Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File:                     QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier:          0DdCi79Fb+1P5yzrm2I1/PqlwTEgjFLjNhTHd5KbGoU=
Subject key identifier:   47:98:B9:2D:C8:B3:E8:3C:43:5C:D5:16:41:62:20:AB:5C:E2:FF:15
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer:       /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial:       019EC337B59003AEF658CEA5D9F5633D2579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number:          15AB
Signing time:             Sat 13 Jun 2026 23:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:08 +0000
Files and hashes:         1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: VzP6A7zInGLzdTf2aMqJr9HaBJIpJ6IInGB908DjTlI=)
                          2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:b5:90:03:ae:f6:58:ce:a5:d9:f5:63:3d:25:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
        Validity
            Not Before: Jun 13 23:01:08 2026 GMT
            Not After : Jun 14 23:01:08 2026 GMT
        Subject: CN=4798b92dc8b3e83c435cd516416220ab5ce2ff15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:26:3c:f2:81:ff:06:36:21:c3:11:d0:56:
                    d9:4c:5a:1e:c7:5b:99:23:a0:f2:14:a0:4c:b7:88:
                    2d:4d:7f:2d:65:7a:a8:3b:d5:26:2e:4c:e9:8a:ee:
                    28:5f:47:24:72:58:34:0c:1c:30:11:13:3d:e7:00:
                    38:83:df:af:a4:71:38:7d:5f:d1:03:08:06:f9:96:
                    b0:d7:d6:d8:00:dc:33:df:e9:8b:46:51:49:e0:71:
                    8c:35:f9:06:3d:9a:6b:2c:b7:47:94:d9:ab:72:35:
                    ab:c7:3e:84:5b:08:74:da:e5:69:6a:9f:2a:a3:4e:
                    f9:da:2c:b7:0d:f1:de:5d:71:4b:13:0d:49:48:c1:
                    27:69:ca:f9:5c:71:3f:37:25:60:a0:d4:c1:33:cb:
                    5e:6d:63:06:1d:cf:1c:8f:fa:4d:00:2c:55:8e:36:
                    18:bc:1a:99:06:8a:ba:59:4a:88:bb:99:d1:26:51:
                    76:04:bc:ac:2b:fd:22:0e:93:38:99:39:0d:bd:da:
                    3d:af:e6:ed:4a:1a:36:8a:ff:de:30:43:47:99:61:
                    9d:a3:67:4b:fb:b0:79:83:c0:e8:34:54:4c:6e:ca:
                    47:24:c4:c0:ae:94:d8:f7:ca:79:44:27:6f:71:80:
                    bc:81:4a:a6:14:a0:8d:1b:f6:b7:31:fb:c4:2b:0f:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:98:B9:2D:C8:B3:E8:3C:43:5C:D5:16:41:62:20:AB:5C:E2:FF:15
            X509v3 Authority Key Identifier:
                keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b7:d8:6d:55:59:a5:bf:69:13:19:4c:24:e0:7a:be:f2:77:
         9e:d9:0e:c3:c9:8b:13:19:ac:70:d9:e9:44:49:43:3a:16:c0:
         e5:41:72:49:f3:06:d3:83:fd:25:ae:68:73:ab:fc:49:69:0e:
         1a:0d:70:99:8e:41:92:84:ad:4a:5a:95:7b:ef:1a:f1:75:1f:
         c6:ee:69:8c:f4:9b:b0:68:3b:3b:97:0d:26:f7:61:2f:1d:19:
         8c:a7:fd:1f:f9:9a:62:a3:fe:d1:bd:b8:cf:60:51:1c:59:51:
         c2:78:38:1e:e5:a7:83:2a:b2:81:59:15:46:59:ef:1a:dd:b2:
         df:bf:8c:fb:7c:f3:3c:28:ad:99:f1:f0:fe:c8:ce:25:e9:ae:
         96:f6:72:7e:11:79:97:53:23:d1:85:d2:18:cc:6d:29:f8:98:
         91:a5:81:20:da:78:0c:0c:6c:8f:18:eb:a1:bf:b3:4e:9b:94:
         5f:6b:cc:9e:ab:a9:84:b8:e1:34:32:f4:13:cd:0d:3d:25:03:
         c4:7b:00:8f:0e:06:f1:de:e7:86:4b:a0:0e:67:42:24:56:9f:
         79:2f:ac:78:3e:b3:61:ba:87:97:3a:20:67:51:5f:86:91:b4:
         bd:d5:37:7c:e1:fc:98:28:80:7b:4f:49:82:c0:c8:84:c8:1e:
         95:8b:64:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN7WQA672WM6l2fVjPSV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1
OGIzZTcwHhcNMjYwNjEzMjMwMTA4WhcNMjYwNjE0MjMwMTA4WjAzMTEwLwYDVQQD
Eyg0Nzk4YjkyZGM4YjNlODNjNDM1Y2Q1MTY0MTYyMjBhYjVjZTJmZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIsmPPKB/wY2IcMR0FbZTFoex1uZ
I6DyFKBMt4gtTX8tZXqoO9UmLkzpiu4oX0ckclg0DBwwERM95wA4g9+vpHE4fV/R
AwgG+Zaw19bYANwz3+mLRlFJ4HGMNfkGPZprLLdHlNmrcjWrxz6EWwh02uVpap8q
o0752iy3DfHeXXFLEw1JSMEnacr5XHE/NyVgoNTBM8tebWMGHc8cj/pNACxVjjYY
vBqZBoq6WUqIu5nRJlF2BLysK/0iDpM4mTkNvdo9r+btSho2iv/eMENHmWGdo2dL
+7B5g8DoNFRMbspHJMTArpTY98p5RCdvcYC8gUqmFKCNG/a3MfvEKw+2BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeYuS3Is+g8Q1zVFkFiIKtc4v8VMB8GA1UdIwQY
MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt
ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz
LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubfYbVVZ
pb9pExlMJOB6vvJ3ntkOw8mLExmscNnpRElDOhbA5UFySfMG04P9Ja5oc6v8SWkO
Gg1wmY5BkoStSlqVe+8a8XUfxu5pjPSbsGg7O5cNJvdhLx0ZjKf9H/maYqP+0b24
z2BRHFlRwng4HuWngyqygVkVRlnvGt2y37+M+3zzPCitmfHw/sjOJemulvZyfhF5
l1Mj0YXSGMxtKfiYkaWBINp4DAxsjxjrob+zTpuUX2vMnquphLjhNDL0E80NPSUD
xHsAjw4G8d7nhkugDmdCJFafeS+seD6zYbqHlzogZ1FfhpG0vdU3fOH8mCiAe09J
gsDIhMgelYtkfw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:07:45 2026 by rpki-client