Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File:                     qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier:          3sf44kS04QYiqgs8cIBWiQKfSgCy1zrq4lzBkbeyykA=
Subject key identifier:   1C:9A:23:77:56:4B:6A:0F:09:49:E4:56:4F:61:91:1A:70:3C:3A:37
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer:       /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial:       019EC148844F8A808F31CE57D5A8636C206D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 14:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:15 +0000
Files and hashes:         1: blLvX2-SqKRxgzfg9csWt9Te5CU.roa (hash: Nyn58GOogqZkbGAVvyp/qEbfXu/9YSuSkYbo5ZUxKIg=)
                          2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: LbgrBHBH/2sViG+gduFGJHZc9PC5XxTon+gfXKyQ/LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:84:4f:8a:80:8f:31:ce:57:d5:a8:63:6c:20:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
        Validity
            Not Before: Jun 13 14:00:15 2026 GMT
            Not After : Jun 14 14:00:15 2026 GMT
        Subject: CN=1c9a2377564b6a0f0949e4564f61911a703c3a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:9c:01:91:17:87:2a:4d:13:5a:e2:b8:3b:
                    f7:53:b4:be:f1:2d:b5:7a:74:df:18:2a:db:ac:63:
                    03:6d:ca:ef:4e:9a:6e:75:6a:1b:b9:88:4e:fe:36:
                    77:a2:85:c7:ed:1b:7c:f0:86:76:3b:ab:c1:3f:c9:
                    e9:5b:84:18:6b:82:42:b2:28:e2:ae:b9:ed:0a:30:
                    1e:e9:05:0a:23:b9:7c:87:65:c2:c3:e9:c7:08:fa:
                    18:da:5e:24:1b:c5:93:af:1e:d1:0a:23:e4:b1:ed:
                    80:4d:9d:6d:ad:61:c4:88:63:ff:61:5b:04:88:9c:
                    d6:cf:a8:cf:e2:86:ca:df:05:96:ce:dc:2f:ed:d9:
                    f3:41:78:17:08:fc:1e:90:7d:4b:bd:f6:83:19:1f:
                    6b:cd:38:42:f4:72:b6:93:a7:94:14:92:1c:ff:18:
                    1a:40:29:35:ee:a4:d2:1d:b0:c2:1b:04:0b:eb:86:
                    f6:69:cd:ac:e4:db:a4:7d:4f:00:d9:37:41:b1:a4:
                    5a:f3:6c:88:de:b5:3d:a4:71:11:d7:6e:12:89:8a:
                    fd:ce:26:dc:7b:5b:76:8e:49:da:68:2d:88:4a:74:
                    e0:c2:ca:67:c7:2b:ff:e3:55:4f:91:9b:09:7e:1d:
                    a3:06:0f:a6:e5:d0:e0:d5:08:46:80:7c:89:f2:5a:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9A:23:77:56:4B:6A:0F:09:49:E4:56:4F:61:91:1A:70:3C:3A:37
            X509v3 Authority Key Identifier:
                keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6d:25:08:40:7a:95:84:1d:cf:08:e7:27:38:8a:99:88:7c:
         d1:8f:b9:4c:6c:43:fa:35:dd:5e:ee:85:b0:b1:0c:4f:aa:2e:
         2e:b5:df:e7:28:06:ca:63:b4:13:75:91:2a:6b:d4:ab:a3:71:
         e3:2c:3c:aa:bb:f7:be:44:b8:67:b7:f5:53:a6:aa:96:da:d6:
         bf:a5:68:ca:db:0e:25:87:0b:38:2d:fa:8f:16:dd:ac:b7:ee:
         c7:c7:2c:bb:95:65:ec:97:56:ad:32:3c:49:63:bd:9e:04:0b:
         61:86:58:1b:e0:2e:31:29:c4:b3:15:e3:70:28:46:f1:de:ca:
         7f:6e:5b:a5:39:50:79:21:5f:e2:f6:73:a8:69:13:31:37:32:
         a5:8b:ec:38:2e:b7:81:03:aa:03:4e:3a:3e:3d:f5:90:1b:5f:
         8c:da:7e:27:da:6d:a9:d0:fc:18:77:47:5c:d1:a2:04:e8:71:
         d8:6a:b4:e9:d6:83:d6:2c:e6:bf:db:8f:61:8e:e1:a0:49:aa:
         f3:50:0a:0d:16:e7:59:a7:d0:3d:9f:5a:da:95:27:ee:14:7c:
         d6:40:b1:0b:d0:80:94:8c:54:cc:06:fb:7c:8e:88:2a:56:94:
         73:0b:9e:71:df:db:b4:b6:a3:73:41:62:a3:b6:b1:42:44:ff:
         f3:f9:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:25 2026 by rpki-client