Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
File:                     QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json)
Hash identifier:          9Cabe6kMa54UuvOAGh59nx1aFswnPxLmTIva/vtAxuE=
Subject key identifier:   87:0C:17:BB:D5:36:84:90:AB:BD:51:F3:AC:04:94:58:BD:6D:5F:DC
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Certificate issuer:       /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial:       019EC300AFE02E7C32B665EB8577483F77E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
Manifest number:          0367
Signing time:             Sat 13 Jun 2026 22:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:02 +0000
Files and hashes:         1: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (hash: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI=)
                          2: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: DtljZqmIRA+Wk9tgGj2iIayug9saockHS2eYIwNV7o8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:af:e0:2e:7c:32:b6:65:eb:85:77:48:3f:77:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
        Validity
            Not Before: Jun 13 22:01:02 2026 GMT
            Not After : Jun 14 22:01:02 2026 GMT
        Subject: CN=870c17bbd5368490abbd51f3ac049458bd6d5fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:6f:3e:20:a7:bb:bb:a2:7c:bb:be:4f:0a:
                    31:97:34:92:8b:a3:50:a3:a4:49:8b:16:9a:a9:5f:
                    c0:5b:69:6d:04:55:33:f2:bc:ef:27:09:e6:f8:d9:
                    ab:73:8d:0a:32:28:37:aa:23:53:d8:eb:c2:ab:12:
                    1e:19:f2:7c:b8:97:9b:a4:36:d0:d7:0b:9e:71:51:
                    82:4d:74:0f:f9:20:37:05:5e:fc:21:2d:1b:4f:3f:
                    d2:a3:f9:c1:a7:d3:ac:2e:4f:b6:59:b6:e8:3e:c8:
                    71:67:8d:cc:13:d6:2e:ef:89:c5:78:7e:87:f4:d2:
                    e6:9f:46:42:2e:1e:13:a0:c0:4b:8b:b5:a2:a3:a3:
                    f3:a7:ab:ad:b2:5d:1c:fe:f8:c9:20:67:ed:94:58:
                    1f:f6:99:ef:d7:58:ec:fc:20:7b:72:fc:ec:b9:86:
                    bd:ec:0e:0f:47:84:7a:cc:55:99:ec:3e:7e:0f:db:
                    d8:75:bc:f8:fa:67:a2:54:6b:1d:cb:7f:bf:b6:7c:
                    25:7d:38:d1:bf:10:2d:55:62:c8:e4:0a:4c:2c:34:
                    5e:4b:5e:63:62:dd:30:6b:1b:77:af:a6:63:94:53:
                    e0:af:a9:30:72:94:93:85:2a:f2:c6:1f:a7:f0:d0:
                    87:b0:68:46:6c:42:8a:fc:9a:ce:af:aa:e5:a0:98:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0C:17:BB:D5:36:84:90:AB:BD:51:F3:AC:04:94:58:BD:6D:5F:DC
            X509v3 Authority Key Identifier:
                keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1f:74:ec:f4:12:dd:18:67:92:4c:0f:ee:6d:3a:06:e7:60:
         9c:34:ef:c0:72:60:37:f4:6b:4d:a7:9c:65:58:cc:67:69:d3:
         80:af:54:23:40:22:cd:28:13:5f:29:ed:22:f0:6f:16:d5:af:
         04:55:aa:14:8f:0b:9c:98:96:dc:4c:90:26:77:e3:4a:a4:af:
         a4:c0:7e:95:bc:b5:27:4d:45:d6:b7:d8:19:e9:5b:d3:c8:b2:
         7e:5a:f0:1c:79:2b:48:e1:d6:01:59:04:79:75:69:bd:2f:d9:
         53:06:4c:c3:38:41:59:6c:5a:a1:da:12:7d:8a:17:4d:0d:6a:
         c1:29:85:87:17:e8:fa:ac:c6:67:db:e6:6e:92:a8:67:38:11:
         f1:47:cf:f2:aa:59:fc:10:54:21:07:1b:28:b6:dc:e7:19:bd:
         48:81:e5:f7:ac:fc:d5:76:82:ae:10:9e:01:5f:c7:fc:73:7e:
         2b:e7:2e:6c:14:f9:14:e7:e4:da:44:de:63:d1:47:08:11:b2:
         78:6e:a3:4c:c8:fe:6c:20:88:6b:f2:9b:80:0f:9c:16:9e:e7:
         6f:be:20:81:33:b7:d7:ad:61:d3:76:33:ef:f0:05:cf:83:25:
         15:86:d2:9f:88:73:ed:99:f2:83:e8:6c:f4:8a:50:e0:16:a7:
         8e:df:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:12 2026 by rpki-client