Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File:                     cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier:          XviXLFUcvIFit6743y0I0ALB7jl7P8+QJ15UalvFeRY=
Subject key identifier:   59:E5:02:BB:76:31:99:75:F8:8A:85:83:23:57:0C:13:F9:05:B0:46
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer:       /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial:       019EBFC8E43B574FB1D7B409304D402406BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number:          1642
Signing time:             Sat 13 Jun 2026 07:01:14 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:14 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:14 +0000
Files and hashes:         1: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: 15ZtfITyFFBqRqs2bYCY2SRhmWID8wI5LjkhsjzSEto=)
                          2: x7XIqJcPUru0lXudcs2kUD4a4dY.roa (hash: RMRq+vG8pwIp8zMMZ4x4ZnddCysQFlJ5lwvYXFg2Sb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:e4:3b:57:4f:b1:d7:b4:09:30:4d:40:24:06:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
        Validity
            Not Before: Jun 13 07:01:14 2026 GMT
            Not After : Jun 14 07:01:14 2026 GMT
        Subject: CN=59e502bb76319975f88a858323570c13f905b046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:85:f5:c8:a5:0e:a7:f2:1d:09:2c:30:e2:12:
                    98:ac:02:3d:73:6d:9e:94:66:74:bc:02:c6:05:ea:
                    21:6b:e3:a6:7a:20:43:32:71:59:28:97:0c:fb:66:
                    3c:a1:15:8b:4e:34:f5:fd:f5:05:99:f5:54:bb:08:
                    38:e6:b7:74:35:2c:ce:1b:e3:22:a3:49:0e:83:ba:
                    90:5e:90:18:8f:03:a5:ea:d7:06:b2:44:bd:e7:41:
                    e3:4a:f8:5b:44:9c:82:f9:6d:56:e6:fc:84:01:84:
                    a3:26:19:52:39:89:ee:d3:0a:36:a8:8f:52:63:b9:
                    d7:0d:7f:2e:60:53:fa:9e:ae:73:e4:d4:51:32:79:
                    35:da:52:b1:81:d9:d0:91:06:2d:77:c4:94:47:e8:
                    8d:84:38:cc:08:f8:39:44:fa:d4:c0:d1:df:fd:4f:
                    54:51:86:f1:b3:d2:93:76:31:4d:5f:0c:d9:74:88:
                    11:98:1d:2c:72:54:0a:db:fd:5b:3d:6d:ea:c6:b6:
                    a4:6c:75:af:dd:69:a9:37:0c:4f:f1:2b:2d:bf:0a:
                    b1:96:09:a8:7d:14:43:84:99:5c:a5:32:b9:10:5c:
                    c5:09:3d:e8:0a:86:10:ff:64:5d:8d:61:cf:e2:01:
                    d9:7b:af:7d:77:66:42:e7:68:db:99:d0:20:cc:27:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E5:02:BB:76:31:99:75:F8:8A:85:83:23:57:0C:13:F9:05:B0:46
            X509v3 Authority Key Identifier:
                keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:26:00:4c:79:96:58:1c:6a:25:f7:10:48:66:b5:74:0b:
         0c:11:6d:bf:fb:24:25:12:f1:48:60:74:57:58:01:2a:e3:f7:
         a5:38:cb:79:39:e3:88:9d:1e:fc:c2:ed:90:d4:9e:53:ba:4e:
         79:61:f3:15:51:07:09:30:5e:ce:96:04:1b:b9:87:45:f5:de:
         f7:d6:01:b0:98:5a:74:9e:ed:71:d4:4d:b1:ab:a7:f8:d4:01:
         44:bc:68:10:52:cb:28:67:82:33:49:9f:95:37:6d:2a:5d:c0:
         e7:be:e5:86:33:45:0f:fd:54:f1:ba:a5:a3:b9:8b:53:fa:96:
         8a:95:19:c7:ff:d2:62:80:6d:7f:37:ca:65:94:8f:99:7b:e1:
         ac:fd:a6:2a:8d:70:9d:95:bc:8b:26:d4:5b:b8:88:0b:e7:f1:
         c8:4e:c5:5f:be:59:f3:fa:2d:6f:3e:aa:c3:44:63:b2:26:16:
         ee:ad:c6:8f:74:a6:2d:b9:68:3f:2f:f9:a4:60:6d:46:45:be:
         50:8c:2f:58:0a:f5:fc:81:6b:8f:a0:58:08:68:fe:d2:06:37:
         94:17:a7:bf:03:33:99:fc:5f:8b:96:00:b3:c3:a0:93:c5:4c:
         38:32:aa:4a:42:a0:13:c2:46:fb:56:0f:93:77:e1:75:77:9a:
         05:1e:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:57:11 2026 by rpki-client