Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File:                     QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier:          KPpgL3IZvpGW2iNOKH+aBmqCVRjziG3DFta/FAw952k=
Subject key identifier:   3A:22:AF:FE:78:5A:F6:AC:35:59:80:F7:3D:F0:45:B3:C1:A0:17:2F
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer:       /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial:       019EC17FBDCC0ED7E6820ECFD8E179ED7C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number:          18AE
Signing time:             Sat 13 Jun 2026 15:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:34 +0000
Files and hashes:         1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=)
                          2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: 9Yp4KSUK+jMtj0iO94Cxm9gW1DGCFcBo9/mC8AjTFa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:bd:cc:0e:d7:e6:82:0e:cf:d8:e1:79:ed:7c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
        Validity
            Not Before: Jun 13 15:00:34 2026 GMT
            Not After : Jun 14 15:00:34 2026 GMT
        Subject: CN=3a22affe785af6ac355980f73df045b3c1a0172f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:44:3e:72:d8:68:36:8c:ee:5d:d0:14:63:
                    dd:fa:4d:da:3a:87:67:2e:be:8d:01:5c:ee:67:aa:
                    e0:0c:ca:cb:55:d9:f1:ec:15:22:e2:33:ec:6d:f5:
                    b1:42:eb:ff:ee:c9:63:fb:d0:22:c5:6d:47:07:c0:
                    11:30:36:1b:ba:48:d4:0f:dc:47:c3:04:e1:99:26:
                    2f:f8:50:39:e6:04:6c:a5:64:0e:bb:68:be:65:19:
                    8a:01:3a:86:e9:78:19:a4:28:bb:69:a9:bb:b1:c1:
                    ea:2c:6f:02:89:03:0c:87:fb:78:85:68:38:40:d0:
                    e7:2b:0d:7e:c7:d3:55:24:e2:d7:09:4c:49:9a:d8:
                    b6:fd:e5:93:7d:29:a0:ef:a0:18:9e:d6:e4:fb:5c:
                    79:34:7f:5c:ef:73:bb:59:f6:ed:49:c4:36:6c:a3:
                    fc:43:e5:ae:ea:22:54:06:37:76:db:68:a3:3c:46:
                    ce:de:8d:60:f5:f8:f2:15:62:b8:f4:ae:96:4a:40:
                    a3:7d:ef:68:97:52:5e:7f:93:9e:e5:29:e7:f2:94:
                    05:8f:0c:25:c2:03:51:26:41:1b:41:af:29:fc:50:
                    0c:ef:89:b4:a2:27:0f:75:6a:e6:2c:4b:8a:ac:3a:
                    94:69:1a:3d:df:72:fa:6f:d6:a4:58:92:f2:68:2f:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:22:AF:FE:78:5A:F6:AC:35:59:80:F7:3D:F0:45:B3:C1:A0:17:2F
            X509v3 Authority Key Identifier:
                keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d6:cb:39:dc:b1:d5:09:65:c3:b5:79:b6:08:d2:bd:2b:3b:
         17:b4:b0:7b:a0:8b:88:36:37:63:5b:24:88:cd:99:73:e0:55:
         63:5c:d8:35:0e:5b:c3:06:de:0f:c5:73:9c:8d:9c:57:d8:15:
         0c:fc:ee:dd:6f:35:39:ab:dc:79:db:4c:20:33:ad:aa:51:51:
         2c:75:a0:51:3a:e3:28:ea:8b:14:5b:5c:11:81:4b:50:3c:f7:
         e8:7b:68:c7:79:d4:89:dc:ab:aa:2a:b8:0b:52:34:24:36:8d:
         55:d1:49:d6:39:2a:a3:e0:62:c3:33:99:d9:9c:fa:94:1d:63:
         c2:07:29:57:7e:65:4e:8a:f7:40:09:ab:36:3e:1b:7c:4e:f9:
         38:3a:c8:08:f6:5b:74:22:a9:e5:cb:15:95:4c:ae:b6:71:99:
         a5:96:c4:a8:30:04:fa:32:44:4a:23:23:83:5f:7b:4e:2f:89:
         a0:9a:68:3b:02:d1:1d:4b:02:06:c9:8f:48:99:f0:b1:b2:d1:
         fa:12:0b:2c:7e:35:e3:b4:89:89:ab:d8:7f:e0:a0:d2:f1:36:
         92:d8:b1:6a:8f:f4:7f:e9:f6:63:c9:7a:32:c4:13:c4:9c:2d:
         43:8e:ca:e0:95:88:51:b9:b8:ae:da:7e:86:c4:ce:8a:79:69:
         86:0a:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:11:40 2026 by rpki-client