Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
File:                     auSqdx_QpXjqOqxLTT7IPYlGRj0.mft (raw, json)
Hash identifier:          Je+eo+oOlRsK/gUdom5vcxVXqvbn8SmLUighE8ypAXM=
Subject key identifier:   0D:1A:57:1B:56:66:90:0B:22:56:A7:02:B4:41:1E:70:70:89:2E:C1
Authority key identifier: 6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D
Certificate issuer:       /CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
Certificate serial:       019EC4812AF6A5770A6F53112BB6F6D60FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
Manifest number:          01A2
Signing time:             Sun 14 Jun 2026 05:00:59 +0000
Manifest this update:     Sun 14 Jun 2026 05:00:59 +0000
Manifest next update:     Mon 15 Jun 2026 05:00:59 +0000
Files and hashes:         1: GDQQ0FqYT9AvbB4OzpV_W08txF4.roa (hash: +7D1/7LzTXBfcdD4Y5uzQNgYSY1go2hv/v2LnVgCR1Y=)
                          2: auSqdx_QpXjqOqxLTT7IPYlGRj0.crl (hash: jvn3qHE20VEt1GUObknQIWLVFQ1oVABy2Ix5xUo5ELQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:81:2a:f6:a5:77:0a:6f:53:11:2b:b6:f6:d6:0f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
        Validity
            Not Before: Jun 14 05:00:59 2026 GMT
            Not After : Jun 15 05:00:59 2026 GMT
        Subject: CN=0d1a571b5666900b2256a702b4411e7070892ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:df:10:22:db:5e:69:e8:71:0e:59:24:99:
                    4c:08:83:b0:41:e2:6f:34:83:71:36:da:3c:ce:ec:
                    ae:52:a7:70:53:53:ca:e6:ef:dc:20:bf:1c:35:fe:
                    2f:28:0d:f8:2d:88:0a:03:94:ba:b1:fe:9d:13:d9:
                    39:6f:b3:36:67:76:81:8e:17:ce:ac:0b:c1:52:d6:
                    81:1f:76:4d:c2:bd:21:b0:16:60:6a:e0:7c:7c:95:
                    11:82:b7:56:0d:c5:74:c4:5b:1a:6a:59:f8:b7:e9:
                    3d:6d:50:6f:bd:20:e5:8c:9a:22:00:19:d8:56:38:
                    d5:13:cf:db:69:1d:54:d5:91:a0:7e:fc:2c:19:1b:
                    fc:28:15:a3:4f:a9:49:37:34:90:b0:84:f8:81:29:
                    21:7f:97:4e:d9:f1:f6:14:23:b5:c0:0d:a3:1b:93:
                    19:71:6b:fd:19:1f:52:20:17:7e:0d:cc:39:a8:b9:
                    39:a8:68:95:47:c5:4a:e5:45:d1:5c:ef:d1:ee:16:
                    2d:b9:9a:d6:18:f4:24:7b:1b:9d:dd:03:bb:d4:f5:
                    74:cc:eb:bc:51:c6:c6:a9:bb:14:14:c1:5b:3f:6e:
                    b5:e7:2b:4a:0e:40:b5:0a:99:f0:4d:3a:cf:9c:44:
                    16:cc:65:56:c1:f1:9f:5f:03:28:b9:d9:da:4c:a2:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:57:1B:56:66:90:0B:22:56:A7:02:B4:41:1E:70:70:89:2E:C1
