f:5a:70:8b:
                    ae:27:4c:85:9a:ec:a1:0d:a0:29:fe:89:d7:1f:59:
                    08:7d:3a:1b:10:1c:fc:d3:9c:bb:a8:17:c7:77:45:
                    a8:3f:c2:5c:69:0a:42:e2:5a:fa:21:7d:67:68:5c:
                    b8:f9:a0:2b:0d:0c:65:98:92:4f:0a:a9:41:c6:f8:
                    6e:d2:12:45:dd:02:c0:30:6d:fe:2d:22:5e:83:6e:
                    dc:32:9d:23:3a:ca:73:3b:b2:56:fb:8c:45:3a:9f:
                    35:d6:9f:dc:11:58:57:7c:79:8e:16:3a:88:b6:eb:
                    f5:e8:ab:42:f0:ec:46:64:a0:be:7c:c1:bf:e3:dd:
                    09:02:57:3f:d5:00:4e:1a:90:1a:29:d0:29:6e:11:
                    5d:7a:ac:24:9e:26:e6:13:93:b4:f3:9b:bf:bf:c1:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2A:F5:26:BC:27:50:38:27:DD:48:08:AB:08:78:82:0C:8E:65:32
            X509v3 Authority Key Identifier:
                keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3e:4c:53:30:43:c4:dd:31:16:67:ba:e1:de:da:fb:9e:b3:
         cc:d8:93:7f:48:a9:48:73:69:33:37:08:9f:7a:a1:41:c3:eb:
         da:35:d0:e6:3f:06:a8:df:e9:79:80:c4:6b:36:26:19:24:55:
         17:80:b6:87:20:89:0f:20:27:94:c8:54:50:f8:1b:75:e0:57:
         33:de:dd:7e:59:4a:01:4e:57:36:60:d4:47:2d:ce:c5:e5:0c:
         3a:b9:3d:ee:34:94:cc:c9:74:c1:ab:ab:88:3b:d9:01:74:73:
         cb:4c:37:d3:c6:eb:0f:b5:92:da:c4:8c:e0:5a:e2:ef:ac:e6:
         a6:4a:65:18:e7:ec:48:3e:e8:b1:ed:3e:e2:ba:ed:63:2c:7b:
         57:3f:2a:ae:4e:80:db:32:68:c2:52:28:1f:89:a2:f2:cf:50:
         c0:d6:a5:1a:25:16:82:68:de:65:06:3f:8b:ec:d7:cb:0e:b1:
         33:57:dc:f5:91:72:8b:55:72:d5:9d:f7:81:c7:c3:b3:82:ef:
         9e:96:0c:2e:3b:e8:77:24:82:e4:01:1a:c6:d9:b6:15:09:ce:
         65:fa:42:ec:65:29:7d:fc:10:23:c9:e4:35:fc:43:96:ea:a0:
         3b:c7:2f:c2:3c:31:eb:26:ce:8a:0c:6a:e2:53:8d:ef:34:cf:
         b0:4c:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:11 2026 by rpki-client