Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File:                     qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier:          nk1wByimfDi/f1+KNXbaV59MFjfz/NMMerFs5ILRXiw=
Subject key identifier:   03:1A:02:80:34:37:0D:29:F9:1C:EE:8B:3B:2F:EE:DD:DD:C2:8F:07
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer:       /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial:       019EC17F7A9D95C84A9ACCEE3891B0DF734D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number:          0BBC
Signing time:             Sat 13 Jun 2026 15:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:17 +0000
Files and hashes:         1: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (hash: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4=)
                          2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: f99oKr5nAO0xeHT8a9Mx6Znz6ViF5s3UfSqjdOJupd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:7a:9d:95:c8:4a:9a:cc:ee:38:91:b0:df:73:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
        Validity
            Not Before: Jun 13 15:00:17 2026 GMT
            Not After : Jun 14 15:00:17 2026 GMT
        Subject: CN=031a028034370d29f91cee8b3b2feeddddc28f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:7c:f3:bc:2f:36:86:86:ee:f9:bc:e3:10:
                    95:1b:b1:d9:dc:6c:d1:e0:d6:42:f3:a0:02:fa:9d:
                    ee:03:14:57:8b:3b:2b:d0:f8:18:83:b4:e3:ac:cd:
                    4a:14:2e:3c:0f:d8:15:1a:58:93:53:06:a8:26:c5:
                    34:65:7c:65:c7:a6:ce:04:b9:52:a1:c4:41:93:36:
                    ab:7d:c3:26:bc:e7:7c:45:40:1d:40:90:41:86:e0:
                    da:c4:95:56:11:6b:ff:ad:51:63:cf:d1:a3:42:75:
                    3e:98:63:e5:f6:02:4e:ef:e9:0c:ef:cf:c8:d3:1d:
                    8c:91:62:fd:8d:0d:32:ed:c7:84:08:ec:c6:f5:b0:
                    5e:4f:fd:b0:80:48:9e:d9:b2:56:9b:06:ca:97:b8:
                    09:26:35:cc:24:07:f7:de:65:08:5c:cb:e1:91:52:
                    ad:89:2e:bf:2d:df:08:a5:69:20:ed:a5:5f:8f:70:
                    16:93:32:25:93:d0:83:b3:76:ec:e6:b8:a1:78:a3:
                    87:7d:7b:d0:1a:b9:aa:05:8a:9e:6e:48:8e:34:b3:
                    cd:67:ab:5e:b9:3e:b8:f4:ab:00:46:ab:43:7a:70:
                    40:af:16:42:07:07:7b:03:b9:db:06:1c:cc:1a:fb:
                    1a:f6:53:16:9b:1a:02:9f:82:87:12:59:b1:48:74:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1A:02:80:34:37:0D:29:F9:1C:EE:8B:3B:2F:EE:DD:DD:C2:8F:07
            X509v3 Authority Key Identifier:
                keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:70:f8:af:6f:ad:55:d5:c4:3a:71:2c:09:83:cd:9b:f1:
         2f:ee:39:3f:94:38:c3:20:12:1a:a2:42:14:fc:42:52:73:14:
         23:77:3f:65:8b:cd:26:cb:26:4b:50:57:35:0f:50:cd:08:8d:
         e8:0e:3c:ce:5f:0b:c7:a5:a3:ff:be:e8:21:e9:80:3e:8f:87:
         71:bc:c5:e6:4c:90:12:2c:7c:1a:44:c6:e4:5d:fa:23:42:9b:
         f5:54:b1:c7:9a:54:0f:1f:ca:0b:b7:7f:aa:42:f4:5a:04:6c:
         5d:9f:ee:c2:33:6e:03:36:7f:aa:58:4c:49:15:f2:f9:f0:f8:
         6a:db:47:c2:a6:53:18:f4:6b:67:ac:2a:07:d0:07:3b:b1:5a:
         02:6a:8d:6b:55:3f:73:e3:ce:55:63:44:58:43:35:f4:05:bd:
         96:dd:6d:dc:da:2b:44:e9:00:c8:7b:10:1c:89:f3:2e:c1:9b:
         9a:db:a8:47:b2:9f:30:17:38:bc:80:89:1e:4e:2e:b0:78:25:
         86:cd:cc:72:8c:36:18:1c:b0:6c:39:78:0d:a6:d3:c0:48:5e:
         77:b3:cf:e8:47:ef:b1:7e:6a:21:bf:62:d5:33:80:d0:cd:d2:
         2a:ab:91:65:2d:b3:b2:33:1b:10:ab:15:6d:2e:ee:2c:82:94:
         07:9c:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:32 2026 by rpki-client