Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File:                     Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier:          gRQknjq5s69Z7/9kJ6530frTXvtPTFsKeeLp1M2YAV4=
Subject key identifier:   34:2B:54:11:4D:EB:0A:54:3D:A5:01:66:4F:DF:05:96:76:2D:D7:9D
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer:       /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial:       019EC4B7DE9D80E6EBF548C07BBC162FB7AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number:          17AB
Signing time:             Sun 14 Jun 2026 06:00:44 +0000
Manifest this update:     Sun 14 Jun 2026 06:00:44 +0000
Manifest next update:     Mon 15 Jun 2026 06:00:44 +0000
Files and hashes:         1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: h/zH0XC6rb/zGHxestKGGwH9BQQP6oBTDxjjw0Y30XU=)
                          2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:b7:de:9d:80:e6:eb:f5:48:c0:7b:bc:16:2f:b7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
        Validity
            Not Before: Jun 14 06:00:44 2026 GMT
            Not After : Jun 15 06:00:44 2026 GMT
        Subject: CN=342b54114deb0a543da501664fdf0596762dd79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0d:51:ca:5a:d0:3a:aa:48:7f:f4:cf:be:d7:
                    56:75:62:61:1f:b9:7b:d0:67:f3:b5:42:d9:54:be:
                    b7:b7:b3:a5:cc:6e:71:8a:ea:d3:60:f9:91:3c:28:
                    2a:97:44:8a:83:1a:3f:f0:6b:d5:63:68:db:3a:ec:
                    be:1d:dc:b9:64:48:ec:f0:80:bb:26:50:e0:83:03:
                    48:8e:53:f1:42:40:c0:17:4c:cf:cf:de:be:5f:46:
                    b2:72:7d:3c:0a:4a:96:a9:20:c3:e0:e9:ff:68:c1:
                    41:84:fe:1e:59:74:16:4c:24:e0:db:07:cd:4c:11:
                    8c:d4:d7:4d:c8:99:db:76:8e:9f:34:5d:f9:36:9f:
                    0f:43:37:39:ad:0f:ef:59:96:b4:99:f5:de:f8:af:
                    54:de:9f:88:36:5f:a6:87:64:d2:1c:2f:7a:9b:91:
                    d0:0c:2f:28:bd:d2:29:da:cc:0f:9d:30:30:7e:24:
                    91:68:10:ef:d3:7c:c9:94:ac:54:47:28:78:97:a8:
                    48:8c:51:22:f6:e9:b5:ec:0e:83:fd:48:58:4b:99:
                    1d:b4:df:4d:1e:a8:e6:8e:e4:17:6a:64:fc:79:26:
                    60:1a:41:4d:61:d2:47:0b:23:41:6d:f5:9f:d9:78:
                    86:16:ec:44:51:fd:a0:63:84:1f:4d:aa:ef:07:11:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2B:54:11:4D:EB:0A:54:3D:A5:01:66:4F:DF:05:96:76:2D:D7:9D
            X509v3 Authority Key Identifier:
                keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:35:ef:8c:0f:30:11:ad:03:a9:68:eb:c6:ba:6d:2f:b3:7a:
         23:9f:0f:b7:d6:3c:c4:6f:e6:9e:3b:c7:fe:56:08:d4:aa:28:
         df:63:8e:9b:24:d2:23:fc:ac:58:0e:82:b6:b9:99:da:38:8a:
         86:6b:be:57:f7:9d:b4:ea:f8:d0:63:6b:ac:ec:79:00:56:a1:
         14:5a:62:88:0c:eb:83:19:c8:ee:a4:c5:93:dd:75:28:05:fc:
         40:13:a8:30:48:0c:a1:41:65:5e:3f:ed:4a:6f:bd:7f:51:1a:
         55:56:b9:30:57:b3:0b:d2:98:26:d4:59:74:31:35:ef:a9:36:
         46:ba:78:80:38:c8:aa:43:23:4e:db:67:19:6a:af:2c:77:8d:
         cd:b7:ef:84:a5:54:63:1e:ad:a8:e2:8b:ca:79:2c:14:1b:5e:
         5c:5d:69:46:f9:6e:12:ed:9b:b4:0e:ef:53:2e:b9:0d:3f:1e:
         5a:ae:5f:16:1b:fd:07:41:a1:4d:a0:3c:f0:56:f4:70:96:4e:
         8a:59:c5:ca:4d:19:57:dd:5b:b5:06:0e:7f:4f:99:22:81:ee:
         90:93:76:d6:c2:7a:5c:ea:a2:ec:34:14:92:02:f6:90:65:ba:
         7f:f0:38:49:ca:a3:a2:b5:2c:93:41:3a:b6:e3:ab:98:73:a7:
         f5:5d:c1:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Et96dgObr9UjAe7wWL7euMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYThlMjg5OTY5M2ZjYTAwYmQ4MDQxYmE4ODAxZjJkODg4
NjkxMDgwHhcNMjYwNjE0MDYwMDQ0WhcNMjYwNjE1MDYwMDQ0WjAzMTEwLwYDVQQD
EygzNDJiNTQxMTRkZWIwYTU0M2RhNTAxNjY0ZmRmMDU5Njc2MmRkNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q1RylrQOqpIf/TPvtdWdWJhH7l7
0GfztULZVL63t7OlzG5xiurTYPmRPCgql0SKgxo/8GvVY2jbOuy+Hdy5ZEjs8IC7
JlDggwNIjlPxQkDAF0zPz96+X0aycn08CkqWqSDD4On/aMFBhP4eWXQWTCTg2wfN
TBGM1NdNyJnbdo6fNF35Np8PQzc5rQ/vWZa0mfXe+K9U3p+INl+mh2TSHC96m5HQ
DC8ovdIp2swPnTAwfiSRaBDv03zJlKxURyh4l6hIjFEi9um17A6D/UhYS5kdtN9N
HqjmjuQXamT8eSZgGkFNYdJHCyNBbfWf2XiGFuxEUf2gY4QfTarvBxGkPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQrVBFN6wpUPaUBZk/fBZZ2LdedMB8GA1UdIwQY
MBaAFEOo4omWk/ygC9gEG6iAHy2IhpEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUt
NDk1NDI3MGUyNTA3LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUtNDk1NDI3MGUyNTA3
LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjXvjA8w
Ea0DqWjrxrptL7N6I58Pt9Y8xG/mnjvH/lYI1Koo32OOmyTSI/ysWA6CtrmZ2jiK
hmu+V/edtOr40GNrrOx5AFahFFpiiAzrgxnI7qTFk911KAX8QBOoMEgMoUFlXj/t
Sm+9f1EaVVa5MFezC9KYJtRZdDE176k2Rrp4gDjIqkMjTttnGWqvLHeNzbfvhKVU
Yx6tqOKLynksFBteXF1pRvluEu2btA7vUy65DT8eWq5fFhv9B0GhTaA88Fb0cJZO
ilnFyk0ZV91btQYOf0+ZIoHukJN21sJ6XOqi7DQUkgL2kGW6f/A4ScqjorUsk0E6
tuOrmHOn9V3B+g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 10:24:32 2026 by rpki-client