Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File:                     qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier:          LPskJqGQligjFWmgc99EMHs9Njkh/8LUCH/btmdOkAM=
Subject key identifier:   47:6E:45:79:72:63:70:CD:BB:5F:4D:F8:E2:DB:B4:40:FF:95:FA:34
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer:       /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial:       019EC1B6DD3936F81F26E9890C6590F8A62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 16:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:47 +0000
Files and hashes:         1: IDJxz5Lf-bhA1wZBvX00WPWc418.roa (hash: jtojvMTm31S/WThDl0+VIPwens+k95gEp5w6ddEUhik=)
                          2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: KjdIVU0VmltI+712lSZjjt4T2A28Tbx5FGSrAa3DczI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:dd:39:36:f8:1f:26:e9:89:0c:65:90:f8:a6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
        Validity
            Not Before: Jun 13 16:00:47 2026 GMT
            Not After : Jun 14 16:00:47 2026 GMT
        Subject: CN=476e4579726370cdbb5f4df8e2dbb440ff95fa34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:c7:75:eb:a8:de:91:b0:b2:67:7c:a9:37:
                    e0:e3:20:3b:4f:44:99:c6:8c:10:10:a3:40:5d:0e:
                    e9:d3:f8:39:f6:97:96:68:f3:18:3d:ca:1b:6e:15:
                    48:83:d3:ee:b4:9a:ae:99:a5:93:97:62:93:e4:b1:
                    7c:6e:c3:2b:70:d7:17:e1:ac:13:fa:83:37:62:1e:
                    82:9e:1c:bb:65:5a:05:fe:e5:d3:12:44:29:aa:dc:
                    b4:0c:1a:2f:4b:e2:d4:9c:44:b9:53:73:00:09:1d:
                    e4:6e:3a:49:e0:3c:3b:40:75:ef:46:fa:44:9a:f9:
                    7c:00:34:d7:54:98:4e:14:10:a5:89:de:b5:7b:28:
                    17:3a:77:36:73:f2:65:59:59:c2:bc:84:b6:7c:b1:
                    d0:43:51:27:ba:7d:b4:15:02:bb:45:2d:f4:b5:01:
                    4c:06:ab:bf:63:4f:33:c6:34:03:f1:4b:88:fc:46:
                    92:fc:aa:c2:92:6e:42:e6:cd:5f:e5:a4:3a:a8:1b:
                    40:73:28:fb:81:1e:4d:c9:74:b5:05:a4:0b:bd:10:
                    a9:7c:9e:98:ff:71:28:5e:4e:f4:f8:eb:69:bb:f7:
                    e4:94:aa:88:90:50:ff:8f:41:4a:cf:53:31:0f:98:
                    82:77:9d:44:bb:eb:f6:a3:ae:de:59:3d:8e:fc:96:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6E:45:79:72:63:70:CD:BB:5F:4D:F8:E2:DB:B4:40:FF:95:FA:34
            X509v3 Authority Key Identifier:
                keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:4d:f9:b6:8b:85:a3:9c:ea:25:05:76:e1:35:7a:5b:67:4b:
         82:2e:4b:34:b0:a4:f4:d5:90:b5:18:15:79:2d:8f:15:71:11:
         0c:73:ca:38:01:d1:88:57:f8:03:5c:22:f1:cb:63:10:bc:12:
         64:34:57:1d:86:89:48:dd:82:79:07:38:28:6a:7f:7d:85:5a:
         bf:49:69:bd:8b:f6:cf:54:af:c1:20:73:c2:a1:d0:b3:47:b2:
         2f:21:85:8d:c9:28:b4:5f:7f:ac:fe:7a:d1:c1:86:15:59:1a:
         3f:02:f6:20:fe:90:51:0f:14:1d:d0:62:e4:2e:0e:04:b5:a3:
         12:3c:76:2d:b6:fc:73:d4:65:e2:86:e2:ed:ef:28:de:63:25:
         15:20:1e:e2:63:86:a7:73:ea:0f:0b:3d:49:41:01:56:60:4b:
         7c:d5:e6:f4:eb:c7:67:f6:3a:b1:04:6a:e9:99:51:77:b6:c2:
         b5:9e:f1:bf:3a:d2:b5:da:73:f2:40:79:b1:4e:ca:1c:8b:70:
         ab:06:87:67:2a:17:70:99:7e:2f:6b:fe:5a:e0:58:00:a5:4c:
         fc:94:bd:76:1b:bb:d5:4e:dd:21:9d:74:fa:de:f4:db:16:db:
         54:1d:7f:c6:8d:d0:30:14:ad:32:8b:06:70:a6:19:91:08:9a:
         1b:d3:58:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:17:09 2026 by rpki-client