            X509v3 Authority Key Identifier:
                keyid:6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9a:67:10:c5:79:23:1b:08:49:34:00:ea:2a:b9:7d:af:24:
         9f:6f:3b:57:09:31:da:8c:31:2d:81:21:d5:65:ce:9a:9c:20:
         8c:f7:b1:bd:0d:9b:58:d8:85:14:c7:32:1e:e3:c6:36:9a:d0:
         69:4c:0b:e2:51:3a:92:65:8d:cc:45:02:4f:f6:49:ba:fa:42:
         a7:d2:3a:57:d9:f5:8e:8b:51:55:ad:46:1e:f3:82:a2:78:e5:
         dd:99:42:f1:41:c9:0e:76:64:99:9d:de:a4:60:8f:6b:6b:fa:
         c2:47:a4:9f:a9:1c:e1:e6:78:58:9b:5d:65:7e:83:b4:0d:1d:
         f2:49:2f:e5:22:13:b6:86:cc:30:02:ef:1f:c6:df:28:48:93:
         49:2d:5f:a0:24:06:7b:79:cd:0b:44:8a:1c:fb:86:c3:5b:a8:
         38:34:ee:81:03:9d:33:12:8c:06:25:6e:1a:12:a1:16:5e:2e:
         12:0e:14:2c:7e:3d:3d:01:51:21:93:e3:11:03:11:46:95:b1:
         8e:d0:65:f8:a9:af:1d:41:86:f1:73:bd:89:0e:15:69:3b:16:
         ae:4b:29:e8:ce:69:8e:f2:d8:84:8a:60:6a:97:91:3e:67:0c:
         35:4d:e6:8f:f8:3a:9a:e1:c7:3d:58:34:60:ba:87:df:be:d4:
         71:26:4c:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EgSr2pXcKb1MRK7b21g+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZTRhYTc3MWZkMGE1NzhlYTNhYWM0YjRkM2VjODNkODk0
NjQ2M2QwHhcNMjYwNjE0MDUwMDU5WhcNMjYwNjE1MDUwMDU5WjAzMTEwLwYDVQQD
EygwZDFhNTcxYjU2NjY5MDBiMjI1NmE3MDJiNDQxMWU3MDcwODkyZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQDfECLbXmnocQ5ZJJlMCIOwQeJv
NINxNto8zuyuUqdwU1PK5u/cIL8cNf4vKA34LYgKA5S6sf6dE9k5b7M2Z3aBjhfO
rAvBUtaBH3ZNwr0hsBZgauB8fJURgrdWDcV0xFsaaln4t+k9bVBvvSDljJoiABnY
VjjVE8/baR1U1ZGgfvwsGRv8KBWjT6lJNzSQsIT4gSkhf5dO2fH2FCO1wA2jG5MZ
cWv9GR9SIBd+Dcw5qLk5qGiVR8VK5UXRXO/R7hYtuZrWGPQkexud3QO71PV0zOu8
UcbGqbsUFMFbP2615ytKDkC1CpnwTTrPnEQWzGVWwfGfXwMoudnaTKL2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0aVxtWZpALIlanArRBHnBwiS7BMB8GA1UdIwQY
MBaAFGrkqncf0KV46jqsS00+yD2JRkY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NWE5ZmYtZjVjMi00MzYxLTkwMWUt
MDM4ZDI0MDcxYThhLzEvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NWE5ZmYtZjVjMi00MzYxLTkwMWUtMDM4ZDI0MDcxYThh
LzEvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbppnEMV5
IxsISTQA6iq5fa8kn287Vwkx2owxLYEh1WXOmpwgjPexvQ2bWNiFFMcyHuPGNprQ
aUwL4lE6kmWNzEUCT/ZJuvpCp9I6V9n1jotRVa1GHvOConjl3ZlC8UHJDnZkmZ3e
pGCPa2v6wkekn6kc4eZ4WJtdZX6DtA0d8kkv5SITtobMMALvH8bfKEiTSS1foCQG
e3nNC0SKHPuGw1uoODTugQOdMxKMBiVuGhKhFl4uEg4ULH49PQFRIZPjEQMRRpWx
jtBl+KmvHUGG8XO9iQ4VaTsWrksp6M5pjvLYhIpgapeRPmcMNU3mj/g6muHHPVg0
YLqH377UcSZMWA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:38:26 2026 by rpki-client