Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File:                     QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier:          WYXEKWkDPE/y1hhxQhy1+YNewupBVA6ETHhqiLZypCg=
Subject key identifier:   78:B9:77:4A:9E:CC:86:CB:9B:E8:9F:A0:0F:57:ED:FA:DA:1C:6C:EF
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer:       /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial:       019EC0DAC82ED7FE550CF2464730D60273EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number:          16EF
Signing time:             Sat 13 Jun 2026 12:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:23 +0000
Files and hashes:         1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
                          2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: cYIEnrHmMerNQzrIXr5SqxZbSHIglkrXjbbwuHOO/PM=)
                          3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
                          4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:c8:2e:d7:fe:55:0c:f2:46:47:30:d6:02:73:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
        Validity
            Not Before: Jun 13 12:00:23 2026 GMT
            Not After : Jun 14 12:00:23 2026 GMT
        Subject: CN=78b9774a9ecc86cb9be89fa00f57edfada1c6cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:29:f6:14:79:48:9d:23:26:7c:18:5b:94:
                    b5:29:ac:bc:a6:12:a5:c3:83:64:22:4b:c4:ca:ed:
                    66:00:90:51:ab:82:02:d1:97:ff:21:e8:0a:bd:06:
                    61:37:cf:6a:2f:b2:f2:33:3a:27:4f:e1:b7:39:dd:
                    ee:db:68:07:f8:8c:a4:7d:8a:2a:4a:0c:1c:3d:78:
                    5d:63:fc:ae:48:cb:67:4c:2b:41:98:b6:a6:74:cc:
                    77:9f:74:87:dd:d2:f0:f6:3a:5c:0a:60:e0:06:79:
                    fc:4c:ec:b5:a4:43:2e:83:3a:22:97:49:9d:35:02:
                    a6:b2:31:b7:66:e6:47:40:14:52:21:0c:d0:6b:31:
                    17:a8:22:ea:34:63:dd:e5:a0:f3:03:83:e4:07:39:
                    ab:be:c0:c0:db:f0:bf:d7:7a:7a:ec:f5:55:04:59:
                    4c:b7:67:3b:c6:da:80:4c:fb:34:1e:b0:64:a7:cc:
                    14:34:11:aa:e7:c3:38:85:bc:57:22:27:c1:1b:92:
                    bc:89:81:e2:64:fc:b8:40:a9:b2:46:c7:f0:cf:b5:
                    26:9a:d9:0f:6c:95:4a:ce:24:f8:0a:12:b3:64:58:
                    57:0b:0c:66:1b:25:b6:a4:b8:e7:f1:59:60:bd:cb:
                    bf:84:ab:7b:69:9e:63:e1:e7:d2:ec:1e:52:fd:9b:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B9:77:4A:9E:CC:86:CB:9B:E8:9F:A0:0F:57:ED:FA:DA:1C:6C:EF
            X509v3 Authority Key Identifier:
                keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e3:09:41:60:94:5c:dd:8f:a1:d7:a0:d9:ce:4e:36:c2:0a:
         4a:62:97:88:76:ff:2f:1a:27:05:cf:df:7b:33:d5:c1:24:6b:
         65:5d:0b:40:92:37:b6:1b:b0:3d:13:39:b9:a0:07:56:6c:85:
         47:df:86:66:1a:7d:04:2a:38:c8:6c:96:e8:ac:00:a2:ea:54:
         33:82:64:e4:de:de:09:d7:b3:d8:c1:4f:f5:67:ee:ba:d7:18:
         6b:44:ad:bd:ab:5a:89:b2:0e:1d:67:ac:4a:81:89:ee:fd:1e:
         b0:a9:63:a8:dc:92:fc:a8:56:f1:cd:ca:d5:13:14:74:d4:73:
         19:e3:71:cc:d1:fc:ab:cb:cf:e4:bb:04:a9:e1:3c:91:02:9b:
         ef:c9:8e:de:38:2e:f8:b2:14:3b:09:b1:80:a3:66:a2:65:82:
         d0:7c:8c:33:6b:b3:d1:e9:82:80:50:b0:80:1e:80:51:2b:1d:
         b5:4f:d0:9f:02:ec:4e:ee:4d:20:f5:8c:67:f3:2a:86:a6:13:
         2a:46:d5:cf:f1:97:3f:1d:8e:39:92:7c:33:ff:ac:6f:15:03:
         fd:79:0d:7f:0f:2b:9a:50:c9:a0:c1:2a:4f:ff:09:76:1c:e0:
         cf:81:8f:26:2b:3e:49:65:f5:b5:bf:40:e2:ca:fe:93:c8:01:
         83:8f:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:00:57 2026 by rpki-client