Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File:                     Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier:          B5yp4PgosfbCmjlA48Rlv7OtbI0h/Um4IkZYdO7F5as=
Subject key identifier:   98:96:D2:50:D8:B4:02:86:35:A2:18:3C:F5:82:79:90:84:D4:08:01
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer:       /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial:       019EC0DB9E974CDA0C951467783E362F7E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number:          17E3
Signing time:             Sat 13 Jun 2026 12:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:18 +0000
Files and hashes:         1: 6E7-9daevK2MkkP9J_irNaIbJPM.roa (hash: nqBQWE4qRj5lWqiwp2QfZYIRYl9NsKmCq2MDZGildvE=)
                          2: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: aT35cAj8P5qshRm0DMCVWejBryLSp/9Z8e5aS9UhnE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:9e:97:4c:da:0c:95:14:67:78:3e:36:2f:7e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
        Validity
            Not Before: Jun 13 12:01:18 2026 GMT
            Not After : Jun 14 12:01:18 2026 GMT
        Subject: CN=9896d250d8b4028635a2183cf582799084d40801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:b3:20:9a:ce:84:7a:38:3c:b0:95:27:6a:
                    b5:0a:0e:83:49:5e:5a:ba:67:1a:96:3b:83:96:1f:
                    be:2d:62:d7:2e:d9:89:9e:b1:16:97:62:55:18:c0:
                    af:c4:7a:cc:77:8f:4b:3f:f1:e9:d2:74:fa:e6:10:
                    ea:6d:17:0d:35:81:60:b3:d2:24:a7:98:16:4e:a0:
                    aa:2c:83:64:5c:35:5f:3c:36:e3:e7:bd:71:c5:68:
                    bc:b1:5d:c8:cb:89:9e:84:81:fa:e5:6a:fc:44:24:
                    4b:9a:c1:66:78:6c:e9:6b:d3:13:c9:1d:71:e1:ae:
                    a1:71:ce:28:33:7f:7e:77:b9:1d:75:8d:12:32:b0:
                    89:c0:70:0d:b7:0b:51:4e:e6:19:74:50:b7:2f:56:
                    90:4e:13:dd:a5:a3:02:b4:15:88:41:fb:f7:c1:79:
                    dc:b7:ea:66:a5:d7:f0:12:8c:5e:8e:b6:e0:db:c9:
                    9a:95:78:51:7e:a6:e4:65:1e:29:f1:16:98:d7:3d:
                    d7:d7:e4:1a:0e:49:12:9f:ff:c7:e4:90:8a:19:14:
                    74:23:7d:fb:3c:c6:7f:77:42:c0:73:6f:dc:af:cf:
                    f2:1a:c4:e4:a1:e9:f3:95:a7:24:29:57:23:7b:31:
                    3c:a6:33:e2:bb:63:2a:24:05:20:af:e0:7f:5e:cd:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:96:D2:50:D8:B4:02:86:35:A2:18:3C:F5:82:79:90:84:D4:08:01
            X509v3 Authority Key Identifier:
                keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:11:23:26:8b:db:6b:e1:e1:d2:88:80:7c:36:41:97:be:d9:
         bf:aa:19:da:d5:2e:cf:65:da:14:fa:49:39:fe:eb:cc:c0:91:
         59:4b:cc:aa:b6:63:1a:ea:35:df:2f:f5:9b:b3:a8:e4:8a:0d:
         84:c0:55:4c:bf:45:f9:4a:23:f0:c7:0a:4d:9b:75:20:63:24:
         a7:7d:96:ec:72:c9:7c:28:50:3d:d4:a1:32:60:ad:5d:e2:a0:
         c2:24:40:47:8d:0e:4f:2a:55:68:47:c2:ea:18:3f:79:f0:ce:
         d4:39:26:62:97:d4:a7:60:96:70:46:72:81:85:3e:66:10:79:
         d7:88:6e:95:75:89:bf:59:6b:c2:b5:3a:a2:db:88:8d:a0:5f:
         a0:59:20:84:b2:de:7d:9d:08:5f:47:44:65:54:5a:7a:a6:e8:
         b2:ba:b7:bc:12:6a:fb:57:82:c8:31:d3:d4:91:73:2d:6c:8b:
         32:e7:d7:47:67:40:e8:af:54:27:ab:2f:f7:73:e6:23:45:19:
         ed:9e:bd:5c:cc:74:a1:74:24:b0:88:e5:37:ee:b7:b0:e8:70:
         4d:8d:77:03:6c:a1:63:c2:0c:b3:4e:46:ce:27:f8:73:21:32:
         7d:c6:4e:e1:c9:ba:de:62:22:e0:05:cc:1a:12:0d:03:59:7b:
         cb:20:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:17 2026 by rpki-client