Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
File:                     QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft (raw, json)
Hash identifier:          Q7B4AA/auw9eGEzCyz8h6Ajk8Zk9fSO+dSUPD1XUmqU=
Subject key identifier:   40:45:29:D3:F4:15:38:9F:BB:34:F1:48:BC:B8:44:FD:A3:14:2C:A6
Authority key identifier: 40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
Certificate issuer:       /CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Certificate serial:       019EC17FEB34595CD7E1C3207F6441B63860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
Manifest number:          B0
Signing time:             Sat 13 Jun 2026 15:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:46 +0000
Files and hashes:         1: QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl (hash: H1LW8KQLXowrKdgxYTP2JZf8Ffx9U4f5KtJ6LWdJDwo=)
                          2: bc_rDqdFLWG9EqOE3XpdCbzci7A.roa (hash: QX2e7Tpj37ujdBJf37YYj5ilDYHQsrFIORHYzhmx2Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:eb:34:59:5c:d7:e1:c3:20:7f:64:41:b6:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
        Validity
            Not Before: Jun 13 15:00:46 2026 GMT
            Not After : Jun 14 15:00:46 2026 GMT
        Subject: CN=404529d3f415389fbb34f148bcb844fda3142ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:35:69:67:83:33:f5:f0:fe:76:74:69:0b:
                    f9:7a:e5:3d:b0:49:4f:68:83:c6:2e:6c:c1:d9:10:
                    e4:7a:29:8e:8f:17:38:87:39:4e:45:1a:e6:72:fa:
                    5a:12:7d:d3:2b:04:86:bb:b8:25:1b:16:d1:15:42:
                    e2:f4:ac:d7:57:15:79:e3:36:4a:7a:e2:ee:be:cf:
                    9d:80:37:c7:f0:9c:4b:79:df:f2:f6:23:85:18:da:
                    90:5b:47:ed:9f:f5:05:3f:8e:6c:93:b2:9e:d9:b7:
                    99:c0:54:96:14:aa:c7:56:ae:97:2d:c5:e2:90:a9:
                    72:ce:f2:f3:5e:7e:8e:50:be:7f:d1:a4:00:89:eb:
                    95:17:1e:68:36:07:9e:0d:47:a2:4a:80:11:46:4a:
                    69:41:4f:1b:87:32:0a:45:c4:63:ed:3a:2d:24:0f:
                    1a:97:d2:28:af:ed:00:c7:01:92:ef:15:3a:d4:01:
                    00:b3:d0:af:27:6b:80:8b:c9:e1:20:a4:b6:e2:dd:
                    fe:ad:8c:8d:99:88:6c:34:38:59:ef:36:e5:d4:c1:
                    c0:28:33:e4:a3:f0:42:63:82:8c:49:c6:83:6c:0a:
                    bd:f2:6d:f1:6d:81:65:ca:85:46:80:b3:7a:43:51:
                    6e:a6:9f:93:52:87:8d:45:de:c0:b6:49:a1:8f:85:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:45:29:D3:F4:15:38:9F:BB:34:F1:48:BC:B8:44:FD:A3:14:2C:A6
            X509v3 Authority Key Identifier:
                keyid:40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:9a:e2:81:8e:5e:43:cb:57:8d:17:24:f2:99:b6:15:fb:
         ea:df:5a:f2:f9:53:da:e9:1c:fc:13:95:7e:83:bd:50:d3:61:
         b8:91:c0:b1:44:f1:3b:2b:b9:a9:c9:51:3c:3e:e5:91:72:38:
         26:99:f4:76:c3:1d:83:43:4d:a5:50:87:aa:cd:52:1b:76:84:
         d9:28:e9:3b:bc:bf:18:f2:b8:de:7d:bf:fc:35:6b:b8:65:2c:
         70:61:27:e6:08:8a:bc:f9:62:e5:01:48:02:38:b2:c5:b8:c7:
         3f:d5:08:be:bb:07:6b:92:66:51:5c:48:10:d2:57:0d:3d:c5:
         a7:3f:ef:1f:7e:72:75:cb:89:83:08:d0:76:ee:18:fd:e1:8b:
         2f:b0:5b:03:c5:f7:09:f2:dc:3d:95:c6:cf:57:d6:58:87:d0:
         a1:46:10:45:71:52:03:ed:80:8b:af:ee:9b:cf:1e:f6:ff:af:
         9c:cf:c1:ca:be:c9:99:23:de:73:23:ce:f1:fd:9d:52:d2:d8:
         bb:3a:f8:3f:6d:f4:3b:69:6e:6b:9a:2e:fa:3a:5b:84:96:ed:
         e5:63:f4:55:ca:7c:81:8f:da:47:eb:e5:81:7a:23:71:b8:47:
         bb:0b:50:73:4e:30:13:f5:c5:da:9b:85:67:b4:df:f2:89:23:
         4b:98:2f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:21:36 2026 by rpki-client