Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File:                     1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier:          RDO75UX01GOjP1Mr4sc2hqSg/qXHIwAO5g5Tb/VWK5w=
Subject key identifier:   70:FD:73:42:76:55:95:20:57:09:04:62:9F:56:21:F2:42:CA:B2:B7
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer:       /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial:       019EBFFF2F7C9E25EA82C6F84170BC779F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number:          1919
Signing time:             Sat 13 Jun 2026 08:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:32 +0000
Files and hashes:         1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: u8v/oPwQ3p4Q7JBrjy9J56/IHcJ1WK+1eM/Q+maIDmQ=)
                          2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:2f:7c:9e:25:ea:82:c6:f8:41:70:bc:77:9f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
        Validity
            Not Before: Jun 13 08:00:32 2026 GMT
            Not After : Jun 14 08:00:32 2026 GMT
        Subject: CN=70fd734276559520570904629f5621f242cab2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:4f:4b:d1:1a:08:6b:5c:f5:38:ee:1e:69:
                    9a:08:02:d1:77:b4:7f:d1:cf:7d:c8:19:93:bf:1d:
                    99:67:75:3d:24:00:00:2a:4b:35:97:3a:78:2f:9d:
                    6d:a1:62:01:b4:4c:4b:d5:2e:5c:8e:29:bd:a8:18:
                    2c:f9:88:ef:af:1b:a2:6d:86:00:e4:eb:18:65:5a:
                    cf:3a:ef:32:28:21:07:92:76:a1:6f:51:e5:d7:26:
                    27:d1:84:21:9b:05:74:4d:7e:58:fd:b0:d0:22:29:
                    8f:60:5e:47:9d:9d:5a:d5:37:25:21:b3:ac:c8:e1:
                    7a:26:d6:8b:d2:76:af:32:08:0a:2e:ec:3e:82:e1:
                    94:dd:70:9f:09:bc:f3:f4:68:c3:8c:71:a5:cc:60:
                    ec:a3:7c:6e:a7:ee:38:78:17:2c:fa:d0:da:ff:c8:
                    0e:22:fc:9f:85:b4:50:54:6c:43:3c:60:bd:94:10:
                    e5:0a:27:6d:7a:f3:f9:e7:63:65:dd:7f:32:05:d7:
                    fa:33:2f:55:23:f0:50:1c:f7:6c:16:47:8f:9f:84:
                    02:e1:45:c5:04:ad:9e:20:bd:61:5a:69:2c:70:58:
                    5c:84:06:a9:da:1a:ed:c8:ad:78:36:98:90:c6:0b:
                    fa:e5:af:63:f6:67:a6:86:19:3f:3d:75:fc:81:94:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FD:73:42:76:55:95:20:57:09:04:62:9F:56:21:F2:42:CA:B2:B7
            X509v3 Authority Key Identifier:
                keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5a:8a:c1:99:27:a0:e2:93:4b:d9:97:36:3f:e8:1f:26:4e:
         78:28:c7:ca:93:c0:fe:bb:15:3d:b2:7b:e6:8f:83:62:d5:9e:
         b0:d6:a2:3d:8d:f0:4a:07:c2:50:60:c0:dc:8c:75:e1:8c:c4:
         48:13:3d:7e:67:fa:82:dc:14:78:cd:c9:d8:00:2f:78:f8:02:
         b9:71:17:63:61:3c:56:58:5b:12:44:77:c1:f2:b1:d4:21:bd:
         81:e2:8f:a6:c5:de:71:17:19:85:d8:da:8b:e1:d0:8e:67:56:
         38:f7:aa:cc:33:a7:1d:e8:5a:6b:8a:a4:ee:42:87:39:38:df:
         1d:64:b3:be:41:fe:94:3c:43:fe:b8:ff:1e:75:c7:e5:99:5d:
         88:7b:ea:d8:17:0b:a2:39:6d:e6:a7:6d:4e:fa:2c:ba:6e:61:
         75:d1:9d:57:0f:69:97:2e:86:90:15:c5:47:fd:33:a8:ec:f3:
         05:68:bb:e9:15:24:e2:d4:4e:a0:b9:6d:6f:6e:df:71:bc:44:
         25:a6:76:12:d2:e2:41:23:4f:99:aa:90:b3:4d:44:fc:d8:fd:
         00:15:df:9e:41:77:09:b7:7c:d6:43:dc:fd:3d:72:04:3f:91:
         60:56:67:87:b7:30:11:c8:0c:bd:ad:f4:0a:9d:67:53:b2:9a:
         41:21:c0:db
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6//y98niXqgsb4QXC8d58ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzQyZDc3N2QwODI0MTZhMmQ4NDdkNDAwM2EzMzFiNTBl
MjQyM2UwHhcNMjYwNjEzMDgwMDMyWhcNMjYwNjE0MDgwMDMyWjAzMTEwLwYDVQQD
Eyg3MGZkNzM0Mjc2NTU5NTIwNTcwOTA0NjI5ZjU2MjFmMjQyY2FiMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L1PS9EaCGtc9TjuHmmaCALRd7R/
0c99yBmTvx2ZZ3U9JAAAKks1lzp4L51toWIBtExL1S5cjim9qBgs+YjvrxuibYYA
5OsYZVrPOu8yKCEHknahb1Hl1yYn0YQhmwV0TX5Y/bDQIimPYF5HnZ1a1TclIbOs
yOF6JtaL0navMggKLuw+guGU3XCfCbzz9GjDjHGlzGDso3xup+44eBcs+tDa/8gO
IvyfhbRQVGxDPGC9lBDlCidtevP552Nl3X8yBdf6My9VI/BQHPdsFkePn4QC4UXF
BK2eIL1hWmkscFhchAap2hrtyK14NpiQxgv65a9j9memhhk/PXX8gZS5qwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHD9c0J2VZUgVwkEYp9WIfJCyrK3MB8GA1UdIwQY
MBaAFPl0LXd9CCQWothH1AA6MxtQ4kI+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YUXRkMzBJSkJhaTJFZlVBRG96RzFEaVFqNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIx
LTY2OThiOTMyMzNkNi8xLzEtWFF0ZDMwSUpCYWkyRWZVQURvekcxRGlRajQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q0LzQ4MjcwOC1jMWQ0LTQwZmMtOTMyMS02Njk4YjkzMjMz
ZDYvMS8xLVhRdGQzMElKQmFpMkVmVUFEb3pHMURpUWo0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVqK
wZknoOKTS9mXNj/oHyZOeCjHypPA/rsVPbJ75o+DYtWesNaiPY3wSgfCUGDA3Ix1
4YzESBM9fmf6gtwUeM3J2AAvePgCuXEXY2E8VlhbEkR3wfKx1CG9geKPpsXecRcZ
hdjai+HQjmdWOPeqzDOnHehaa4qk7kKHOTjfHWSzvkH+lDxD/rj/HnXH5ZldiHvq
2BcLojlt5qdtTvosum5hddGdVw9ply6GkBXFR/0zqOzzBWi76RUk4tROoLltb27f
cbxEJaZ2EtLiQSNPmaqQs01E/Nj9ABXfnkF3Cbd81kPc/T1yBD+RYFZnh7cwEcgM
va30Cp1nU7KaQSHA2w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:24:31 2026 by rpki-client