Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File:                     Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier:          GQSmFd1m+xPqIxazQLCJUURMBKgSIsV2xIzyG++0ax8=
Subject key identifier:   B8:C9:A8:27:8B:90:B1:47:1A:FB:A3:06:65:0C:32:28:5D:B4:F6:D5
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer:       /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial:       019EC0A46C6AB37C213CFDE9F359D1D55E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number:          05BF
Signing time:             Sat 13 Jun 2026 11:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 11:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 11:01:01 +0000
Files and hashes:         1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: YUadpzaVXESzab8ncJFoVoqI7Iv/Ytf5gbyAvTbQxsg=)
                          2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:6c:6a:b3:7c:21:3c:fd:e9:f3:59:d1:d5:5e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
        Validity
            Not Before: Jun 13 11:01:01 2026 GMT
            Not After : Jun 14 11:01:01 2026 GMT
        Subject: CN=b8c9a8278b90b1471afba306650c32285db4f6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:c5:f0:7d:ab:b5:c4:44:a6:34:2a:e8:1c:
                    ee:f1:3b:eb:1b:e8:d9:9a:47:b4:68:0f:ed:6e:fa:
                    63:48:37:cb:54:0e:3e:56:69:dc:96:f9:ba:2e:dd:
                    8e:f3:45:34:ee:30:f9:7c:0b:db:3b:e5:73:76:dc:
                    3f:7c:3c:6b:51:cd:c8:e6:63:9a:db:d8:e3:f6:3d:
                    68:51:45:cc:4d:a2:3d:a0:88:4d:35:e5:3b:79:c1:
                    9d:16:d2:be:9a:3c:91:3b:ae:08:67:42:b7:6c:0b:
                    bd:8d:5c:7f:99:ab:05:27:5b:8c:99:01:e2:9b:34:
                    f4:14:c8:8f:07:51:4d:ab:a0:6d:be:ab:90:e2:27:
                    43:5c:06:d4:95:fe:3f:1d:95:e7:09:bf:a3:b1:de:
                    09:0e:79:d3:dd:fd:ef:4b:1b:7a:52:a9:4b:85:ef:
                    9a:d3:5a:45:b5:a3:cf:2d:89:19:c7:49:0e:18:98:
                    ea:43:a5:f6:c0:d8:77:ca:d7:8c:d1:18:a1:5f:d9:
                    d9:c6:f6:35:57:71:0c:6a:df:84:41:2a:09:de:38:
                    94:2f:d0:a4:bf:69:95:45:95:4f:89:e0:a6:8f:ab:
                    da:ea:95:10:4c:6e:7d:21:63:13:2e:bf:e9:6d:33:
                    bb:b2:bd:2a:3d:9d:f2:e9:dc:dd:10:1d:c4:9d:13:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C9:A8:27:8B:90:B1:47:1A:FB:A3:06:65:0C:32:28:5D:B4:F6:D5
            X509v3 Authority Key Identifier:
                keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:cb:22:89:f8:19:28:ad:d5:f0:11:09:92:23:af:e8:f0:
         51:0c:11:2c:f3:ad:c7:40:d7:65:f4:25:df:f3:92:6b:a0:fc:
         66:be:10:e5:33:e1:09:37:6b:f5:78:b8:57:98:f5:06:c0:70:
         c5:55:25:01:70:a3:0f:26:bd:0d:05:3a:82:cf:3c:dd:de:ed:
         cc:14:49:f1:b7:c3:5b:51:96:3b:d4:b4:61:de:cb:97:50:06:
         fa:49:90:e0:dd:2d:cb:c2:61:9b:e1:dd:61:87:17:a5:15:f0:
         15:e6:5a:fe:44:a7:81:3a:ad:f4:c2:63:04:b3:ed:a7:ce:6b:
         3f:f5:c9:4c:2d:96:8c:9a:ff:15:9a:e6:5b:cc:e7:d0:ba:7d:
         f1:00:c1:90:18:cc:49:88:74:d1:38:db:fe:bd:b3:cc:8b:fb:
         95:76:98:e8:24:20:1f:15:f8:ea:67:25:df:a6:27:f5:de:f7:
         21:e4:76:a4:b3:c2:7e:4e:16:e6:95:36:cf:19:54:4a:d5:5e:
         9f:67:c0:3a:f9:8b:6b:60:36:65:58:68:24:d4:28:b7:b7:48:
         1f:59:57:a9:67:b9:3c:05:aa:bf:27:24:1a:08:b5:9e:f7:86:
         b6:0d:06:90:7d:8d:47:98:9e:fe:3f:b5:12:8b:75:57:79:0f:
         7b:02:61:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApGxqs3whPP3p81nR1V5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3
NmQ3NGUwHhcNMjYwNjEzMTEwMTAxWhcNMjYwNjE0MTEwMTAxWjAzMTEwLwYDVQQD
EyhiOGM5YTgyNzhiOTBiMTQ3MWFmYmEzMDY2NTBjMzIyODVkYjRmNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOHF8H2rtcREpjQq6Bzu8TvrG+jZ
mke0aA/tbvpjSDfLVA4+Vmnclvm6Lt2O80U07jD5fAvbO+Vzdtw/fDxrUc3I5mOa
29jj9j1oUUXMTaI9oIhNNeU7ecGdFtK+mjyRO64IZ0K3bAu9jVx/masFJ1uMmQHi
mzT0FMiPB1FNq6BtvquQ4idDXAbUlf4/HZXnCb+jsd4JDnnT3f3vSxt6UqlLhe+a
01pFtaPPLYkZx0kOGJjqQ6X2wNh3yteM0RihX9nZxvY1V3EMat+EQSoJ3jiUL9Ck
v2mVRZVPieCmj6va6pUQTG59IWMTLr/pbTO7sr0qPZ3y6dzdEB3EnRN8aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjJqCeLkLFHGvujBmUMMihdtPbVMB8GA1UdIwQY
MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt
YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl
LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOTLIon4
GSit1fARCZIjr+jwUQwRLPOtx0DXZfQl3/OSa6D8Zr4Q5TPhCTdr9Xi4V5j1BsBw
xVUlAXCjDya9DQU6gs883d7tzBRJ8bfDW1GWO9S0Yd7Ll1AG+kmQ4N0ty8Jhm+Hd
YYcXpRXwFeZa/kSngTqt9MJjBLPtp85rP/XJTC2WjJr/FZrmW8zn0Lp98QDBkBjM
SYh00Tjb/r2zzIv7lXaY6CQgHxX46mcl36Yn9d73IeR2pLPCfk4W5pU2zxlUStVe
n2fAOvmLa2A2ZVhoJNQot7dIH1lXqWe5PAWqvyckGgi1nveGtg0GkH2NR5ie/j+1
Eot1V3kPewJhQw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:07:34 2026 by rpki-client