Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File:                     q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier:          n/aI/RNolfVtHYJelA7TYksfQMcc9kQixbIam3syuGM=
Subject key identifier:   A3:93:57:20:18:1A:26:3F:1E:64:B4:BD:54:97:F8:42:F7:27:9A:C2
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer:       /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial:       019EBE7F8F12C0187D3D4A7F3EF073BE0002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number:          0460
Signing time:             Sat 13 Jun 2026 01:01:31 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:31 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:31 +0000
Files and hashes:         1: HKpda77oV2jtNLAlS_XPuxfsfvU.roa (hash: fXjuC5XD+6PMUGUG/uqb5vV7VXDjvxnnbMukaXj/ZNA=)
                          2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: KegxL9CPQfzPyD2Sp9LdjNBsRXj/H1E5lYSoXPbHlVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:8f:12:c0:18:7d:3d:4a:7f:3e:f0:73:be:00:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
        Validity
            Not Before: Jun 13 01:01:31 2026 GMT
            Not After : Jun 14 01:01:31 2026 GMT
        Subject: CN=a3935720181a263f1e64b4bd5497f842f7279ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:6d:5d:29:ee:50:1a:de:3c:e1:68:d2:fd:
                    6e:5b:d3:a5:ab:d2:5e:7e:4a:37:f3:d4:4f:86:40:
                    0a:65:4a:d2:bf:6c:eb:11:5c:48:0e:a4:00:88:8e:
                    00:31:13:b7:d2:47:43:98:49:48:d7:bf:05:15:c4:
                    3e:1d:08:2e:53:3b:19:18:9a:f7:86:b7:c9:07:b6:
                    92:02:b7:3f:36:6e:5f:0b:8f:fa:bd:da:d4:37:91:
                    12:31:4c:e0:4e:e9:eb:01:17:a1:91:67:f6:64:b4:
                    cc:f3:7f:1d:c8:12:2f:e4:5c:00:ba:25:7c:e5:71:
                    5f:e5:1e:97:59:a4:eb:a1:09:bc:58:e0:8f:40:36:
                    74:43:96:0e:b4:4a:cf:4e:f4:89:cc:a5:2f:27:52:
                    e8:e8:0d:44:43:bc:de:37:28:df:71:b7:6e:33:79:
                    b0:5c:e1:4b:be:f4:05:5b:5f:40:35:9f:8e:ed:03:
                    0a:ae:b7:0e:8f:dd:4f:34:fd:51:5c:e4:fe:e4:d6:
                    35:d6:4f:80:a4:93:68:e7:d2:26:53:06:7b:33:d3:
                    1f:9d:0c:c3:e0:55:50:cf:3e:67:60:20:57:de:bf:
                    61:aa:40:42:10:f5:2e:df:dc:4e:29:30:0f:c3:51:
                    11:22:86:07:33:f5:d5:21:f6:97:81:9c:d1:1d:23:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:93:57:20:18:1A:26:3F:1E:64:B4:BD:54:97:F8:42:F7:27:9A:C2
            X509v3 Authority Key Identifier:
                keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1b:8a:dd:29:63:ae:b9:a2:54:eb:78:92:74:91:50:c8:b4:
         12:a9:da:84:16:e1:d2:61:8a:de:f6:91:7e:96:0d:e9:ff:6d:
         5b:a6:34:f3:08:8c:31:59:f0:8b:ba:50:f2:02:da:6a:70:76:
         40:97:29:e1:1c:49:44:cf:1b:ee:50:d1:e8:1d:b4:95:8b:d4:
         8b:cd:ff:bd:27:37:3f:d9:14:00:ab:89:0a:80:19:25:10:b6:
         d3:f5:bc:75:91:15:a0:91:71:fc:01:d4:ca:eb:8a:7e:98:e2:
         c5:49:5a:0b:f5:b0:29:34:30:18:27:fb:49:24:bb:f2:17:a7:
         aa:c0:06:e8:a3:60:d3:04:0d:a8:59:1e:29:08:0f:c2:2c:b0:
         89:82:3e:93:6b:17:df:37:d9:11:4d:be:f5:ea:45:7f:a2:b6:
         29:a6:13:fb:0b:bb:59:87:84:23:5b:54:51:db:38:6f:32:dd:
         86:23:6a:f3:c1:77:38:18:74:d8:cc:4f:f2:48:9f:30:de:1a:
         2d:79:3f:1e:0e:50:24:67:22:86:12:49:94:97:5a:cc:15:be:
         aa:00:51:d2:b7:cf:62:7b:3c:14:62:9c:97:53:ad:d8:07:00:
         a7:30:f3:ee:f6:04:d2:25:48:8a:47:c4:3f:07:a5:7a:1e:34:
         39:de:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:12 2026 by rpki-client