Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File:                     QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier:          2krNUfDqNJMzmoJD/9x8fBmEEzFgFR1BlMXF4L5PWt0=
Subject key identifier:   09:CD:3A:B2:B1:CB:8A:7C:41:99:41:7B:54:EB:74:B7:1E:5B:0B:9F
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer:       /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial:       019EC3DC125631A8D158B0160A9E56379631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number:          0EF3
Signing time:             Sun 14 Jun 2026 02:00:39 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:39 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:39 +0000
Files and hashes:         1: CPZYmz36PQpyihuAGSbsR9CzzRI.roa (hash: xdvv20wFMnE4vJfI3CDcdQ/mfCZuTze5H+JFti17pOE=)
                          2: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: LfO1+BUMSCepe7KwZMtDvYyVvEvHhZeOIgdMSqCpuNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:12:56:31:a8:d1:58:b0:16:0a:9e:56:37:96:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
        Validity
            Not Before: Jun 14 02:00:39 2026 GMT
            Not After : Jun 15 02:00:39 2026 GMT
        Subject: CN=09cd3ab2b1cb8a7c4199417b54eb74b71e5b0b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:c7:ed:2c:04:28:19:04:31:5c:60:b5:65:
                    12:ee:fc:d3:20:8c:30:a1:fa:0f:2e:1d:15:76:01:
                    f0:10:90:e4:86:13:99:ef:ec:72:8e:67:2a:d2:88:
                    38:8c:48:6e:5b:ca:81:b0:f5:fa:11:50:45:99:67:
                    b5:42:23:32:ac:d1:73:e4:66:db:4c:99:42:06:95:
                    c6:32:29:a5:3a:81:da:b6:5a:0d:db:d4:43:f2:03:
                    e5:b5:78:bc:ca:eb:8e:68:b0:73:78:b1:82:a1:82:
                    4a:90:7a:9e:b0:6d:a5:83:19:f6:53:56:d8:64:7a:
                    33:e0:21:03:72:6b:7b:2b:9f:06:5f:31:f7:c9:24:
                    12:81:47:48:c5:61:1c:e1:07:69:c0:6a:93:18:98:
                    ea:cc:af:80:3d:e6:c2:e3:09:68:62:3d:a8:fb:9f:
                    20:97:12:a3:a3:5b:1b:1a:e4:ac:66:a5:48:56:ea:
                    16:0c:1e:d9:ed:aa:e1:89:bd:99:ac:3f:1a:ff:df:
                    49:79:b9:f7:34:7d:4c:3d:8f:1d:94:99:6f:66:a7:
                    fa:6c:3f:b6:aa:09:49:27:c7:de:b6:c3:9e:4e:7d:
                    13:80:af:25:03:e0:fa:72:c0:6a:04:b3:c6:98:ff:
                    6a:d6:16:df:98:ec:82:02:ac:4b:39:d8:5a:d5:0b:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CD:3A:B2:B1:CB:8A:7C:41:99:41:7B:54:EB:74:B7:1E:5B:0B:9F
            X509v3 Authority Key Identifier:
                keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0f:21:af:84:f8:c5:63:f6:01:f6:13:20:39:de:33:12:d0:
         80:15:a0:30:ad:a9:96:07:1b:f4:8f:01:db:7c:c8:2e:99:48:
         c4:1f:8c:21:fb:a4:04:a0:5b:77:15:f9:cf:04:f4:4e:20:99:
         8a:98:ea:a2:f0:14:1d:a4:69:cd:30:28:bb:2e:e6:ee:86:70:
         93:5c:ab:f1:10:2f:e8:73:c4:7f:b5:08:f6:71:6a:66:05:18:
         68:6a:21:3e:66:27:4d:f2:95:d1:fe:cc:e6:b6:4f:4c:d1:e6:
         bd:e8:f0:91:88:b8:65:c3:ab:4c:13:13:11:4e:b0:79:72:02:
         93:ad:f3:5d:2e:14:70:64:8d:1a:89:e9:b5:68:53:c1:06:cd:
         5a:02:9a:1b:13:56:67:2c:61:c3:7d:21:f3:51:c4:8c:48:4d:
         11:22:25:c0:6d:d2:06:58:e8:0a:8c:0d:64:ed:9a:68:ac:d1:
         e0:fa:86:22:f4:1f:8c:27:36:33:b8:05:07:a9:27:59:d7:74:
         3d:6b:08:83:55:8c:01:b2:e5:ce:ab:22:41:d5:9e:3e:8f:15:
         55:a2:6c:2f:f1:d8:87:81:60:82:f6:b3:8a:85:b8:7e:8f:09:
         bc:ea:22:73:15:42:4d:8a:a6:0d:3a:83:91:55:8b:17:12:9b:
         8a:41:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:48 2026 by rpki-client