Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          ZPwNtOVP1soQADEIRl5wAog/zEHrldXOLEjTrFFHZLg=
Subject key identifier:   83:1B:12:6F:F1:ED:B1:5F:36:62:81:CB:0B:33:C6:2F:66:1D:85:EC
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       019EC1488EE105E221D41CB90004944D5C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0D47
Signing time:             Sat 13 Jun 2026 14:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:18 +0000
Files and hashes:         1: 4YMSKNsUfIJZYY47MNVzndwjo04.roa (hash: 8oujs3evvYwGVLJbLnpR6K4HU81UoQYW70JF1WusQ7o=)
                          2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: aqJDLpjIQZyvgZdlheGXScl2Fgpayt1ZDGqvw5DZXIA=)
                          3: UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa (hash: narBwfpb8RAcShxX1DzjbkkEFV1ZbklkMy2WAyEvk6Q=)
                          4: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:8e:e1:05:e2:21:d4:1c:b9:00:04:94:4d:5c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Jun 13 14:00:18 2026 GMT
            Not After : Jun 14 14:00:18 2026 GMT
        Subject: CN=831b126ff1edb15f366281cb0b33c62f661d85ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:c9:86:ad:6d:13:8b:4e:f6:0f:d1:6f:46:
                    d4:be:f2:89:10:7a:a6:9e:50:76:d1:9f:ac:aa:78:
                    ca:63:ce:24:af:94:b6:2e:f3:ac:a3:eb:9f:11:eb:
                    3b:fb:37:17:8c:d8:2e:82:fc:c5:f4:cc:b3:03:9b:
                    cb:39:59:f9:6e:b9:09:be:95:ad:c6:74:86:79:e2:
                    20:2f:96:4e:c8:58:bd:b4:f5:17:23:a9:65:bc:d1:
                    bc:95:5f:c8:d5:14:8d:e9:19:84:9a:e8:0e:49:d9:
                    41:b1:5e:49:92:70:02:41:c1:b3:08:84:1d:c1:6f:
                    89:e5:94:f3:58:59:d9:5b:99:4e:92:24:c2:30:7c:
                    98:8e:f2:59:c7:26:f6:e9:79:35:71:9a:f0:9a:98:
                    65:80:b0:80:61:b8:90:7e:b8:74:22:67:19:a6:f9:
                    1f:fa:4f:89:e3:ea:84:5c:63:ab:bd:2f:fe:4d:15:
                    f3:e6:af:fc:cc:fc:54:af:a5:3f:d1:9f:d5:3e:59:
                    3b:0b:69:ed:92:77:8f:17:7f:12:a5:57:79:d7:71:
                    bb:bd:56:cb:00:c7:21:2f:06:ba:8d:2f:ac:87:b1:
                    3c:27:5b:0d:40:2a:8d:72:95:03:5e:dd:d5:4d:86:
                    1e:d5:43:7a:dc:43:3e:1b:c4:13:4b:15:e8:12:aa:
                    2c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1B:12:6F:F1:ED:B1:5F:36:62:81:CB:0B:33:C6:2F:66:1D:85:EC
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:35:20:b3:1b:f9:7e:8d:57:28:f7:c7:ad:20:fe:e4:c9:49:
         94:8b:de:70:f8:d4:5d:82:64:52:ab:b6:d3:d9:42:07:33:27:
         94:0e:70:44:80:f6:e1:4c:a4:f2:32:0f:fa:11:d0:80:0f:65:
         f1:32:c5:96:e8:11:92:59:32:e5:a7:01:04:3b:65:e6:4c:20:
         97:3b:b2:41:7f:20:fd:b7:62:1e:18:0c:a2:f5:bd:98:00:d9:
         e7:4d:74:0d:30:49:82:d3:7f:f0:20:ce:83:c0:d0:55:a6:5c:
         9e:27:22:b0:72:55:f2:b9:f4:34:3e:68:4f:f8:eb:52:02:2e:
         ae:b3:69:c0:cd:72:a2:89:6c:07:88:ed:f6:f7:df:a5:f4:ee:
         03:1d:69:1b:03:16:04:62:09:80:91:37:8d:cb:fc:1c:b6:a6:
         da:f7:03:2b:5d:e6:f8:62:87:c8:c5:ce:c4:68:73:c7:2b:6d:
         8b:79:27:2e:30:b5:a6:82:56:a0:7a:73:25:8f:70:e5:60:5a:
         e6:4c:60:53:73:14:c3:59:6a:39:25:86:32:1d:73:a8:07:c8:
         37:c2:93:0e:11:1d:c8:43:28:e2:44:40:74:d1:ea:44:95:48:
         30:29:49:0f:c1:67:f9:51:7d:ce:01:55:66:a7:92:61:6b:9f:
         ff:98:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:03:39 2026 by rpki-client