Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File:                     q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier:          Jd1IRBIz5sR7ybGYWOJIHCHT5qqmiDilwvOZXczLUSw=
Subject key identifier:   2E:77:B5:71:A5:C8:1D:92:97:8E:A0:72:E2:AD:10:4E:F5:79:B4:33
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer:       /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial:       019ED3BE0726E97F2BCA7DD2A0AD8E5430BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number:          193F
Signing time:             Wed 17 Jun 2026 04:01:46 +0000
Manifest this update:     Wed 17 Jun 2026 04:01:46 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:46 +0000
Files and hashes:         1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=)
                          2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=)
                          3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: CrT35Dt3UtxISf2XGLKPHPdZZ6F7TWJijd5y8UrmYSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 04:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:be:07:26:e9:7f:2b:ca:7d:d2:a0:ad:8e:54:30:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
        Validity
            Not Before: Jun 17 04:01:46 2026 GMT
            Not After : Jun 18 04:01:46 2026 GMT
        Subject: CN=2e77b571a5c81d92978ea072e2ad104ef579b433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:c3:77:5f:00:fb:85:8d:b0:83:ff:e9:90:
                    d6:91:35:09:77:c8:a1:bb:da:b3:0d:96:73:f9:d7:
                    d8:e7:2b:7c:77:4d:6d:be:d8:7b:4f:ab:2f:de:84:
                    fd:8f:c0:62:22:31:f0:93:e9:be:f0:6a:fa:9c:0b:
                    15:b4:1a:a9:2c:18:e4:fe:f2:d9:24:a3:87:67:1b:
                    55:da:3e:38:f3:24:0b:c1:f7:7f:07:d2:50:47:f0:
                    a2:08:cb:65:be:a1:df:f4:01:70:11:2e:eb:e3:10:
                    d0:b2:27:fc:76:31:01:e0:ae:b5:a3:96:cb:89:2e:
                    26:97:22:5d:77:00:ef:67:fd:76:c9:c4:ad:78:ef:
                    cf:34:77:ed:6a:ad:fc:12:2f:0b:cd:85:78:c3:6d:
                    ae:f9:63:9a:e7:81:05:fc:e0:a2:25:7a:32:bc:8c:
                    88:3c:96:21:11:ef:92:3d:67:91:25:d7:e8:36:5f:
                    56:52:41:ee:dd:fb:18:eb:a9:7b:68:af:19:d6:38:
                    fc:20:07:ea:6c:98:24:b0:46:81:5c:fe:45:06:88:
                    ba:ba:e8:79:fc:f4:06:df:a1:76:45:5f:39:4b:be:
                    12:63:1b:d5:48:58:72:f1:79:f2:80:3c:b7:6f:32:
                    69:fb:15:30:ad:23:fa:11:19:14:c6:23:bb:67:f0:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:77:B5:71:A5:C8:1D:92:97:8E:A0:72:E2:AD:10:4E:F5:79:B4:33
            X509v3 Authority Key Identifier:
                keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:7b:83:bc:6d:53:ec:be:b3:37:8d:06:16:b6:cd:81:e8:
         bd:e2:a2:c9:c8:24:00:82:a2:2a:6e:ab:dd:fe:bc:9c:16:e3:
         11:e4:24:70:22:bf:61:f1:d8:ab:96:69:90:c1:6a:ac:4f:22:
         9d:b5:77:4f:46:66:7d:78:e7:fb:d4:bb:08:b1:23:38:7b:18:
         af:54:b8:1f:0c:67:26:e9:d6:7d:ab:41:62:1f:d9:b3:3f:6e:
         a2:8c:8f:33:3b:45:7b:b2:73:00:78:60:cc:a7:be:7c:6d:6a:
         13:0c:ef:d8:16:8d:ba:93:36:9e:dd:5f:d9:68:2b:e6:c6:f2:
         04:f4:75:3a:db:28:ae:39:a0:69:e5:84:b8:27:e9:d4:05:ff:
         18:90:ed:03:9f:01:c7:10:8c:c3:2d:1d:92:2d:a5:41:46:b4:
         1b:25:81:00:da:a4:b9:6d:55:04:4a:85:f9:b8:32:70:03:bc:
         0d:ae:fe:13:97:48:1a:62:43:a8:76:d6:fc:cb:cb:cc:81:4e:
         d0:79:72:db:80:c3:88:e8:a2:96:f8:97:5f:e9:f4:36:ce:52:
         82:87:33:96:07:9a:53:28:f1:f4:fd:3d:01:d1:5d:f5:99:55:
         38:40:da:e7:94:a8:94:c8:a0:3c:3d:b1:84:b9:51:7b:8f:c9:
         e5:49:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:36:08 2026 by rpki-client