Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File:                     qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier:          CVZVLVkoszNFyVX+FOi8Ph4XeWRe5EcjJOl3cFQkKFc=
Subject key identifier:   EC:50:CA:A1:54:A4:68:73:4F:23:D0:5D:5F:BA:7B:C1:06:F9:EC:6C
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer:       /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial:       019EC2FFFC5A0DE6C8F3127BE320CE15C997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number:          1042
Signing time:             Sat 13 Jun 2026 22:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:16 +0000
Files and hashes:         1: 0rfYrVviZUVYPptqvM07XCjMZN8.roa (hash: NsAvwSlgjtFhEFUQcFrnr4l17cyyPI73mz93IQlKjBw=)
                          2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: fahO2xSwRwk71eC2a846FDrffRHPxEXf8mgP2Ix5UJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ff:fc:5a:0d:e6:c8:f3:12:7b:e3:20:ce:15:c9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
        Validity
            Not Before: Jun 13 22:00:16 2026 GMT
            Not After : Jun 14 22:00:16 2026 GMT
        Subject: CN=ec50caa154a468734f23d05d5fba7bc106f9ec6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:d2:47:95:5a:f2:80:0e:68:12:94:a6:80:
                    57:71:fa:9e:68:3f:5d:91:98:ce:9d:6e:48:8e:7e:
                    9e:c6:17:34:12:59:94:85:5a:e4:d1:c3:d2:67:a0:
                    2a:30:24:ec:05:f7:87:10:98:71:83:16:89:6f:58:
                    d4:e4:c6:65:b1:7c:8c:5f:3a:dc:8c:04:66:d0:80:
                    41:c8:33:97:1c:06:fa:1b:ee:55:90:29:00:79:ef:
                    31:24:30:c0:b0:42:54:9c:6b:77:10:4e:50:f1:85:
                    85:e5:2b:82:41:37:f1:1e:f4:92:99:13:ee:47:8d:
                    c0:3a:f6:0d:a7:a3:ec:09:dd:48:94:88:b6:b4:86:
                    18:7a:87:d4:a0:87:7c:cc:80:bb:4b:68:f6:27:9d:
                    68:af:97:b8:65:90:97:6f:40:a4:3c:17:2e:b7:c6:
                    ec:45:b6:cf:bb:c9:b3:00:42:41:e0:57:77:50:66:
                    49:1c:49:e1:af:9d:89:a8:e0:46:d5:37:93:40:ed:
                    90:b3:9b:69:bc:d6:75:cb:12:29:45:a2:45:05:44:
                    cd:52:32:b4:ff:95:9d:4a:15:44:4c:3e:2b:08:c0:
                    f2:bf:88:a9:41:8e:bb:fb:d6:97:bd:8f:6c:6d:6e:
                    94:c8:e3:2a:74:78:0b:2f:24:89:eb:0c:d9:96:ed:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:50:CA:A1:54:A4:68:73:4F:23:D0:5D:5F:BA:7B:C1:06:F9:EC:6C
            X509v3 Authority Key Identifier:
                keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:02:5e:43:ed:8d:a4:82:dc:e5:db:85:ab:9d:09:b4:6d:b7:
         cf:03:25:5d:24:48:77:7b:6d:6c:1d:bc:ef:93:c6:8f:a2:ed:
         0e:5e:82:6e:b4:99:89:e6:65:fd:b8:eb:06:d0:12:c6:52:82:
         80:70:d2:5a:16:5d:65:89:6e:7f:bc:af:e9:8e:d3:6b:51:82:
         b1:c6:84:4b:5d:f5:48:2d:a2:f9:64:96:ac:da:d0:db:e8:23:
         91:82:be:f5:83:17:3f:49:a6:5a:47:bf:04:2b:24:5a:31:1e:
         1c:f5:9c:44:86:ed:55:59:35:d3:24:7b:62:90:72:27:a4:ad:
         5f:d2:91:22:58:cb:ef:61:a7:46:7f:e2:01:63:1b:ba:94:25:
         a2:91:19:ab:76:eb:36:c7:8f:90:82:39:b7:f8:7a:b2:fa:3d:
         1d:4b:3a:85:20:1e:20:8f:ea:7d:fb:de:45:20:78:51:55:5d:
         55:9c:c3:c9:2e:40:17:dd:c0:3f:31:50:5c:6c:75:02:08:09:
         62:15:06:08:86:64:da:ce:7b:1d:e6:db:93:f2:3a:3d:00:8c:
         a3:b2:39:25:5d:b4:5b:34:1c:fa:1e:bc:8e:88:0b:ab:43:42:
         5f:bf:f6:72:71:9a:6e:b8:fb:95:9f:81:d3:8a:89:a5:cc:d3:
         13:7a:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:07 2026 by rpki-client