Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File:                     qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier:          uyHD8o/FI0cOmYDRph9v8N4a+xtBsnmIXU5vzrpmbzc=
Subject key identifier:   90:D7:B2:8F:DE:AE:E2:29:4B:55:C5:6C:A0:3E:CB:28:1B:CF:07:66
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer:       /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial:       019EC22443D19CB214B9E55EDC7B31D70A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number:          0B08
Signing time:             Sat 13 Jun 2026 18:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:16 +0000
Files and hashes:         1: QRd4aPFV9jlBuWiqVWId4f78nwU.roa (hash: z76kR0ZXpWXElfaEyx2j2tbap+nSUCRwRkiT2NmSfmM=)
                          2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: oGcX1GUIn6ONFLTuQhcQaxkQk/wodmBIOFhlPuT9hJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:43:d1:9c:b2:14:b9:e5:5e:dc:7b:31:d7:0a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
        Validity
            Not Before: Jun 13 18:00:16 2026 GMT
            Not After : Jun 14 18:00:16 2026 GMT
        Subject: CN=90d7b28fdeaee2294b55c56ca03ecb281bcf0766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:24:9b:27:84:ab:2b:94:47:c9:89:b4:77:
                    67:f6:4b:81:89:dc:34:a1:11:ca:91:7d:d3:ad:71:
                    fb:34:8c:66:ef:16:bb:bf:7f:3c:6d:17:25:95:a2:
                    1a:cb:74:67:cc:ac:78:bc:a6:39:b0:ea:39:ef:61:
                    66:c4:18:3d:77:aa:0f:ea:03:7d:b9:be:35:0f:22:
                    e1:e3:26:33:ee:23:51:d6:84:75:57:a4:2e:91:6e:
                    e6:19:69:88:5d:41:1f:1a:53:ac:9d:d3:fb:08:1a:
                    42:28:12:18:51:22:72:0a:30:27:cd:9b:c1:83:ca:
                    6c:47:98:b0:e4:84:39:a1:6d:e6:8a:02:c5:5c:e3:
                    5a:42:85:95:41:09:6e:aa:b0:18:de:b1:b2:53:8e:
                    09:cb:e6:a4:7e:ad:e1:d4:5f:f4:36:26:e8:20:3b:
                    75:89:ed:69:33:64:b7:73:95:27:59:f1:5f:d1:de:
                    73:c5:7e:65:16:aa:dc:2b:51:9c:46:b0:0a:23:4e:
                    f2:e1:2c:90:6d:0a:6c:2f:0c:67:b0:15:18:79:e6:
                    66:4c:73:9e:19:44:78:95:1b:4f:5a:80:9e:9e:bb:
                    9d:2a:b7:d4:34:4d:bf:4c:b1:b6:c5:f0:ce:ad:a9:
                    b2:9f:1e:95:23:dd:bf:21:e5:3c:9a:0b:03:c5:8e:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D7:B2:8F:DE:AE:E2:29:4B:55:C5:6C:A0:3E:CB:28:1B:CF:07:66
            X509v3 Authority Key Identifier:
                keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:de:2e:0c:ba:1f:8f:ea:d8:99:db:53:2f:48:e0:ef:7d:f1:
         78:02:85:bf:ee:51:20:86:24:ee:48:e2:32:18:de:e0:03:b2:
         22:72:47:b1:08:0d:68:11:72:87:f3:0a:ff:c6:c5:ba:a5:da:
         16:87:e0:df:87:93:4d:bd:aa:6d:0a:19:d9:5f:d8:5f:e2:43:
         2b:f4:1b:ae:65:16:c9:86:79:fd:d1:67:8f:b5:9f:aa:21:66:
         cc:dd:0d:f1:d1:04:89:10:9b:f4:f8:ce:70:d4:3a:3e:8f:3a:
         5d:48:d1:d0:9e:4a:8e:0c:a0:9e:04:92:a8:74:eb:21:e5:17:
         32:8d:f0:72:b0:e5:11:99:2f:c8:29:45:23:f7:62:fa:03:80:
         f8:8f:3c:6e:83:c0:70:4e:dd:a1:43:ae:d5:57:44:bf:c2:2a:
         90:5b:76:94:ee:22:6f:ec:aa:93:95:33:18:9b:22:ac:50:33:
         ac:ba:31:e5:bf:29:a2:b9:62:e2:76:12:be:3a:83:30:41:37:
         27:27:4a:e2:52:6f:dd:71:4d:66:e8:b6:e4:1f:45:ea:60:65:
         cd:f4:62:d8:62:cb:10:f5:da:65:21:41:b0:4f:65:18:3b:c4:
         77:fc:42:e2:a7:3d:b5:a4:16:88:ff:fb:0d:2a:b4:43:a5:2d:
         a0:d3:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:25:22 2026 by rpki-client