Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File:                     Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier:          nZVutdEebanr356FubndDnqoVDgyOQY+wjWQelJsXtw=
Subject key identifier:   03:B6:27:60:28:1E:B4:69:C3:21:63:33:86:B5:7C:50:8F:1B:AC:0F
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer:       /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial:       019EC111FA6EF152570FA76D2F235E30A633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number:          03FB
Signing time:             Sat 13 Jun 2026 13:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:41 +0000
Files and hashes:         1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: fnNmbPW16u1IcTJX8nKyj3CVV032NLvY3akmKug0+fI=)
                          2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:fa:6e:f1:52:57:0f:a7:6d:2f:23:5e:30:a6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
        Validity
            Not Before: Jun 13 13:00:41 2026 GMT
            Not After : Jun 14 13:00:41 2026 GMT
        Subject: CN=03b62760281eb469c321633386b57c508f1bac0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:58:48:99:4e:09:93:7d:a6:52:89:6f:10:
                    db:14:6e:50:48:32:b8:35:39:48:95:9b:39:cd:af:
                    42:2f:00:0a:66:f6:5f:87:43:f7:f4:10:79:78:88:
                    ab:fe:bf:6d:0e:3d:c2:9e:bc:f1:c1:10:a1:19:49:
                    04:02:06:31:52:0a:df:f2:cc:f3:f4:a3:93:b0:de:
                    ff:8d:8e:c5:85:cf:65:64:6d:38:8b:ac:8f:d8:b7:
                    6a:6c:85:3a:90:6c:8c:94:12:78:6d:01:2a:b3:12:
                    3b:33:0c:9d:f4:2e:2c:68:8f:c3:86:6b:97:9f:19:
                    da:c5:ab:da:9c:b1:ed:1a:e7:91:5d:33:3a:d1:9e:
                    d1:f1:b6:ef:e2:f3:b2:ae:b2:74:b8:eb:4c:6c:1d:
                    74:b8:d6:3f:0d:c4:84:d8:95:b2:04:52:d8:75:01:
                    57:9f:9e:61:74:9b:6c:25:e8:47:f9:36:1a:bd:f4:
                    d9:2a:fd:d6:1d:97:5a:48:a2:bf:f6:c3:ca:64:bb:
                    51:44:bc:60:f2:04:6d:89:d4:4e:22:ea:21:4e:ad:
                    02:46:62:b4:b5:cb:09:3f:e7:56:32:2b:58:f3:a6:
                    01:5f:46:23:5f:7e:53:0d:d9:be:07:c0:b6:ab:f3:
                    56:c3:dd:b4:19:02:89:53:be:17:1f:b0:d1:e4:6c:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B6:27:60:28:1E:B4:69:C3:21:63:33:86:B5:7C:50:8F:1B:AC:0F
            X509v3 Authority Key Identifier:
                keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:8f:aa:73:a4:58:ff:73:09:61:34:a7:f0:35:85:01:f4:
         b3:f2:5d:08:c9:d2:4a:ee:57:20:0d:e6:54:19:45:04:50:5c:
         10:b5:1d:3e:1c:a3:37:7e:c6:ed:9d:85:f4:03:36:ce:be:99:
         21:e4:76:49:6d:a0:d1:47:86:31:ad:0e:d9:78:14:a0:4b:3e:
         15:cf:29:29:35:4c:47:11:63:84:c3:e5:db:0e:9f:06:01:66:
         f5:54:a7:c6:25:e1:36:4d:69:84:99:5b:71:df:9e:75:ff:e1:
         5c:8c:5e:a9:ec:29:ff:40:a7:d2:c6:07:db:66:45:5d:f6:ed:
         03:75:66:7d:b4:09:91:a6:74:66:01:c6:1f:ad:f9:38:e3:d9:
         fc:d4:21:1c:5a:2f:4c:84:13:5a:b6:26:66:e5:02:b0:38:9c:
         7f:3c:19:7e:2c:d5:60:16:01:a1:d1:50:65:88:ed:26:f6:d4:
         7f:0a:88:ce:e2:d7:16:01:a7:82:d8:4e:b8:bd:f3:c0:91:0c:
         25:9b:c1:64:c3:ea:e1:d0:32:b9:e9:6c:af:f9:48:87:e8:e2:
         59:a0:42:a0:24:a4:29:b3:f6:97:e3:2e:10:2f:05:75:b0:06:
         c9:b2:1b:78:98:52:e5:cc:16:9e:fc:80:a2:62:f2:1d:02:bf:
         c8:64:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:52 2026 by rpki-client