Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          GGRA8QqVq6m5Ft+aHLt6WuRb9jUVetPTkYXYNhXPyrg=
Subject key identifier:   67:FE:63:03:E1:F8:6E:27:C9:6C:88:8B:56:D6:13:4A:50:FF:AB:FB
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       019EC11188A85AF94E96F603FBE0FFA4530D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 13:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:12 +0000
Files and hashes:         1: 3ZiFvY-Cgcsn1T3DHXJhNHlrMbM.roa (hash: QMUQaheEQkA0MuEkm4MPIvv4qbnyv2b8MIRuQ/sS3qA=)
                          2: 7o1SWwCM_cXOFE762glcqqrc0g8.roa (hash: sE4Y/ceaKQXMuGNY66ML+K4wpI2dw3LerD1iYOVm02w=)
                          3: B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa (hash: xAVVZn3+u5SiYc0g3K3z0LHTfUSG0q/VqxbfyLSsAU0=)
                          4: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: vPAf6Uu7CeyDZmEPdK9O9CZnR63wW52CZIHKyk5oBmw=)
                          5: RBn0x09QP17HKTcUk35SeRs4wcQ.roa (hash: K/tTO8Tdy7lEQRLsArj6GBa808uE/Om7+O6QXLd3MN8=)
                          6: hE8C31w_RpAXSBqCw_OOMk-JFm8.roa (hash: HNil33scanjIhVtVF2DLJ+3VEH2NbJtgfLv8Zd42M2M=)
                          7: rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa (hash: k3IT1blcLOwKvPoRomK4b+Py9VtjJ31MfrlWEqMTSvE=)
                          8: ysOgSedTzNHk11K4jKIf8bjTvJY.roa (hash: sn0AlxCtP5/CYV/E85JBe+P2cnutzVIoTcXj+Kz8kMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:88:a8:5a:f9:4e:96:f6:03:fb:e0:ff:a4:53:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Jun 13 13:00:12 2026 GMT
            Not After : Jun 14 13:00:12 2026 GMT
        Subject: CN=67fe6303e1f86e27c96c888b56d6134a50ffabfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:78:f4:7e:be:7b:3e:28:d0:a4:14:ee:1b:39:
                    ec:07:ba:ea:da:b6:a9:41:43:1e:23:ac:7d:9a:5b:
                    09:e4:09:34:e9:0f:f3:78:44:7f:39:37:d5:86:c3:
                    59:95:92:3a:a9:00:01:43:28:c8:82:97:74:06:89:
                    06:9a:e3:20:61:14:9b:cc:1f:60:65:91:83:07:fb:
                    0c:16:59:92:d7:4f:53:76:a0:dd:6e:f4:e9:70:de:
                    59:b9:1a:a3:32:bb:58:a5:da:60:fc:42:71:73:23:
                    3e:61:c7:ea:97:31:89:72:e7:3a:4f:d8:92:06:7d:
                    24:ae:50:da:94:63:9f:30:18:df:79:3f:36:ad:f0:
                    65:b2:93:6c:bc:4d:8b:8d:fd:81:2b:8b:94:f9:0c:
                    9e:d9:8a:e3:29:ad:03:d3:b9:da:b6:5b:d4:af:5f:
                    7a:9e:a4:e6:ca:e9:da:7f:5e:13:dd:26:b3:5f:58:
                    98:f3:8c:91:43:2c:4e:12:b0:ec:d2:ff:bd:54:cc:
                    e1:25:0c:25:d7:a1:cf:7d:e8:db:aa:79:7c:1e:c8:
                    7b:b2:df:ae:63:80:cd:1e:df:f5:70:4a:55:2d:3b:
                    82:9a:13:57:e4:e3:19:e1:87:06:ce:c4:f8:a4:5d:
                    20:80:12:97:80:4a:bc:16:08:c5:7e:a2:5a:d1:a1:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FE:63:03:E1:F8:6E:27:C9:6C:88:8B:56:D6:13:4A:50:FF:AB:FB
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:a7:5a:3c:84:71:dc:b5:0f:12:7d:4b:e3:ea:2f:74:3f:
         6c:56:a6:3b:b4:52:0b:0a:0f:95:43:59:55:0b:f7:89:e7:6c:
         c5:37:10:ce:41:59:b1:6a:6d:2b:06:8b:b8:4c:53:f3:cd:86:
         ae:22:28:4e:ef:53:0f:6b:d2:0c:03:c1:6f:39:88:28:61:7b:
         db:22:85:e7:80:e4:64:bc:e4:c3:7b:6c:32:11:b5:a3:7a:47:
         aa:67:89:5e:e9:bd:23:34:85:90:c4:07:10:4c:c6:2d:d5:3b:
         6c:3c:e6:37:60:8d:7d:8b:31:7d:77:cf:88:0f:b5:34:33:90:
         6c:be:a3:cb:ff:1a:36:b1:de:5b:02:a5:60:0b:60:9e:a6:ea:
         cb:1b:e2:83:f9:54:4f:93:e1:c4:04:26:ad:45:21:e0:4b:79:
         7f:35:27:2b:80:b3:45:13:46:0b:35:67:4f:f0:0f:59:78:f8:
         12:9a:55:5b:21:a4:bc:6c:d7:8c:cf:2e:0e:8b:cc:40:fa:9f:
         79:24:08:6d:25:da:fb:7c:3b:3d:6d:37:1e:b8:a1:4f:f6:c6:
         d9:70:e5:1a:2a:9a:5c:87:71:44:f7:e0:91:3d:e9:4b:ec:37:
         a7:2e:55:6e:2f:4a:03:2f:53:85:a6:bc:5a:5b:2f:ee:53:62:
         fd:ec:cf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:09 2026 by rpki-client