Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File:                     qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier:          00fVMuhUYg8v4zJzYcfS83UI9X0+yIGNlc1I1xTK+qQ=
Subject key identifier:   E5:28:33:D3:1C:21:74:6F:D0:C9:A3:B9:D5:5A:24:83:F6:F2:5E:AD
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer:       /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial:       019EBEB5E7437AAD94774474F097DDAB8DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number:          0206
Signing time:             Sat 13 Jun 2026 02:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:52 +0000
Files and hashes:         1: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: KV3d+sf2++th994qeZG/S0jgfxesDsp1Uxlqpj9DNbE=)
                          2: snjhD4ZbdnCjhHGNejLaziB-EQw.asa (hash: k4YrVwNF0xC0R0c1Vt2SsaD9GQCIRybl7XtCYC8QQBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:e7:43:7a:ad:94:77:44:74:f0:97:dd:ab:8d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
        Validity
            Not Before: Jun 13 02:00:52 2026 GMT
            Not After : Jun 14 02:00:52 2026 GMT
        Subject: CN=e52833d31c21746fd0c9a3b9d55a2483f6f25ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:6c:57:86:fa:fb:b8:fe:70:34:90:81:a9:
                    0a:ad:e5:df:96:a2:a8:c5:75:70:ad:20:af:91:a0:
                    a4:d8:80:e6:4d:79:ac:ad:b7:7e:f6:e2:74:ec:e0:
                    62:c2:00:0c:6e:93:fa:53:cd:55:9f:b0:fa:7c:7c:
                    89:8e:50:13:b4:50:a4:6b:00:45:eb:9a:91:7c:94:
                    02:31:f3:13:d5:63:c4:cd:d6:55:e6:f5:df:84:5d:
                    0e:61:a1:18:6c:07:61:c9:b7:5d:08:74:46:fb:36:
                    f8:61:f1:a0:91:2e:4e:76:cf:20:01:68:88:28:41:
                    27:aa:3d:a4:cc:54:09:6d:89:ec:77:24:36:c4:32:
                    57:f2:cf:c8:f1:bf:38:fd:2b:2a:b8:06:98:3c:64:
                    db:0b:51:ab:80:a0:31:d8:29:ab:01:87:8c:3e:65:
                    dc:7c:24:21:0c:db:58:77:d0:3e:7b:0d:fb:07:7d:
                    71:36:52:5c:68:87:70:fb:d7:04:76:5a:ec:3c:10:
                    94:25:31:1f:04:32:06:a5:20:d9:8f:a9:82:69:73:
                    86:99:f2:0d:be:cd:61:c6:ff:31:ab:c3:7a:f4:f7:
                    26:75:0a:28:dc:d7:e8:b7:e7:72:84:91:ad:d8:f6:
                    13:65:ed:08:f1:11:80:36:9b:1e:72:be:2d:94:3e:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:28:33:D3:1C:21:74:6F:D0:C9:A3:B9:D5:5A:24:83:F6:F2:5E:AD
            X509v3 Authority Key Identifier:
                keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:ee:45:1f:98:5b:8a:38:19:1a:8e:41:6c:f2:08:ff:ea:
         5f:a8:0e:11:e1:dc:01:6f:af:d0:fd:d1:54:92:da:a8:3d:fe:
         26:7d:b2:00:d0:ce:bf:c3:d9:8d:29:f6:20:b2:a4:92:15:fd:
         6c:35:d1:f6:dd:a0:ee:57:16:7e:a4:e7:dd:9c:63:f3:fb:a8:
         7b:d9:ab:89:a9:ae:b2:2c:6d:cc:b9:f7:81:aa:e6:51:6a:95:
         f4:fb:0a:dd:ac:29:b6:f2:fd:f2:4e:4a:5e:19:3a:7d:3b:f1:
         8d:03:10:be:d8:09:ef:87:9f:f8:5c:83:e3:43:d0:3a:37:d3:
         56:46:32:58:c5:23:24:73:da:48:0c:ed:72:35:85:17:ec:0a:
         ed:c1:48:e4:66:e8:80:05:a5:e5:18:f9:b1:5d:4f:48:db:71:
         9f:75:6a:1d:be:1f:dc:c4:69:6e:d6:28:7c:8e:f8:ba:6b:f7:
         ed:59:33:69:5e:8f:9e:ca:b1:c1:31:d1:c2:89:ca:c9:68:99:
         d8:6e:41:4a:aa:0e:93:38:e7:ae:69:8b:6d:53:10:b8:95:f9:
         a1:32:aa:c3:08:1e:0a:3d:0b:70:5b:1c:bb:9b:1a:84:bb:67:
         71:67:91:62:42:15:80:11:bb:9a:ac:33:56:8c:00:cf:bb:ae:
         7c:13:c8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tedDeq2Ud0R08Jfdq43rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNWI0NjNiMTdhMjVlYjY4ZGVhYjc5Y2IwZjk4OWVmZDdl
NDhhMTUwHhcNMjYwNjEzMDIwMDUyWhcNMjYwNjE0MDIwMDUyWjAzMTEwLwYDVQQD
EyhlNTI4MzNkMzFjMjE3NDZmZDBjOWEzYjlkNTVhMjQ4M2Y2ZjI1ZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFBsV4b6+7j+cDSQgakKreXflqKo
xXVwrSCvkaCk2IDmTXmsrbd+9uJ07OBiwgAMbpP6U81Vn7D6fHyJjlATtFCkawBF
65qRfJQCMfMT1WPEzdZV5vXfhF0OYaEYbAdhybddCHRG+zb4YfGgkS5Ods8gAWiI
KEEnqj2kzFQJbYnsdyQ2xDJX8s/I8b84/SsquAaYPGTbC1GrgKAx2CmrAYeMPmXc
fCQhDNtYd9A+ew37B31xNlJcaIdw+9cEdlrsPBCUJTEfBDIGpSDZj6mCaXOGmfIN
vs1hxv8xq8N69PcmdQoo3Nfot+dyhJGt2PYTZe0I8RGANpsecr4tlD7WUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUoM9McIXRv0MmjudVaJIP28l6tMB8GA1UdIwQY
MBaAFKpbRjsXol62jeq3nLD5ie/X5IoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmIt
YzdlNzExNWY0YTJlLzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmItYzdlNzExNWY0YTJl
LzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxzuRR+Y
W4o4GRqOQWzyCP/qX6gOEeHcAW+v0P3RVJLaqD3+Jn2yANDOv8PZjSn2ILKkkhX9
bDXR9t2g7lcWfqTn3Zxj8/uoe9mriamusixtzLn3garmUWqV9PsK3awptvL98k5K
Xhk6fTvxjQMQvtgJ74ef+FyD40PQOjfTVkYyWMUjJHPaSAztcjWFF+wK7cFI5Gbo
gAWl5Rj5sV1PSNtxn3VqHb4f3MRpbtYofI74umv37VkzaV6PnsqxwTHRwonKyWiZ
2G5BSqoOkzjnrmmLbVMQuJX5oTKqwwgeCj0LcFscu5sahLtncWeRYkIVgBG7mqwz
VowAz7uufBPIMw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:05 2026 by rpki-client