Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File:                     QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier:          bpR1K4vr+Bex+8TMJ+EnyS8JOJdM2XJ/dXIOi+DEM4w=
Subject key identifier:   A8:A2:9E:41:A1:78:1A:9B:29:97:3C:7C:B9:DC:92:11:2A:51:68:99
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer:       /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial:       019EC2CA03E3ED76E5C75CE9815641AD8AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 21:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:19 +0000
Files and hashes:         1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: Y6oJXX8DCaQicthpnd/LwY5Haj8ap1dOalAmntStqo4=)
                          2: heO1dPv16lNqNoaUzHYmWrwdcrs.roa (hash: Pmdo0ju6M8iagRWSreMlT5nEuBLF3DYNOFUHFOJkLRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:03:e3:ed:76:e5:c7:5c:e9:81:56:41:ad:8a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
        Validity
            Not Before: Jun 13 21:01:19 2026 GMT
            Not After : Jun 14 21:01:19 2026 GMT
        Subject: CN=a8a29e41a1781a9b29973c7cb9dc92112a516899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:b6:c0:a6:31:67:48:3e:12:81:e4:23:e5:
                    e0:4f:29:aa:d4:1e:f4:ee:0d:48:e4:5c:29:71:80:
                    f1:0e:ff:30:d3:cb:5b:28:bd:60:dd:b8:b5:f7:e6:
                    a3:89:25:8f:ca:39:97:e1:3f:89:cf:cf:62:8b:82:
                    ca:dd:48:b1:b5:2a:79:33:77:c9:6e:85:29:2a:b1:
                    eb:8e:17:ce:5e:40:13:a1:99:3a:5c:04:bb:89:84:
                    3d:ec:ee:15:08:1c:93:a4:ac:06:3e:d0:08:9b:aa:
                    ba:68:59:44:29:73:f5:c8:20:dc:d4:82:fa:f3:3d:
                    0b:d8:4c:52:06:93:80:5b:bc:88:f2:b8:7b:ca:c7:
                    e3:ae:8f:5d:20:c6:dc:1a:4d:27:7f:5e:b5:53:8b:
                    77:0c:89:26:ab:0e:53:5e:54:bb:b9:63:0e:09:be:
                    c4:fc:10:93:35:4c:28:ac:34:1b:1e:eb:af:f4:d0:
                    3e:8f:59:a0:48:03:87:6d:a1:29:3e:42:1d:8e:ba:
                    66:6d:4a:69:e3:2d:4b:ea:5c:f0:3b:cb:4b:0e:47:
                    c3:41:3b:e0:51:2e:42:cd:70:bb:e7:8e:e5:b0:9d:
                    8f:1b:05:b4:54:e3:56:be:5f:d6:a5:ca:27:61:f6:
                    81:cc:89:22:5b:d4:e2:ec:5d:5f:06:04:87:6d:b9:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A2:9E:41:A1:78:1A:9B:29:97:3C:7C:B9:DC:92:11:2A:51:68:99
            X509v3 Authority Key Identifier:
                keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:13:0a:1b:a6:ea:bf:d4:7a:78:bc:d6:39:1d:9a:71:86:5f:
         a6:4c:1f:87:53:8c:8b:5a:80:4b:2a:ee:5d:c9:18:2a:32:fc:
         0f:75:d2:bb:69:b1:10:12:2e:56:b2:2c:cc:03:80:81:32:32:
         3f:f9:c3:06:8a:12:c2:ee:1d:7a:37:e7:90:ec:52:90:92:d5:
         1b:66:5e:43:82:3f:56:6d:a0:b4:30:5e:0d:e6:68:d0:32:2c:
         5b:fd:37:82:f3:3f:e6:34:fb:5b:fd:7a:1f:e5:6e:9e:f2:73:
         cd:2f:ed:40:b4:f2:89:c5:7d:5d:3c:5c:b6:cd:47:e9:84:dd:
         d7:58:01:27:48:5d:dc:af:43:72:35:66:fa:5c:98:33:2e:28:
         c9:73:62:01:4d:d0:aa:dc:12:25:a7:3c:d2:76:0a:68:22:88:
         54:9c:af:76:5a:e1:58:d3:1d:d6:db:32:56:30:a7:57:ae:88:
         f0:5b:f8:71:ae:b8:c8:12:5f:a9:60:ca:37:80:ea:1b:63:bd:
         18:6c:45:ff:8f:35:07:ad:af:09:99:36:d9:15:e6:ec:fb:91:
         f0:cb:1e:e1:0b:78:c3:f8:6d:84:b4:dd:32:2d:ae:4c:ea:0c:
         bc:0c:f0:29:1b:50:33:4e:0b:f5:22:b4:6a:00:92:30:d6:42:
         03:29:ce:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CygPj7Xblx1zpgVZBrYrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0
MjFhNzIwHhcNMjYwNjEzMjEwMTE5WhcNMjYwNjE0MjEwMTE5WjAzMTEwLwYDVQQD
EyhhOGEyOWU0MWExNzgxYTliMjk5NzNjN2NiOWRjOTIxMTJhNTE2ODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunS2wKYxZ0g+EoHkI+XgTymq1B70
7g1I5FwpcYDxDv8w08tbKL1g3bi19+ajiSWPyjmX4T+Jz89ii4LK3UixtSp5M3fJ
boUpKrHrjhfOXkAToZk6XAS7iYQ97O4VCByTpKwGPtAIm6q6aFlEKXP1yCDc1IL6
8z0L2ExSBpOAW7yI8rh7ysfjro9dIMbcGk0nf161U4t3DIkmqw5TXlS7uWMOCb7E
/BCTNUworDQbHuuv9NA+j1mgSAOHbaEpPkIdjrpmbUpp4y1L6lzwO8tLDkfDQTvg
US5CzXC7547lsJ2PGwW0VONWvl/WpconYfaBzIkiW9Ti7F1fBgSHbbnpowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiinkGheBqbKZc8fLnckhEqUWiZMB8GA1UdIwQY
MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt
YmI0MzNiYTQ3NmYyLzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy
LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihMKG6bq
v9R6eLzWOR2acYZfpkwfh1OMi1qASyruXckYKjL8D3XSu2mxEBIuVrIszAOAgTIy
P/nDBooSwu4dejfnkOxSkJLVG2ZeQ4I/Vm2gtDBeDeZo0DIsW/03gvM/5jT7W/16
H+VunvJzzS/tQLTyicV9XTxcts1H6YTd11gBJ0hd3K9DcjVm+lyYMy4oyXNiAU3Q
qtwSJac80nYKaCKIVJyvdlrhWNMd1tsyVjCnV66I8Fv4ca64yBJfqWDKN4DqG2O9
GGxF/481B62vCZk22RXm7PuR8Mse4Qt4w/hthLTdMi2uTOoMvAzwKRtQM04L9SK0
agCSMNZCAynO0A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:35 2026 by rpki-client