Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File:                     q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier:          uuVVQHixtLeoZxH4wXvbufTLyVyATaE/Qb6a+Nt5VvA=
Subject key identifier:   A4:16:D0:7A:36:38:77:6B:16:16:9E:84:B4:8F:21:F5:17:69:BA:70
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer:       /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial:       019EC29288E14C6890EB5C25E020C4B1A381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 20:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:43 +0000
Files and hashes:         1: 8TsXg-XUAk1JE35W5iwCEn8OxHY.roa (hash: wgiKwTO+cQ6amDFPE6cljiPgi+iGvWx/hXbXkD8CRAQ=)
                          2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: pJOCnasQbS1HGXbVzI8MHWjCQQ36Zb23uKNi0sHpGt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:88:e1:4c:68:90:eb:5c:25:e0:20:c4:b1:a3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
        Validity
            Not Before: Jun 13 20:00:43 2026 GMT
            Not After : Jun 14 20:00:43 2026 GMT
        Subject: CN=a416d07a3638776b16169e84b48f21f51769ba70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:b5:1a:01:93:c7:f0:cf:00:ef:16:d2:ca:
                    76:7a:d8:80:d6:22:ba:1d:58:1f:02:fc:b6:c2:78:
                    3d:b2:ef:94:5e:1e:21:36:b8:f8:43:e4:91:68:1c:
                    4b:a2:0f:d8:23:2e:52:f2:d6:19:45:c8:ab:3f:bb:
                    bd:2c:fb:58:e3:40:7f:c4:b0:88:a6:02:28:dd:9d:
                    2d:f0:93:a9:f6:84:8a:0f:15:bd:43:7a:46:16:bb:
                    51:17:37:fe:9e:60:29:c6:3f:eb:08:92:29:3d:a6:
                    5b:6c:c5:92:ea:c4:2f:2a:16:75:4d:06:4c:8f:66:
                    75:3f:45:16:2e:03:d0:e8:40:ca:d6:ea:8a:7f:7d:
                    d7:0c:00:48:d3:aa:7b:c5:d5:ac:98:fb:ac:01:00:
                    12:60:22:02:f9:0d:d1:20:be:b2:7d:40:d0:17:9b:
                    b2:8a:d3:ed:e4:91:51:7a:61:97:a4:d3:c6:88:49:
                    67:05:96:2a:32:13:96:ca:3a:92:9c:c0:c0:d0:16:
                    29:48:25:57:ed:71:d6:12:5b:5b:26:bf:cf:87:e7:
                    c9:74:a0:c0:84:61:af:f9:10:fd:1d:c1:3c:3d:68:
                    62:08:94:2a:a8:66:83:6d:fa:66:c9:cf:81:5e:94:
                    3c:17:60:95:8a:20:13:bb:5f:3c:87:2d:b5:14:5e:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:16:D0:7A:36:38:77:6B:16:16:9E:84:B4:8F:21:F5:17:69:BA:70
            X509v3 Authority Key Identifier:
                keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:25:a6:b8:9b:0e:cc:52:85:60:e6:2e:5d:2b:db:10:88:da:
         af:6c:a1:73:61:43:a7:db:af:6c:f6:df:5f:e5:22:4b:67:f7:
         32:fb:bc:c7:56:b2:24:f1:51:12:b6:ea:f7:ed:3f:11:4b:33:
         04:31:fe:62:c1:55:32:9b:82:e1:e6:5f:89:d9:3f:f7:e7:4b:
         e3:8f:e3:9a:60:47:d3:9d:48:95:9b:7f:16:ce:10:7e:e0:4d:
         1d:8e:93:00:5b:3b:b9:62:5f:79:09:f8:69:29:18:d6:a7:ba:
         2f:5a:e3:1d:c2:a4:ef:46:51:b2:78:51:da:a0:cc:f2:8b:1c:
         e7:dd:9d:24:0f:d7:6c:a9:e8:96:52:d0:22:61:ad:0f:dd:61:
         b3:ec:46:47:f5:ad:0a:37:fb:45:01:ce:81:e6:58:6a:d5:60:
         b0:92:cb:7a:2a:36:ec:ae:19:9d:9e:c9:61:96:a8:8e:25:95:
         46:9b:6e:ef:c3:02:9b:ca:87:b5:f1:72:52:e9:e4:20:93:e3:
         b8:99:68:8f:32:a7:5e:da:51:4c:b2:df:fa:17:a8:36:d9:93:
         34:df:bd:bf:94:7d:d6:f3:6a:4a:fb:49:c9:05:e4:b9:ad:f9:
         ce:7e:ba:87:2a:36:cb:94:7d:04:36:35:63:89:77:9d:91:61:
         b0:d9:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:39:33 2026 by rpki-client