Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          RQzufs0rknDrZg+pSmAAMOMaAWF4+jDn7Ilc5A3O5ss=
Subject key identifier:   52:59:E6:A1:B4:34:62:B9:CC:D7:7F:89:50:65:4E:61:F1:E0:AA:11
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       019EBFFF7365C6AB61105454476274A06926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          0D2E
Signing time:             Sat 13 Jun 2026 08:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:49 +0000
Files and hashes:         1: 1-3nsrh4Lo8MRYJrpDe2Kv8gI2bk.roa (hash: J6AC5UbCT/JPLrTSWfSumCMQQX3px8kLFv3gDTLnI80=)
                          2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
                          3: PIU7Zxr6WOBUfjTOxP66dy63XjE.roa (hash: h4a3tGn4XY5dyoqR5ywDpWw2ctrTMxmn2LdoBTK4oGk=)
                          4: SZxwFn-rv4YHYIn11rPhhdZalEE.roa (hash: qGdnGUtcjilIGvYv6gZqj/DBGuFNWX/5F8NZ1f7ELoQ=)
                          5: dQp1_bF-2hRgZhoSUp2j8-OiYAI.roa (hash: Ktp1XPuBOcTSPdwju+u+aKIoeTI5yi+j2Ty+pydNaPA=)
                          6: fmZxjRZiqOQwHDt7j51f9SOA6RI.roa (hash: L9SLemKUDE99zwW/1qnnl1xaC8S5UDziumUBVKNLf1U=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: lGPNBpYcxOEfYGjH8uAh8EkILF1rOmedMdBikKphQgg=)
                          8: rHk667_7e1f5CM1H6jMGDJQ1_rI.roa (hash: eJy0wY8fT6hZGfxYTUIN+SEKm4c/Wt9buTzlEZ5VOng=)
                          9: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:73:65:c6:ab:61:10:54:54:47:62:74:a0:69:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Jun 13 08:00:49 2026 GMT
            Not After : Jun 14 08:00:49 2026 GMT
        Subject: CN=5259e6a1b43462b9ccd77f8950654e61f1e0aa11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:01:b2:6c:5c:24:f3:0d:38:e5:aa:12:24:
                    c1:8e:2d:b7:5a:9b:d9:11:d7:12:bb:c4:53:69:68:
                    84:bf:da:e3:58:3b:f1:0d:9b:53:83:1e:db:e6:42:
                    f9:92:47:18:45:fb:52:0f:7c:4e:a9:b2:38:cb:f2:
                    65:22:b4:82:23:b5:00:06:e0:cd:9e:03:5b:f2:03:
                    2c:a0:83:b6:8d:4b:bf:0f:41:27:5f:e5:67:41:ff:
                    d0:8c:20:9e:aa:04:79:b3:bf:b1:3f:b9:5e:ce:22:
                    e9:3e:30:77:e9:ee:8c:7f:eb:fc:8a:92:5a:73:2e:
                    34:6a:a8:ba:8f:63:45:5e:a7:f5:7d:a8:a5:28:bc:
                    2b:e4:de:de:ba:c5:60:a5:ed:e7:f3:e6:86:bc:db:
                    e9:7f:63:5d:ab:dd:12:fe:05:f5:6c:1b:a3:a8:c1:
                    88:de:de:63:43:90:72:69:07:b0:cf:42:f5:d5:15:
                    86:26:48:7b:12:b2:4f:6e:4d:b1:ad:34:9e:c8:6a:
                    e7:cf:1c:d4:6c:75:0f:a1:54:2d:46:53:4f:ed:78:
                    bc:a6:e5:4c:dd:b5:93:ac:34:b9:de:cd:1e:ea:44:
                    c8:d6:42:b1:64:e1:cc:52:e9:f1:44:e2:16:a0:65:
                    c1:ed:c5:e7:1f:e3:87:30:21:89:4a:15:e2:fe:cf:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:59:E6:A1:B4:34:62:B9:CC:D7:7F:89:50:65:4E:61:F1:E0:AA:11
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:8f:a8:78:99:97:60:84:9d:09:b1:11:5e:d9:3d:86:bd:75:
         09:5d:6a:95:ac:25:7d:7a:61:2a:65:a4:79:82:a9:0a:b9:19:
         de:92:78:6e:95:c8:85:52:58:7a:82:eb:91:26:02:fe:01:77:
         f7:ba:dc:ab:d0:20:a7:88:59:13:c3:c1:ab:4e:08:32:22:6c:
         9b:41:44:83:88:8b:fe:f8:4f:cd:c3:c8:0e:99:c4:68:d8:d3:
         f5:34:12:e4:2f:ec:d1:a7:37:3d:98:1d:3e:8c:18:22:11:75:
         a0:90:44:b5:6b:42:9f:f3:ae:38:69:f4:e6:65:d6:a8:ba:3f:
         21:2a:65:3f:23:36:36:fe:9a:0b:39:97:88:dd:74:a7:d8:17:
         59:46:0a:d1:b5:10:d3:de:a2:a8:4b:15:9f:e6:35:8b:dc:51:
         a2:3d:a3:69:77:1d:ec:98:a4:a0:4f:a8:71:61:0d:26:4b:56:
         0f:d5:6c:0c:16:e6:23:e5:0a:75:d3:66:bb:07:a7:25:43:00:
         db:77:12:46:9c:f1:49:96:9b:bb:d6:79:2d:66:76:55:21:bb:
         aa:1a:c4:33:0c:67:e5:75:23:f1:d2:2e:80:78:78:dc:0c:04:
         bd:ac:db:47:19:51:f0:74:ed:6f:0f:a4:3a:39:75:48:52:86:
         ce:0d:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:41 2026 by rpki-client