Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File:                     0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier:          whaHwXrR6uLAMZeKKw0RCE4mdBhIEra8VIAANmYPx9M=
Subject key identifier:   89:21:59:94:8D:8E:F5:2C:A4:71:8F:18:4E:55:F1:9C:68:41:7C:8E
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer:       /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial:       019EBF91D3F8D5B59A0950413753803EDEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number:          01D4
Signing time:             Sat 13 Jun 2026 06:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 06:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 06:01:05 +0000
Files and hashes:         1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: G8BXEfj1ebvIAy7QBmWhhapBG7t+u1ImGY0tjY8KQ4E=)
                          2: zzoKYo_fgXJoDim9bNYqLDKmOzo.asa (hash: xH4qZGm6oJCJ5MuT1y3sECl7LiD43BHMrg5WAyyOKL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:d3:f8:d5:b5:9a:09:50:41:37:53:80:3e:de:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
        Validity
            Not Before: Jun 13 06:01:05 2026 GMT
            Not After : Jun 14 06:01:05 2026 GMT
        Subject: CN=892159948d8ef52ca4718f184e55f19c68417c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:6a:49:4b:6f:2f:3d:b5:03:3e:da:a7:82:
                    a7:44:4a:b3:55:19:15:49:ea:bc:66:b8:fd:6b:30:
                    36:e8:a8:61:9f:e2:9f:7a:13:f4:c8:32:c2:f6:6c:
                    cb:f5:6b:15:b0:7e:01:91:a6:5c:a8:09:d6:5f:d8:
                    da:06:d5:c7:dd:6f:92:ba:9a:c2:3c:97:07:37:b0:
                    75:24:72:80:2e:c9:91:c6:fe:28:82:54:38:e9:52:
                    cd:37:b9:eb:c9:ef:f0:06:ec:46:6a:82:53:e8:6b:
                    48:27:4c:69:cf:c5:14:78:c9:55:cf:0f:56:14:61:
                    21:02:34:d9:8f:8d:32:24:74:0f:98:45:3a:9a:e0:
                    c9:f4:cc:19:4b:67:3b:85:ca:65:11:fa:b3:79:1f:
                    98:22:3d:40:15:11:05:c8:b3:a5:38:5a:ec:b7:09:
                    17:cd:97:0d:6e:f7:c3:3c:0c:a0:01:1d:88:f1:ee:
                    ee:16:2c:22:98:d9:a2:d4:d2:e3:7a:d9:ee:6e:b2:
                    31:82:b3:5f:21:5c:d0:fe:a1:31:5e:a0:5f:ba:f7:
                    88:52:27:2d:1d:87:21:9d:ca:4b:5c:5c:bd:6e:48:
                    59:49:c8:3c:93:6c:3c:b5:5b:fb:e9:a7:bc:47:4b:
                    98:15:a4:28:15:40:16:c7:54:e7:61:82:6d:5f:75:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:21:59:94:8D:8E:F5:2C:A4:71:8F:18:4E:55:F1:9C:68:41:7C:8E
            X509v3 Authority Key Identifier:
                keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ff:d6:af:0e:32:4f:5c:62:d3:2d:2d:f0:9e:5e:1f:14:05:
         8e:17:9b:1b:aa:f2:1c:d0:8b:d2:30:de:39:da:51:c8:7e:5f:
         57:e6:60:bc:f5:b2:41:20:1f:57:e5:b8:8e:0a:4a:62:84:12:
         55:df:92:b0:e7:1b:20:3e:09:3e:76:93:6d:61:c0:d7:8a:62:
         16:c7:c4:94:5c:8f:d2:ee:17:3a:88:cb:d3:86:cc:a8:05:96:
         08:32:ad:d7:d5:7f:ec:be:4b:e7:20:fa:3e:8e:b5:c8:25:b7:
         ca:8c:82:b4:9e:89:fb:ef:f5:c9:71:da:ff:22:5e:41:e1:f1:
         b2:a8:8f:1c:eb:10:ef:e2:0a:74:87:c0:06:5f:5d:56:e6:18:
         07:4c:20:af:c9:e2:78:bb:21:7e:52:d5:48:5f:3a:ac:82:d5:
         24:02:0a:9b:53:48:07:b4:4d:9e:79:42:09:1e:28:b7:83:53:
         fe:ec:a0:92:cf:fe:28:ec:34:8f:70:86:cb:dd:7c:ad:73:b7:
         f0:47:cc:d0:0f:1d:46:1d:86:30:32:29:cb:6e:91:a2:28:99:
         21:c0:ff:f7:d1:89:59:e2:32:f0:00:c7:30:2e:6c:ca:89:0a:
         ae:cd:5b:9c:c5:81:05:d0:eb:0f:06:b0:a3:e6:63:50:1e:f8:
         36:39:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:37:28 2026 by rpki-client