Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          rwJUFoOcEMPoghXB+BqM3GQXV4IMh1HhkdS6xSBkJy8=
Subject key identifier:   8D:72:B6:EF:9C:FC:5C:08:DB:44:15:92:6C:0C:30:6B:AD:05:A1:EF
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       019EBFFF7E4FA3D0A6F59454ADD96C9FB56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 08:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:52 +0000
Files and hashes:         1: HqmBNUdmEip8S3rZUAEXbYeiMDE.roa (hash: g5QXvRrB37nz+UezkbR2qYuv3hfWDz55OyBzCv5F3cs=)
                          2: gn4jpmqvHPR6rBGCBxZHXL4XW7Q.roa (hash: zEyp0ISXI99Ue+kTnL8hqnoTwJyraQRvQCykId/nY+Q=)
                          3: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: PShB2LHDs6wC5bVT51F8R9sldWQuM5P/VTu3wUjF10U=)
                          4: slzLq75d_2U3gzXMediesPc1y_A.roa (hash: o+7OLqNyBmfA/DpIWOrqjBa7X/0F+NH08pgpTA/9P1E=)
                          5: vFoLoBh7oWb6usXmjNjvyipGBRI.roa (hash: 0j1EDxGflRhorx1jgVNGqb1+St0JzyMh9AI0pVLut9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:7e:4f:a3:d0:a6:f5:94:54:ad:d9:6c:9f:b5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Jun 13 08:00:52 2026 GMT
            Not After : Jun 14 08:00:52 2026 GMT
        Subject: CN=8d72b6ef9cfc5c08db4415926c0c306bad05a1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:14:0f:40:7e:2e:95:8c:98:e5:21:92:bc:
                    8f:48:03:4a:c9:56:c1:d1:72:98:9c:47:56:95:14:
                    db:ce:d7:09:56:bf:5d:29:58:f4:0e:47:b8:3c:77:
                    9f:f2:9d:20:33:65:07:16:9b:2f:11:8e:ed:69:f1:
                    88:31:c3:35:5a:9c:1d:70:44:61:93:80:a5:06:eb:
                    53:28:53:9b:20:c8:bd:5f:2a:96:cf:33:66:1a:f6:
                    a8:16:60:f8:8d:13:6f:d9:d9:63:36:74:d6:74:5e:
                    95:7c:49:cb:29:0a:5b:40:81:8c:00:18:76:d6:15:
                    a3:a8:73:b1:ce:a3:89:dc:3d:68:66:c6:fe:f7:2d:
                    ad:fe:b7:a2:73:63:84:bf:4c:e7:b8:e7:c9:2a:17:
                    47:f5:8c:c5:da:10:04:66:e7:8a:db:42:0e:9a:49:
                    eb:0f:ed:92:6e:29:38:e5:cc:dd:a9:24:c2:6f:93:
                    ad:ea:01:15:5e:eb:b5:77:32:3c:68:40:33:be:94:
                    dc:47:80:80:45:e4:1b:73:8d:e4:fc:21:37:2d:f0:
                    82:98:f4:e1:4c:8a:a1:88:4a:ed:e0:83:5c:8b:b3:
                    87:2c:cd:98:20:16:ad:f8:bb:37:1a:dd:3f:3c:4e:
                    8f:b0:ba:e2:6d:4d:90:4f:28:cd:20:1f:4d:05:cb:
                    f1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:72:B6:EF:9C:FC:5C:08:DB:44:15:92:6C:0C:30:6B:AD:05:A1:EF
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fa:a1:e8:e7:db:2c:89:c6:0d:1e:70:73:3c:3d:ed:ff:42:
         22:e3:4f:45:fd:c5:6f:22:f1:9f:de:9e:ba:20:48:93:84:82:
         1a:b9:32:7f:47:1f:7b:41:3a:88:cc:15:4c:34:f9:83:ff:63:
         b7:1b:5c:4f:8f:c6:3a:28:a6:58:33:d0:c3:ee:1c:ce:ad:c1:
         9a:21:d1:ce:28:46:db:c2:c4:61:3a:18:c7:7a:85:12:56:80:
         d9:20:34:54:bf:70:b6:4a:3a:5e:b7:cd:6d:90:b4:d2:45:d3:
         04:f6:8c:39:36:a5:da:52:bd:ac:84:66:4d:ba:70:54:04:ad:
         fd:6f:5a:62:1a:50:d2:41:b9:40:e8:c9:57:6d:f8:47:6b:be:
         12:74:3f:12:1d:34:4b:8b:71:be:57:0c:2e:97:f7:31:41:87:
         10:3d:aa:55:40:21:f2:72:9d:d6:2c:a5:ed:ed:f3:2b:a1:3f:
         17:64:46:99:9b:b0:c9:c2:22:9b:65:e8:34:07:6f:ac:08:a6:
         17:88:78:1d:2b:c9:0e:08:b0:fd:d4:ed:99:37:c7:f3:22:bc:
         7c:78:d1:5f:2f:32:7b:9d:05:f7:61:94:49:08:be:f7:49:46:
         af:a2:7d:39:63:dd:3b:3e:2b:41:f9:83:f3:d5:86:1c:f2:3e:
         c9:99:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:33 2026 by rpki-client