Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File:                     QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier:          EnyS2s9cMdGNV8Lu+KL53UAQUHTsPuh4b2tzBaeLgzE=
Subject key identifier:   24:B9:8F:E5:D0:A8:A2:A5:EE:5D:FF:FD:3E:8F:12:B0:49:39:7A:7E
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer:       /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial:       019EC2C9BADE0164C44CF353A18683F8BF4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 21:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:00 +0000
Files and hashes:         1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: B52GqVG2i0cFocudghsuc8xERyEq5kbhhIQBQUGaplk=)
                          2: muJold8C5TUMixIVaL6rH1BS38A.roa (hash: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:ba:de:01:64:c4:4c:f3:53:a1:86:83:f8:bf:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
        Validity
            Not Before: Jun 13 21:01:00 2026 GMT
            Not After : Jun 14 21:01:00 2026 GMT
        Subject: CN=24b98fe5d0a8a2a5ee5dfffd3e8f12b049397a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:7a:bd:24:5b:d9:a4:73:fc:d1:45:e7:ac:
                    ef:a9:7c:ea:53:24:27:bb:e1:e6:7e:3a:9f:1a:ff:
                    41:d7:60:0f:07:4b:82:00:30:1e:bc:1f:c3:5c:51:
                    35:bb:89:6b:9f:f9:71:f8:d9:19:50:db:ec:7e:81:
                    7a:33:eb:38:a7:1d:dd:22:d5:6a:3d:ec:c0:31:ed:
                    13:ca:d3:62:87:3d:63:33:f3:bf:02:96:a8:76:16:
                    23:63:ea:e9:c5:17:bc:22:6f:ae:f1:ae:fd:eb:c4:
                    5b:fd:c0:17:b1:43:76:7e:35:bb:8e:fb:db:12:98:
                    ad:27:87:2b:44:59:0c:56:18:25:3d:55:75:8e:e7:
                    3d:df:2f:aa:76:d9:bb:46:33:cb:e9:2b:16:d0:2d:
                    7f:ef:a9:75:c7:ee:8f:f7:8b:82:3d:a3:1a:43:25:
                    10:9c:71:d6:6c:79:63:b8:1c:a9:49:ce:33:a8:28:
                    2f:d4:6a:b9:94:56:02:bb:a0:44:39:0f:c5:9a:32:
                    4a:d2:c5:f2:df:a3:fe:bd:4c:05:82:a8:1d:7b:65:
                    ee:b7:a5:69:2a:b4:cd:fd:29:24:8e:57:57:ce:2d:
                    ad:d3:b1:21:b1:cf:e3:d8:99:f2:d1:59:8e:43:41:
                    53:4c:cd:39:5b:63:5a:34:d0:8d:85:64:d9:cd:7a:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B9:8F:E5:D0:A8:A2:A5:EE:5D:FF:FD:3E:8F:12:B0:49:39:7A:7E
            X509v3 Authority Key Identifier:
                keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:84:2a:b4:00:b1:af:88:d9:ea:08:98:27:88:9e:cc:74:05:
         d0:ef:32:f3:7a:f5:5c:44:87:22:34:b3:14:4e:a6:fd:40:70:
         69:be:8f:9a:3d:b8:fa:3e:4e:0c:90:29:2e:f8:31:f2:79:39:
         ac:b0:ca:75:c7:71:2c:f5:f9:df:a3:a7:d5:33:a2:62:6f:88:
         c8:1a:c4:88:d7:38:69:f4:27:36:5f:17:76:8f:8d:b9:e4:f6:
         01:fe:f4:a5:6f:2a:61:a5:2f:c0:ae:77:b5:05:95:3c:01:a9:
         53:93:64:07:b5:5d:ab:25:ee:4f:91:4b:01:6a:b3:ea:52:f6:
         ae:90:a7:b9:79:88:15:c4:3c:b5:71:8d:d6:39:5c:75:28:99:
         73:e1:37:24:b4:52:cc:47:02:eb:90:85:b3:3f:d0:53:41:1e:
         a4:4e:0d:1f:a9:a7:04:26:1b:ca:9a:60:97:6c:f8:31:1e:56:
         56:94:38:93:8d:04:4e:46:e7:65:af:4e:be:09:9d:a3:a9:df:
         ba:e1:54:cf:a4:56:46:d0:81:03:07:ae:e9:aa:ca:29:c9:92:
         6e:fb:9e:29:4c:a3:ab:67:5b:03:1c:05:c4:69:0a:a6:d3:57:
         af:14:e2:79:d8:d7:41:11:8e:b2:1c:ee:7f:6f:df:81:11:da:
         fd:80:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:19:46 2026 by rpki-client