Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File:                     QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier:          mhm/WLsR9NSG7zC/O3DM71gh38x3Vqbm4mIVlG3BKtw=
Subject key identifier:   BE:A0:19:D5:65:21:1F:F2:ED:03:54:6B:9C:50:23:5C:99:47:16:46
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer:       /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial:       019EBE7F9502F6F6F9AB969A823D6B440B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number:          14B6
Signing time:             Sat 13 Jun 2026 01:01:32 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:32 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:32 +0000
Files and hashes:         1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
                          2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
                          3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: 0lVYN+/n0aZkZGQfO3KXP+94riXtSutGYG2g6gl1Tdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:95:02:f6:f6:f9:ab:96:9a:82:3d:6b:44:0b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
        Validity
            Not Before: Jun 13 01:01:32 2026 GMT
            Not After : Jun 14 01:01:32 2026 GMT
        Subject: CN=bea019d565211ff2ed03546b9c50235c99471646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:5c:d1:68:01:dd:2c:ed:c2:04:33:22:4e:
                    eb:f7:5a:20:83:b9:f1:99:8a:98:ae:94:65:84:eb:
                    f4:6f:53:9a:49:f5:23:a8:fa:ff:71:ac:5d:92:08:
                    85:2c:32:d9:eb:07:a3:ef:5c:d6:96:8c:68:36:44:
                    b7:d7:8e:d6:70:eb:7b:9b:0a:b6:0b:25:fa:3d:f8:
                    fc:f1:3c:05:9c:07:6b:db:de:ec:dd:7f:2f:d9:60:
                    17:c7:8b:75:7e:2b:01:e6:67:c1:08:73:f6:4d:68:
                    9a:c6:a8:32:6c:06:0e:a7:5a:69:58:23:ba:55:cf:
                    f7:3b:bd:a7:47:74:3d:a7:1d:07:ae:fd:cb:dd:98:
                    7e:06:2f:48:c7:9e:01:e8:fa:c2:5e:4e:1f:13:f5:
                    53:1e:50:7e:03:af:0d:ed:1c:e6:b8:6e:3a:5a:f3:
                    ce:5f:d1:f9:5a:68:5f:1f:42:5b:e6:99:e3:5b:92:
                    ed:48:95:42:4e:7a:12:55:41:a8:9f:56:9d:f9:0e:
                    27:4e:c1:7d:49:0e:9d:83:3d:88:c0:07:20:84:5f:
                    6e:5a:68:58:1a:6a:c1:c1:4a:41:61:0d:40:a6:24:
                    00:ab:eb:53:04:95:d1:1d:60:7d:7d:61:76:df:92:
                    c7:65:18:f1:b7:5c:01:93:76:14:6e:c5:e2:a6:4d:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A0:19:D5:65:21:1F:F2:ED:03:54:6B:9C:50:23:5C:99:47:16:46
            X509v3 Authority Key Identifier:
                keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:ff:d0:a0:12:6e:28:b4:6a:44:34:49:ec:be:57:45:77:
         6d:a2:0f:9a:1f:6a:54:03:90:1b:2c:3e:9b:75:c2:d2:8e:5a:
         03:bb:ac:1e:96:11:db:7f:25:3d:73:a6:51:93:bb:db:a5:4a:
         7b:8e:99:67:b9:31:d5:df:66:4b:20:37:56:37:59:a5:46:19:
         2a:8b:58:99:f4:30:23:72:26:23:c9:cb:17:31:1c:a3:b2:41:
         95:08:81:d0:8d:57:cc:02:75:91:e0:03:8a:a0:0b:de:4f:90:
         29:25:80:1d:bf:26:7b:bc:83:a0:34:a8:48:5d:02:de:1b:ce:
         ff:e9:2a:9e:a4:57:aa:07:24:0d:a0:52:08:03:7c:ff:ab:8f:
         e2:7b:65:be:29:1c:d6:16:ef:ef:b9:95:d9:3a:3d:08:3b:35:
         3c:90:d2:b5:28:5c:a3:96:eb:ea:a2:1a:ef:9c:3f:8b:3e:11:
         27:47:12:1e:c3:27:16:da:bd:c8:b8:23:17:fa:de:5c:4a:74:
         08:de:0b:ac:2d:bd:5f:82:88:35:28:db:f8:0a:83:90:2d:e7:
         d7:bf:f3:cb:eb:09:38:9c:7f:c2:5b:3e:1c:22:26:e9:30:bf:
         10:0a:4b:16:34:f7:89:ce:b1:d1:0f:dc:d4:b6:8f:ee:85:8c:
         10:a7:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:35:57 2026 by rpki-client