Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File:                     QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier:          6HBG67/e6QFTHS7EHdzhR1Rz9L5ay1hj5yDRShMljC0=
Subject key identifier:   51:93:BC:5C:EF:D4:0D:71:CD:F1:BB:34:EF:C3:05:72:51:68:8F:45
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer:       /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial:       019EC06D61E8936A1AB05C7B572335B1C910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number:          0147
Signing time:             Sat 13 Jun 2026 10:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:54 +0000
Files and hashes:         1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: 2fDrN56PzVd0JpsB2EXqGjohaYn9lzV+Pfe6FpZv/7E=)
                          2: tUgLrvuas3A8ffagzPey3XzQQXM.roa (hash: nldIcz0O0+/Bm3m2OMxGodFkGt2Ggg8SRrnW6hRBtug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:61:e8:93:6a:1a:b0:5c:7b:57:23:35:b1:c9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
        Validity
            Not Before: Jun 13 10:00:54 2026 GMT
            Not After : Jun 14 10:00:54 2026 GMT
        Subject: CN=5193bc5cefd40d71cdf1bb34efc3057251688f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:ab:be:74:6b:66:9e:a2:c5:46:b8:16:55:
                    e2:ad:bb:d7:3b:48:89:7d:a8:7d:21:d5:53:34:72:
                    6a:b8:2c:12:c0:0f:39:00:d0:f3:6d:a7:e5:c3:1c:
                    7e:8e:de:7e:f2:16:c2:d2:b3:d1:fb:c5:67:df:89:
                    64:49:30:d3:ab:e6:4a:9e:36:16:83:b5:c4:fb:04:
                    25:73:3b:90:e4:04:92:40:16:2c:63:15:b6:7e:ae:
                    98:fc:86:07:2b:d2:d4:3b:a7:0f:ad:bf:bf:5a:4f:
                    c1:68:69:17:54:14:44:1c:be:e2:9f:6c:19:4e:e0:
                    ee:86:e3:07:1f:2c:97:ec:f0:9e:40:3b:13:a6:86:
                    04:9a:ef:62:86:b8:a4:db:b4:5a:aa:61:cd:ad:5a:
                    9b:f5:38:2e:8b:b8:cc:2d:6f:4f:48:8f:b0:2f:82:
                    fe:54:f0:44:1a:b7:df:07:67:92:92:2b:fc:f6:d3:
                    0d:1b:89:09:bd:e3:7c:91:de:a0:c7:40:79:0b:1d:
                    f4:f3:4d:6e:1a:50:8d:1d:f3:2e:13:f0:ce:16:be:
                    48:2e:f8:2a:69:5a:4a:a0:05:db:55:cd:d1:16:c8:
                    1d:bf:94:f4:cf:34:84:77:a3:95:46:79:07:f9:18:
                    bc:eb:d5:59:11:b6:fd:bb:8c:68:18:bb:e5:24:56:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:93:BC:5C:EF:D4:0D:71:CD:F1:BB:34:EF:C3:05:72:51:68:8F:45
            X509v3 Authority Key Identifier:
                keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a9:37:8f:a2:02:56:39:b1:4e:fe:8d:94:f2:d7:fb:ee:e4:
         3f:e1:98:cc:fc:63:4e:48:45:5f:a8:ab:ad:b0:e9:90:b8:c1:
         5d:1f:5b:83:c4:6a:bd:cb:3a:1a:cc:87:83:43:2f:c6:24:b9:
         31:49:1a:05:03:81:79:3a:57:da:d3:79:c4:e9:a9:79:5f:a4:
         59:86:8a:44:d4:5a:2a:a0:3f:d7:54:e9:c8:ef:3f:7c:95:d0:
         1c:27:19:31:d5:bb:d6:0f:2d:00:36:b4:4e:02:62:cd:50:c5:
         7c:d5:0d:7a:18:24:b9:85:3d:a2:cc:ce:a8:8e:01:e7:97:ba:
         b7:d1:b4:51:2a:7e:1e:0e:28:4f:e4:7f:57:3d:4b:82:eb:7f:
         ec:46:bb:a1:dd:34:f4:5a:48:66:6d:da:05:1b:2d:4c:e8:d6:
         0c:36:fc:ac:61:42:64:9a:f9:1b:0c:4e:47:ac:b2:8f:48:80:
         ce:c3:7c:45:41:c8:e3:fb:02:a5:48:d0:bb:f8:7b:b5:bd:a3:
         f0:2b:5a:2b:8f:18:12:d6:97:01:ee:29:34:4f:42:4c:e5:40:
         27:a7:ee:35:82:14:f4:02:58:a3:cd:12:3f:a6:c9:dc:df:2f:
         61:c0:fa:08:a4:26:e7:b1:85:14:e1:57:7d:0e:6f:ab:2c:8c:
         cf:cb:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:59:00 2026 by rpki-client