Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File:                     qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier:          pZCxeIleGpkLFXNq20rj5IXcd/Wz/rkKqUD7ySWJxLo=
Subject key identifier:   24:4F:4E:B7:B6:37:5B:2B:95:A4:47:C5:9F:AF:BF:86:47:B1:C3:BB
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer:       /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial:       019EC300A4888119A09E81856DD68C1167AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number:          18C3
Signing time:             Sat 13 Jun 2026 22:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:59 +0000
Files and hashes:         1: BvtEp7ZykJYdaMqo7blsUuKtvPY.roa (hash: JWrGFKwI8ZmYJkc5AseOHeCw/Nb3xRt6/+xGW3jCg44=)
                          2: d9IYgCb4O0zZISXP4tK4QuK4cvs.roa (hash: jBG8EC6qVRrjvDS0o4yvkb3drCofFVHmM9LgSbzRM0s=)
                          3: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: ARuoD92GAU0ov4hhZHWPIIfeCSjE/7zhL5WtvD7gFGI=)
                          4: zKQ09Wpk_sKjI1YhqBd22SglJPI.roa (hash: sGEPj5oiG+Z1hsWttL/M7GZNmLLDhgxlhH4HT0fE8Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:a4:88:81:19:a0:9e:81:85:6d:d6:8c:11:67:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
        Validity
            Not Before: Jun 13 22:00:59 2026 GMT
            Not After : Jun 14 22:00:59 2026 GMT
        Subject: CN=244f4eb7b6375b2b95a447c59fafbf8647b1c3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:e2:a5:5b:08:a6:83:3f:7e:bf:64:99:49:
                    38:7c:ab:37:8a:1f:81:b9:7b:ac:00:4c:29:39:2a:
                    35:cc:99:a2:cb:23:c2:11:c0:06:28:a6:20:8f:62:
                    41:64:be:9f:c8:38:63:ca:2f:80:fb:5f:18:b4:1d:
                    f5:af:1a:11:70:98:6c:08:1c:1f:87:5f:6f:fc:3e:
                    6c:ef:c0:e4:b7:fb:f7:ad:b9:5b:5d:a5:81:8f:34:
                    f7:d6:2b:b0:fc:cc:91:a5:07:73:a6:ea:bf:9f:47:
                    f5:cd:b3:2f:d2:05:dd:90:13:d4:6a:c2:fc:57:14:
                    71:3a:7e:ee:99:11:c7:db:1b:cc:34:bd:d4:24:eb:
                    12:cd:42:21:2c:e3:02:e6:c2:46:53:1c:d7:ab:db:
                    c6:19:0a:93:c3:7e:9e:8f:e7:95:44:ef:24:bb:25:
                    72:11:54:06:fb:f2:12:69:39:5d:21:bc:ae:b2:bc:
                    2a:dc:f5:45:dc:46:c2:8a:91:6d:89:fe:b9:bf:05:
                    6e:c5:a1:71:5c:27:6b:ae:5b:77:f7:cc:f7:79:27:
                    a1:27:24:a5:53:7b:8b:6c:41:93:21:d3:19:11:9c:
                    ff:b8:ec:0e:75:6a:89:7e:ca:fb:41:c5:f4:22:7e:
                    58:5e:9e:81:9b:81:10:66:a2:4f:bd:dc:fd:a6:2e:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4F:4E:B7:B6:37:5B:2B:95:A4:47:C5:9F:AF:BF:86:47:B1:C3:BB
            X509v3 Authority Key Identifier:
                keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:fe:61:1c:85:50:86:52:73:d4:09:3b:28:95:16:23:67:
         42:60:64:f7:d0:00:1d:8a:b7:cd:ab:ad:4a:76:91:8c:89:67:
         74:db:f4:4d:06:95:c1:68:ed:1b:a2:66:6d:4d:25:7d:c2:fd:
         70:88:6b:6f:6d:98:ce:16:f3:ab:7d:0c:23:dc:23:3b:ca:07:
         d8:87:e1:01:49:07:3d:42:24:eb:3d:76:27:70:ea:69:fc:c7:
         2d:18:19:81:b5:c4:b0:26:d0:a8:9a:9f:e1:9f:b8:d2:7f:90:
         01:ae:1f:07:72:38:ce:e2:1f:84:6e:7d:0c:65:d3:7a:09:2c:
         95:cf:47:21:90:bd:74:1f:c3:07:a9:d5:ec:c7:2b:61:3a:96:
         e1:2d:ad:70:40:82:b4:66:97:67:0a:09:2e:24:c5:aa:a8:26:
         06:02:14:fb:09:90:5e:c3:85:a5:35:f7:bf:24:d6:ef:b1:e6:
         9c:2f:6f:27:fd:5c:cb:15:cf:19:44:82:99:1a:5f:fd:00:d5:
         ab:d7:c9:5e:2d:14:d0:f9:01:23:a4:60:49:fa:74:f9:28:94:
         39:cf:e8:36:f2:23:1f:b1:a5:ff:ca:a9:49:0e:82:04:09:92:
         40:5b:de:3d:76:6f:3a:1e:72:8e:b6:9c:86:8f:63:03:a8:eb:
         d3:b7:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:44 2026 by rpki-client