Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File:                     1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier:          cp2QdDvJ/h3F23hQTe3KC7+2+RNFRw5a3NpWK/5FQcc=
Subject key identifier:   7D:31:22:98:53:CD:D7:AE:3B:CA:99:C9:1C:3A:5B:B5:7B:CF:AE:39
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer:       /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial:       019EBF5AA75831B52D296614CBF783B95390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number:          092E
Signing time:             Sat 13 Jun 2026 05:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:49 +0000
Files and hashes:         1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: Dhl2X4SE7wNm2HwwZFPtHDJlhGrdiNOvrEF9r3oB5is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:a7:58:31:b5:2d:29:66:14:cb:f7:83:b9:53:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
        Validity
            Not Before: Jun 13 05:00:49 2026 GMT
            Not After : Jun 14 05:00:49 2026 GMT
        Subject: CN=7d31229853cdd7ae3bca99c91c3a5bb57bcfae39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:5b:28:d1:c3:88:c6:64:3f:e7:79:46:0f:
                    94:a6:c9:e0:23:13:b2:75:25:5c:49:bb:84:e0:85:
                    50:d2:79:67:0f:4e:60:7d:df:e0:20:fd:cd:c2:fb:
                    b3:2a:21:ed:4e:a9:87:16:81:b7:16:e2:42:1a:92:
                    bf:bd:5a:f3:f1:02:fc:b6:6b:2a:14:be:90:03:ad:
                    15:64:0a:38:39:a1:9d:51:20:37:cf:30:60:a3:5c:
                    21:f9:0b:1c:b8:ee:ba:15:3d:0d:32:eb:f2:fd:3f:
                    f0:38:9c:12:08:68:3b:83:59:8e:60:f7:ed:7e:e2:
                    88:17:e3:9a:4d:18:16:c3:4d:fa:cd:18:01:82:c1:
                    fe:be:96:63:d1:39:b5:55:e6:3b:dd:23:19:aa:4e:
                    af:08:86:0c:31:0a:52:2e:22:74:a6:05:3f:1a:00:
                    c3:6b:27:59:c4:1f:b8:e3:5d:15:31:5e:dc:f3:b0:
                    44:f5:16:f9:83:20:4f:21:b9:3a:8d:fa:cf:25:ae:
                    99:92:33:8e:3a:eb:4a:8f:eb:b1:1e:4a:58:e5:9e:
                    0e:bc:59:c1:2d:3d:aa:32:7e:3c:d7:4d:05:e7:2e:
                    09:28:00:56:c6:e1:d4:bf:3a:d9:c5:f3:60:02:39:
                    2f:6c:84:e3:77:cf:55:c1:2a:6a:8f:75:31:5c:0a:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:31:22:98:53:CD:D7:AE:3B:CA:99:C9:1C:3A:5B:B5:7B:CF:AE:39
            X509v3 Authority Key Identifier:
                keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c2:42:bf:c4:54:50:89:92:c1:11:a5:0f:d3:03:36:64:da:
         5a:67:fa:90:16:41:be:fb:e4:e8:35:51:54:d4:2a:a7:99:13:
         1d:b7:2f:ce:a3:0c:9f:17:e2:25:5c:f8:f9:c4:69:02:af:31:
         54:27:e2:59:d1:57:dc:4a:f0:49:8e:f7:f8:f6:bd:e3:20:ef:
         14:17:7b:44:ec:96:53:03:51:78:56:ef:02:b4:a0:3c:14:b9:
         dd:6e:74:ec:57:0d:65:82:12:32:f2:85:65:8e:49:7c:52:03:
         99:1f:b7:dc:65:5e:46:38:71:9a:e3:5d:07:7f:60:6b:ce:80:
         7a:a1:e8:95:0a:b0:7f:5d:d9:37:49:17:8c:81:a9:cb:9d:57:
         0e:74:ba:37:2c:f1:90:c3:05:fd:09:e3:67:48:95:02:22:c5:
         15:54:a6:54:91:86:1f:93:11:85:ca:36:88:51:dd:b4:f5:37:
         c7:fe:6a:f3:1c:97:d2:b6:f1:c4:d6:4f:75:22:6d:ed:11:cb:
         f9:ec:68:c7:a8:89:18:c5:24:c7:ab:bd:49:7b:a6:98:d3:4c:
         70:67:08:0f:b1:ab:1f:55:ed:d6:52:d7:5c:aa:e3:43:fc:0b:
         aa:03:56:37:a7:ca:8c:98:e3:8e:fc:64:01:d1:1a:45:40:0e:
         52:52:93:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WqdYMbUtKWYUy/eDuVOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YTcxYjRlODY5NDQxN2ViYmJjZjYyNjhiOWM4Zjk2MzE3
MGIxZjEwHhcNMjYwNjEzMDUwMDQ5WhcNMjYwNjE0MDUwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZDMxMjI5ODUzY2RkN2FlM2JjYTk5YzkxYzNhNWJiNTdiY2ZhZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvNbKNHDiMZkP+d5Rg+UpsngIxOy
dSVcSbuE4IVQ0nlnD05gfd/gIP3NwvuzKiHtTqmHFoG3FuJCGpK/vVrz8QL8tmsq
FL6QA60VZAo4OaGdUSA3zzBgo1wh+QscuO66FT0NMuvy/T/wOJwSCGg7g1mOYPft
fuKIF+OaTRgWw036zRgBgsH+vpZj0Tm1VeY73SMZqk6vCIYMMQpSLiJ0pgU/GgDD
aydZxB+4410VMV7c87BE9Rb5gyBPIbk6jfrPJa6ZkjOOOutKj+uxHkpY5Z4OvFnB
LT2qMn48100F5y4JKABWxuHUvzrZxfNgAjkvbITjd89VwSpqj3UxXAoV4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0xIphTzdeuO8qZyRw6W7V7z645MB8GA1UdIwQY
MBaAFNanG06GlEF+u7z2Joucj5YxcLHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQt
MjkzMTEwNGM1ZjdhLzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQtMjkzMTEwNGM1Zjdh
LzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsJCv8RU
UImSwRGlD9MDNmTaWmf6kBZBvvvk6DVRVNQqp5kTHbcvzqMMnxfiJVz4+cRpAq8x
VCfiWdFX3ErwSY73+Pa94yDvFBd7ROyWUwNReFbvArSgPBS53W507FcNZYISMvKF
ZY5JfFIDmR+33GVeRjhxmuNdB39ga86AeqHolQqwf13ZN0kXjIGpy51XDnS6Nyzx
kMMF/QnjZ0iVAiLFFVSmVJGGH5MRhco2iFHdtPU3x/5q8xyX0rbxxNZPdSJt7RHL
+exox6iJGMUkx6u9SXummNNMcGcID7GrH1Xt1lLXXKrjQ/wLqgNWN6fKjJjjjvxk
AdEaRUAOUlKTmA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:50:40 2026 by rpki-client