Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File:                     QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier:          jZ7qmN4ZAor0oDxD40w3zFynmnKanmCsEqoGXgdhr6I=
Subject key identifier:   EF:1E:9B:D5:99:30:A8:17:38:4E:D1:B7:83:5E:0D:81:27:22:F3:C6
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer:       /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial:       019EC336F17D9A637A4CC130819635D1DF75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number:          0473
Signing time:             Sat 13 Jun 2026 23:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:18 +0000
Files and hashes:         1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: 1OWEsjLvBvFBTObLOg0D7dhI+Ckm22P++y90miT5tAo=)
                          2: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (hash: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:36:f1:7d:9a:63:7a:4c:c1:30:81:96:35:d1:df:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
        Validity
            Not Before: Jun 13 23:00:18 2026 GMT
            Not After : Jun 14 23:00:18 2026 GMT
        Subject: CN=ef1e9bd59930a817384ed1b7835e0d812722f3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6b:a6:dc:ad:bb:02:1b:6c:be:1f:84:e7:92:
                    1f:ca:79:47:49:2f:02:da:5d:02:68:cf:44:e0:ba:
                    a3:f7:d6:00:e0:03:f2:f6:14:1a:f5:96:94:0e:1b:
                    6c:ea:5d:33:58:b3:19:43:3f:50:41:08:14:4c:b5:
                    20:9e:42:ba:2c:0a:0c:f2:a3:8f:24:18:77:2c:73:
                    b4:f2:db:2a:67:04:c1:98:e0:fc:2f:ef:32:17:05:
                    c2:cd:e7:15:b2:1c:30:eb:57:c1:cf:e9:c9:ea:e5:
                    0e:66:7c:f4:4d:9a:a8:da:8c:83:83:65:b5:17:4c:
                    35:65:aa:d2:8d:14:46:e8:66:7c:2c:02:bf:6e:a1:
                    17:d9:7f:65:ab:8e:77:8b:79:32:21:ea:2b:cf:64:
                    ad:c9:8b:b3:3a:c1:64:98:e9:fd:17:15:d7:7b:51:
                    66:54:b5:ed:98:c5:16:ec:03:03:f7:0e:82:e2:b6:
                    6a:9a:2f:2a:0a:fb:aa:cc:3d:f2:70:8e:45:2d:8f:
                    63:94:db:5f:c5:a5:3b:34:8e:26:26:9c:1a:be:4e:
                    f5:a0:bb:c7:bb:30:38:2e:b0:af:d8:12:72:a6:1b:
                    71:0a:5c:63:f4:7a:0d:6d:81:23:5a:9a:ed:64:c7:
                    7a:65:a4:28:23:0d:7a:62:af:2f:8b:0c:13:42:18:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1E:9B:D5:99:30:A8:17:38:4E:D1:B7:83:5E:0D:81:27:22:F3:C6
            X509v3 Authority Key Identifier:
                keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f2:77:2d:e0:92:d7:da:47:ec:69:5b:9e:62:58:42:2e:b0:
         b1:4c:7b:1e:31:bb:75:33:61:bd:23:f3:1e:48:d8:96:1e:9e:
         87:e3:77:e4:4c:c7:3e:7a:fd:fa:47:85:1d:dc:78:b4:b3:a7:
         fc:1b:9a:60:2a:62:6b:5e:f3:0b:e5:68:d4:9f:8d:83:6b:d7:
         54:a1:d4:55:57:4d:10:c3:ce:32:5b:ea:e6:b4:fd:5c:5a:a4:
         18:0b:d8:6c:9a:9a:79:6c:eb:0e:26:bb:7c:75:65:c4:fa:a9:
         41:d4:fb:6a:d8:a4:5f:c7:dc:2d:e8:5b:e4:34:e6:6b:08:ca:
         26:50:64:1b:b8:9a:97:d5:99:b1:c3:2c:4d:ec:31:59:8e:5d:
         dd:bb:51:7f:ed:8f:ee:cd:c5:63:58:31:da:0f:d5:82:8e:97:
         3f:f4:0e:1b:c6:85:31:fd:6c:35:dc:24:a2:08:e5:29:fd:41:
         cf:52:7d:c1:6f:ca:c9:6c:92:95:ee:3b:cf:aa:98:d3:b4:ba:
         ef:26:39:05:87:7c:a5:7c:70:ec:d5:12:ec:2a:82:56:2f:6c:
         14:ef:f2:b3:30:2c:e5:3f:94:3b:14:bc:bd:84:07:20:10:7c:
         44:ef:65:f2:36:31:78:4f:2b:af:6a:a0:c5:d3:48:32:52:18:
         6f:a0:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:29:52 2026 by rpki-client