Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File:                     qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier:          I26jnAcqnSdyw1alGrW2CzE0G1fg0vFsHxu8YlDYM7Q=
Subject key identifier:   43:EC:F5:3E:81:00:6B:7E:9E:90:2B:6B:58:AB:A2:9A:56:40:F8:8D
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer:       /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial:       019EC33750EE1AD1420B97E83848605C0FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number:          16A7
Signing time:             Sat 13 Jun 2026 23:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:42 +0000
Files and hashes:         1: YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa (hash: qv62jghVn/xc1zYuKekCyiDZQVZ2Kui3yZ/JmsGwwSk=)
                          2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: ZKZcj5c2dsbiSf12jFbHejpXO0EVIHQnIek+LU6q5VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:50:ee:1a:d1:42:0b:97:e8:38:48:60:5c:0f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
        Validity
            Not Before: Jun 13 23:00:42 2026 GMT
            Not After : Jun 14 23:00:42 2026 GMT
        Subject: CN=43ecf53e81006b7e9e902b6b58aba29a5640f88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:ff:cb:9c:37:4b:48:3b:a6:5b:d3:dd:da:
                    3b:d6:20:55:4e:f1:8a:c2:3a:7b:f9:af:8d:96:c4:
                    b4:5f:47:e5:7a:eb:de:4c:fa:19:a3:30:71:2e:f1:
                    4b:24:84:53:83:58:c9:94:20:04:03:02:fa:a5:4b:
                    6a:1b:d6:01:1c:b4:e3:06:dd:eb:26:55:1c:0a:24:
                    7a:e8:68:d6:e9:d2:a7:a6:3f:de:04:ae:1c:99:34:
                    59:b4:57:7b:44:1e:fb:ea:52:81:15:ae:e3:14:53:
                    35:88:00:4d:79:f6:b6:3e:ab:40:95:8a:22:8c:2d:
                    55:52:5c:14:d7:73:d3:e2:bf:ce:f1:00:30:b4:8a:
                    eb:80:71:12:98:ca:8b:05:f3:4b:3e:ee:38:98:9b:
                    e1:02:19:c3:f7:ad:ee:ec:92:6d:c8:df:64:1a:21:
                    9e:1b:a8:ac:f1:20:60:40:8d:2f:32:22:37:ae:18:
                    40:66:91:4d:17:bd:5a:6e:42:35:a3:8b:8c:a2:3a:
                    41:4b:8a:34:e4:61:33:e7:8c:b4:59:e1:5e:ca:d2:
                    37:02:c9:b8:46:af:59:3c:3d:e5:6b:8e:25:db:f1:
                    6e:a2:62:66:a6:45:e5:25:68:75:e7:4b:8f:1f:4a:
                    f5:ba:24:41:5c:c7:5c:01:b8:be:4a:1c:59:7a:a8:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:F5:3E:81:00:6B:7E:9E:90:2B:6B:58:AB:A2:9A:56:40:F8:8D
            X509v3 Authority Key Identifier:
                keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:0c:ea:95:17:ef:b9:70:44:cd:65:05:c4:26:f0:ff:04:
         ac:14:c7:ff:e9:a7:35:84:64:66:4c:5a:00:b7:d3:ff:27:53:
         2f:26:24:30:49:e6:00:b8:b3:cf:a9:16:80:7e:e8:91:8f:55:
         86:6f:c0:56:f6:d5:db:2e:ca:f0:6e:49:27:ef:bb:a9:74:5f:
         c8:ff:36:00:57:01:2c:bc:31:13:e5:89:61:75:5a:28:ca:90:
         b8:d2:9c:3b:34:fe:e5:1f:f9:58:88:11:8e:80:89:09:fb:1a:
         69:93:45:e0:4e:9f:26:a0:dd:87:4d:50:f2:3f:01:9f:ae:9e:
         f5:bd:4f:c7:d4:f8:e9:39:f8:b3:8d:9a:b3:b9:ad:ea:3c:e9:
         88:ff:f3:3f:de:48:80:3f:21:d0:96:eb:58:e7:2e:13:63:c2:
         79:55:69:41:4a:37:b6:1e:1f:ec:f2:da:2d:52:2f:48:60:8c:
         d2:90:d8:1d:10:78:88:52:27:5a:dc:9d:0d:0e:06:5c:77:a5:
         34:95:04:10:40:ef:2b:37:02:7c:2d:6f:7d:be:0e:23:5a:0b:
         78:61:41:57:0e:7b:b3:1a:1c:6e:93:db:bc:88:e8:4e:c4:4e:
         7a:7e:42:ca:6f:6e:57:9e:d0:af:8d:9e:fc:f2:b1:20:74:a4:
         2c:04:47:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:05 2026 by rpki-client