Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File:                     bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier:          RZ8Gsi/dxW1piS3r6a7drJQc9nLgDRb3cwufQ7OOq3A=
Subject key identifier:   A9:5B:99:71:0D:97:75:72:63:7E:64:86:22:5A:20:FD:68:E7:65:43
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer:       /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial:       019EC25B76851EDB274CD45565D84401B738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number:          0D20
Signing time:             Sat 13 Jun 2026 19:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:34 +0000
Files and hashes:         1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: VoigRIKuyGJCXUreVLkLPlEUY86u8kSxa/red3dz2+g=)
                          2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:76:85:1e:db:27:4c:d4:55:65:d8:44:01:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
        Validity
            Not Before: Jun 13 19:00:34 2026 GMT
            Not After : Jun 14 19:00:34 2026 GMT
        Subject: CN=a95b99710d977572637e6486225a20fd68e76543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:ac:b3:86:58:e9:b6:44:7b:2f:b3:28:3e:
                    b0:35:8f:6b:89:f0:bd:3b:df:6d:2e:a7:a6:7e:57:
                    69:aa:2f:05:c8:0a:18:05:e9:dc:08:99:1c:d2:71:
                    5b:9d:09:d7:01:61:38:11:16:bd:a0:54:c0:94:9c:
                    ff:5b:a8:e8:aa:30:be:07:ff:64:e9:0a:8d:49:e3:
                    f9:5c:ff:0b:fa:23:1e:12:f2:77:e4:f2:27:b7:1d:
                    0e:62:56:8f:44:11:2e:e7:61:6a:cd:ba:29:16:5e:
                    d6:b4:06:db:0f:eb:03:bd:41:58:38:82:d5:bb:ef:
                    f0:63:01:41:17:e4:b4:e1:4f:0a:b9:c9:ec:7b:99:
                    de:c2:94:de:ae:15:69:7c:4f:80:0b:89:f0:39:c1:
                    2f:e8:e4:43:16:62:28:36:40:1f:70:42:54:77:d9:
                    f7:b8:13:fd:8a:7c:f4:e4:3c:63:47:ef:ae:a6:2d:
                    f5:0b:92:99:a8:16:a8:6e:c7:20:99:e7:4f:1c:ae:
                    d7:ab:8f:f7:58:96:40:53:35:67:48:f3:25:c9:b3:
                    56:c3:d2:08:4b:26:37:e7:98:09:61:76:7c:58:3c:
                    d0:c8:4b:3e:3c:fb:e6:56:67:c1:0c:a9:77:01:87:
                    86:3b:af:72:63:af:45:6c:d7:d4:e7:e9:80:91:e2:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5B:99:71:0D:97:75:72:63:7E:64:86:22:5A:20:FD:68:E7:65:43
            X509v3 Authority Key Identifier:
                keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:36:65:e8:e2:57:8c:a5:5e:b3:15:1b:ae:b5:20:c3:ea:02:
         0e:0a:f3:9e:7a:eb:60:f1:7d:9d:8c:94:38:e3:a9:37:18:78:
         a8:0b:f8:d0:ff:a0:8d:59:d2:a3:45:a7:fb:5b:98:7b:4a:9b:
         55:f7:ee:fb:cf:88:f4:30:1f:90:e4:8e:9f:ae:31:14:e5:8b:
         85:03:67:51:9a:06:55:92:99:59:f7:d2:28:aa:81:88:5a:85:
         6f:d7:9b:e1:94:7b:8f:53:36:8f:a4:1c:9a:48:7b:cc:8f:fe:
         38:0a:e7:1f:36:d7:13:de:c2:fb:ee:b5:cf:37:e3:ba:f7:4e:
         33:de:c4:1d:93:ea:1d:c6:e1:23:ce:6d:e2:59:c3:4a:73:97:
         14:a1:b8:0a:57:9a:74:8c:9c:d2:a8:7c:cc:41:7b:90:9e:83:
         00:5f:12:f0:70:d0:1f:0a:28:45:c9:bb:ef:17:8c:86:a8:d0:
         0d:54:9e:4e:e1:21:e9:8b:38:83:30:f1:df:95:7d:b9:30:67:
         d2:99:db:d7:4a:05:e5:6a:3e:65:d7:b7:f2:64:f4:76:00:ce:
         9a:2d:9a:cf:47:f6:57:af:d5:88:c4:31:cd:e0:b2:4f:30:9a:
         0f:50:11:5c:e5:40:5f:d8:4e:67:3b:ed:c6:ec:da:e8:d1:b4:
         b8:b0:50:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:53:44 2026 by rpki-client