Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File:                     QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier:          fXN/OfiWSczesg2EX+biXeY/vz5Dxe0XLENlUUsFSfU=
Subject key identifier:   D6:0C:58:1A:82:4D:ED:B2:79:72:76:E4:C2:D0:8D:7A:81:60:BC:38
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer:       /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial:       019EC1B6F97B6775BC87EC2834528D671A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number:          1356
Signing time:             Sat 13 Jun 2026 16:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:54 +0000
Files and hashes:         1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: yNx/KUtFCukQbEJT26yVcZrXcOtv2RQu8R4qDKey2S4=)
                          2: qzh_iKj0t2WOf3zVqzKCrKeqtDM.roa (hash: 077TMwwKON/71XOUtoiDWGgj1D5SliYKyCLEgwuoF58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:f9:7b:67:75:bc:87:ec:28:34:52:8d:67:1a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
        Validity
            Not Before: Jun 13 16:00:54 2026 GMT
            Not After : Jun 14 16:00:54 2026 GMT
        Subject: CN=d60c581a824dedb2797276e4c2d08d7a8160bc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:cc:65:d2:fd:e1:1e:b9:cf:c8:3b:a7:c1:
                    4f:5f:ac:e0:09:74:7f:07:06:5a:c0:b9:15:94:68:
                    7a:66:1a:e1:f2:d9:df:0b:e8:60:34:c0:5a:34:c0:
                    9d:8a:39:c0:a2:8c:40:42:07:a4:f2:31:0a:36:5a:
                    d9:9b:2e:6f:e9:4f:f0:2e:2d:80:d6:b5:96:89:d3:
                    d8:bb:93:47:7e:6c:bf:8d:c6:18:51:13:e5:fa:e7:
                    69:f7:f7:75:b0:f8:2a:46:67:17:a2:2f:c9:1c:6b:
                    03:ed:e9:84:b2:e5:0a:76:d7:41:eb:76:1e:e0:96:
                    5c:f3:ba:0f:86:0d:10:21:60:87:3b:13:a8:b9:a9:
                    8a:3e:f7:16:c9:13:a5:be:02:64:79:08:c6:b4:d4:
                    07:5a:f8:00:74:72:6f:e3:3d:8d:e7:ae:c7:59:61:
                    bc:0e:30:ce:96:f9:bf:2f:8d:67:c4:66:9a:7a:07:
                    45:23:af:c5:c0:c2:04:95:8c:9f:25:fa:ab:1e:ea:
                    a2:01:83:83:c6:0d:96:51:b7:2b:83:f5:6a:83:15:
                    8c:14:34:d5:49:17:29:02:a9:cf:33:61:2a:3c:89:
                    12:56:86:38:d6:ca:9f:0a:8b:a0:90:d5:16:f5:04:
                    da:30:f6:86:b7:fb:6c:23:31:5a:78:d6:a1:b7:3e:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0C:58:1A:82:4D:ED:B2:79:72:76:E4:C2:D0:8D:7A:81:60:BC:38
            X509v3 Authority Key Identifier:
                keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:c6:5b:2f:b7:b4:14:1b:bf:63:13:b3:5a:e9:fd:2b:b9:
         01:1e:aa:af:82:c0:ef:07:78:9d:c9:7b:33:0b:54:ad:c8:3c:
         93:b9:b0:23:55:77:61:fd:c8:31:78:bb:b3:bc:a6:b6:40:42:
         87:54:10:6e:73:80:44:7f:74:5c:37:41:66:7e:34:83:fb:5e:
         aa:a8:bf:59:ab:ca:b9:b9:58:87:2c:ea:5e:84:d8:96:47:f8:
         55:47:99:90:a3:e5:af:62:42:24:90:97:55:50:8a:05:54:39:
         a0:68:df:68:48:a1:79:40:84:40:55:68:78:d6:c1:dd:70:1f:
         e1:14:c0:95:28:68:b5:57:b8:fa:35:a5:fd:ad:04:55:94:f1:
         ec:36:e7:0d:81:c3:23:57:59:ff:ff:ff:f1:20:62:27:08:19:
         3c:5c:89:1c:90:02:1f:12:ff:0d:2c:fc:ca:46:7b:12:46:27:
         da:e5:fb:43:4b:d2:be:ac:d7:af:a4:9f:22:91:36:7b:4c:1f:
         00:04:d8:89:4d:73:70:88:84:f6:35:8a:15:02:12:d3:ce:71:
         ba:01:df:27:61:15:61:88:61:09:fb:82:b2:33:3e:63:0d:7a:
         da:03:95:e1:d1:6b:e8:85:76:e2:f0:eb:38:bf:5c:67:89:5a:
         5b:17:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:16 2026 by rpki-client