Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
File:                     lQRT7UhedocGF6Dk9GdRRMMZLLI.mft (raw, json)
Hash identifier:          CswgizlfkWq9btjpEp6r+WFeUgn6w0J6wTmXOYBKQ9c=
Subject key identifier:   AD:48:73:59:3F:BC:24:07:2A:89:05:4A:3B:C5:D0:39:E5:8F:0A:A3
Authority key identifier: 95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
Certificate issuer:       /CN=950453ed485e76870617a0e4f4675144c3192cb2
Certificate serial:       019EBF236D59159B9728621B582FA5424F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
Manifest number:          5D
Signing time:             Sat 13 Jun 2026 04:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:30 +0000
Files and hashes:         1: Q-CfOKzteQbTOtrpZkjGGeS4tDc.roa (hash: vXtQZLtQ6dU2I9o5LgOiMGmVeD5PpOqrDv70NWNoyzU=)
                          2: lQRT7UhedocGF6Dk9GdRRMMZLLI.crl (hash: hxbToieMzKDiZ+Bge9nTgWc1X+HJtq4kcWPdLh4wE8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:6d:59:15:9b:97:28:62:1b:58:2f:a5:42:4f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950453ed485e76870617a0e4f4675144c3192cb2
        Validity
            Not Before: Jun 13 04:00:30 2026 GMT
            Not After : Jun 14 04:00:30 2026 GMT
        Subject: CN=ad4873593fbc24072a89054a3bc5d039e58f0aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:70:8d:d1:01:bb:fe:07:25:b6:0c:fb:ef:
                    3f:69:cf:f2:95:0e:bf:a9:65:7f:c2:b1:f2:33:79:
                    b1:99:01:bf:49:99:5a:a6:af:cb:e9:24:b8:6f:ba:
                    60:c5:cf:55:e5:ab:fd:ec:0e:36:76:59:dd:db:ce:
                    62:fd:7d:3a:9a:66:f5:a9:ec:4b:1f:ab:42:cb:fb:
                    40:39:d9:9c:72:20:43:7b:cc:4e:d8:a6:f5:b2:8b:
                    98:13:d0:87:c5:6d:98:0a:80:a8:df:a1:0f:c7:2a:
                    22:83:dc:70:29:e5:1b:da:3e:48:bf:2e:63:6b:d5:
                    38:a8:a2:29:bd:95:98:63:18:15:bc:9f:06:b8:7b:
                    98:37:8c:eb:84:12:8a:10:8f:dd:f2:f7:cb:0a:d4:
                    03:34:f7:64:d1:69:85:45:66:fc:a3:e6:ad:6c:f0:
                    d8:61:aa:b6:a8:a9:a3:0c:f5:be:ba:5d:08:be:60:
                    41:4d:20:58:dc:54:06:84:66:7d:cb:c0:a8:63:8f:
                    b8:fc:84:65:76:db:8a:af:de:30:c5:e2:36:fa:1b:
                    65:6f:2f:ad:87:d1:ba:4b:81:5e:45:ef:21:f1:b2:
                    f2:aa:58:9b:5f:cb:64:86:3f:51:10:44:5b:b3:35:
                    4d:86:6f:1d:07:5b:8a:20:c2:2c:4b:7e:c5:70:09:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:48:73:59:3F:BC:24:07:2A:89:05:4A:3B:C5:D0:39:E5:8F:0A:A3
            X509v3 Authority Key Identifier:
                keyid:95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9e:7a:0f:5f:1e:7d:2d:8f:4a:46:fd:30:54:c0:46:35:5c:
         67:33:88:14:21:4b:58:6c:e0:41:f3:95:da:ac:0c:02:c0:ed:
         42:7d:71:9b:70:26:58:49:68:bf:4c:42:4b:65:50:92:ad:69:
         90:24:cf:c7:40:70:7a:ae:e7:f8:01:00:db:ff:ec:69:5b:0d:
         e6:fa:3c:53:56:a1:07:03:7d:e7:8f:7a:57:a5:68:09:4a:37:
         e6:14:de:8e:4a:6b:91:71:ac:59:58:a3:f6:ed:95:ab:3b:ef:
         a2:43:50:ba:64:74:14:e6:9c:83:13:70:ba:8c:4e:d9:85:e5:
         dc:57:3c:9d:6e:3a:73:ef:d4:79:79:0d:3a:20:54:57:64:0b:
         36:a9:a4:76:2a:66:f8:cf:bc:f7:d0:bd:c0:ed:cc:5a:53:bf:
         89:7c:88:bb:fb:8c:be:a0:a2:64:52:4e:46:36:ba:ab:73:f0:
         51:0e:f4:9f:08:24:3c:71:fb:dc:1c:26:e6:5e:38:a1:33:b3:
         c5:47:95:74:5f:63:8b:5e:64:9c:17:f8:eb:c3:e9:f2:14:e2:
         e0:98:02:03:70:5a:22:01:42:74:fc:4f:02:1d:31:f1:35:95:
         15:51:51:28:0e:a2:24:90:e7:bc:af:93:f4:50:36:46:69:84:
         24:61:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:36 2026 by rpki-client