Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File:                     QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier:          vFUG2WqWfrOsJ6WwDEKYTu5pQnpFf2B7dxMgkYtEMAA=
Subject key identifier:   D3:22:EF:4A:0F:E7:67:A0:17:09:39:E3:E0:D3:58:B0:71:62:81:A7
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer:       /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial:       019EC300D95E148715AFF068D08EF765BD98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 22:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:13 +0000
Files and hashes:         1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: J4kW/wf7L91es9f/27sePgenDVEB9H6xLSeWFX8FJm8=)
                          2: ugMrWtr-AgbWpTxdCrlYjC4RyWA.roa (hash: 5ukMlR12Rye0g+suC8BFsAQhk/pWlg5h05IGSX13iYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:d9:5e:14:87:15:af:f0:68:d0:8e:f7:65:bd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
        Validity
            Not Before: Jun 13 22:01:13 2026 GMT
            Not After : Jun 14 22:01:13 2026 GMT
        Subject: CN=d322ef4a0fe767a0170939e3e0d358b0716281a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:aa:bf:9b:5c:bb:23:30:ce:8c:0a:d2:bf:
                    12:7a:d7:43:0c:9c:be:a4:73:6f:37:82:c8:15:c3:
                    45:a8:43:9f:a5:04:7d:39:c1:33:1a:09:29:fb:ff:
                    8a:36:70:1d:4d:6d:a9:9c:16:8e:bf:50:03:d7:ee:
                    58:27:19:69:8a:20:16:2d:89:6c:c9:1d:41:9e:0f:
                    7d:8c:26:21:0e:4e:d6:f8:5c:08:2e:bc:00:ad:4c:
                    0b:5a:da:af:be:98:c0:3d:45:60:f8:4b:22:d1:74:
                    ff:2a:7f:9d:dd:23:03:ca:52:25:c0:ac:29:29:76:
                    02:66:53:0c:8a:d8:0f:84:3d:c2:8a:20:ba:95:a3:
                    3d:8a:1e:07:3f:bd:db:0a:fd:12:b7:32:09:7b:86:
                    5e:2e:34:0c:3b:49:55:98:22:7f:8c:3f:91:b1:44:
                    75:7e:66:ab:23:7c:ab:76:c9:4d:71:8c:d8:c5:e6:
                    4b:c6:7f:34:b3:f1:e4:a0:00:9b:32:f7:0b:a4:77:
                    b4:bc:b0:ce:e3:40:b1:13:b0:af:82:45:e9:13:a6:
                    a4:cf:9e:4a:79:34:b8:e6:1b:2f:5a:09:86:38:9c:
                    b9:4d:3a:b0:0f:6d:35:20:2b:05:2b:ea:14:cc:a5:
                    01:24:83:2b:75:06:f6:36:c3:2f:27:d5:f7:18:b6:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:EF:4A:0F:E7:67:A0:17:09:39:E3:E0:D3:58:B0:71:62:81:A7
            X509v3 Authority Key Identifier:
                keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0a:6f:fb:40:09:89:03:10:91:b0:13:34:59:6b:fe:81:3e:
         5b:8e:37:78:d2:3d:e1:09:41:4f:69:0a:fb:b3:c5:1e:12:54:
         a3:90:ed:8f:a4:44:53:70:d0:41:ef:7d:7d:fa:2c:de:60:51:
         90:1c:4f:62:e5:f4:c6:b2:1f:62:c2:15:79:95:f3:0a:01:67:
         06:c3:ab:bd:74:11:83:d9:b1:bd:6e:63:7f:8c:59:cd:cf:a3:
         2f:35:9a:0b:b5:44:c9:93:a9:5c:82:7d:6b:a4:51:f0:82:d5:
         cc:7a:96:f2:e2:d1:75:c4:99:64:23:fd:53:9f:4c:e3:99:12:
         d3:a9:52:7e:dc:95:58:84:6d:f5:a0:c8:75:9b:4d:63:27:30:
         b4:ef:64:7a:4d:97:af:1a:16:d6:68:49:d8:92:b5:69:dd:5f:
         2e:fd:cf:74:83:74:cf:a7:c0:7c:a6:43:3c:1e:e2:a4:b5:ad:
         83:b3:7e:01:62:64:1b:fe:56:f7:22:28:03:c4:77:5c:c9:e2:
         ea:2d:2f:a7:f6:7e:1f:5d:36:48:e0:80:81:49:33:a5:82:0e:
         8a:50:9e:ed:5c:6d:42:22:34:cd:cc:fb:40:b5:0b:b7:33:73:
         a3:fe:0f:20:be:6a:dc:f5:06:63:0f:7e:c5:f3:ed:18:fe:51:
         49:de:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:55 2026 by rpki-client