Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File:                     qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier:          P+1fa8181TgQNk15zlZk3ii7ddMqlGbiRlysvO6qNQY=
Subject key identifier:   55:2C:98:42:52:03:D9:2C:C8:E0:39:43:6A:D4:A6:CC:E5:05:41:56
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer:       /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial:       019EC17F9102F1DCFAB6D3275F8A32579882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number:          0B2E
Signing time:             Sat 13 Jun 2026 15:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:23 +0000
Files and hashes:         1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=)
                          2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: 9bH42R0dK//bM3r73qHBOQL00JPx4QodFm3lELlaEdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:91:02:f1:dc:fa:b6:d3:27:5f:8a:32:57:98:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
        Validity
            Not Before: Jun 13 15:00:23 2026 GMT
            Not After : Jun 14 15:00:23 2026 GMT
        Subject: CN=552c98425203d92cc8e039436ad4a6cce5054156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:51:34:bc:a2:b5:17:02:5c:28:21:6e:95:
                    b0:a0:63:70:27:f0:07:94:d9:8e:11:fa:10:87:a8:
                    47:79:73:1f:20:4c:24:39:9f:98:a2:16:c1:ef:b3:
                    d7:34:74:51:c7:e2:a3:08:f8:61:b0:a2:fb:06:ec:
                    f7:1a:3e:52:f7:8b:77:4d:f1:09:03:a1:25:4f:d3:
                    2b:7b:e8:9d:a7:81:d6:6e:93:df:0f:36:0e:76:9a:
                    07:61:4a:e8:fe:1e:c2:6c:24:62:25:bd:53:d3:8c:
                    44:3d:d4:ad:72:26:2c:3e:0a:4d:99:8f:4c:24:eb:
                    63:ec:fa:4c:bf:42:44:0d:5f:0e:61:b6:f6:4d:6b:
                    e7:90:3f:93:85:93:96:f7:c7:0f:11:dd:35:bb:4c:
                    a3:b1:0d:3a:b6:0c:b5:41:fc:b8:08:82:dd:10:c6:
                    b4:c8:a8:e3:70:f9:55:88:5f:96:cc:51:7d:04:ab:
                    e9:e4:7d:b3:06:cd:86:77:b9:42:f9:ac:e0:a3:35:
                    3f:ff:78:27:c3:5f:3d:59:96:7b:31:7c:9f:e1:66:
                    17:74:44:7c:87:17:ea:72:dd:48:b5:a2:aa:46:31:
                    24:60:c5:46:89:9d:74:0d:9c:da:1e:65:7b:d1:17:
                    db:4e:d7:8a:3c:99:0e:fa:fd:de:82:ba:32:5c:27:
                    b6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2C:98:42:52:03:D9:2C:C8:E0:39:43:6A:D4:A6:CC:E5:05:41:56
            X509v3 Authority Key Identifier:
                keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a3:bb:d7:bf:a2:ab:9d:8c:4f:73:bd:e1:be:de:3d:78:18:
         74:ab:b1:94:e7:a7:9a:6b:9c:59:80:d0:7a:52:a6:5f:e4:d5:
         20:f9:85:0f:2d:f4:f0:80:03:46:76:f2:a9:32:37:fd:ab:3f:
         73:e5:c8:4a:a3:42:fe:60:26:f7:cf:71:9f:12:f2:e9:6e:1b:
         2c:a5:45:ee:b4:6e:03:d4:fc:a4:59:b5:89:7c:21:98:b1:d9:
         b9:76:30:b4:5a:49:b4:51:5a:ac:75:f5:a5:ba:2b:cc:49:bb:
         e8:32:bc:54:fb:be:d9:81:2a:69:88:70:50:2e:f8:c8:b2:10:
         fc:27:47:ea:a1:d4:61:45:14:8c:19:c0:f2:a4:da:bb:d0:1f:
         c4:b4:07:34:6e:30:91:30:8b:58:3f:42:f5:39:df:ae:1b:a8:
         db:7e:e1:00:d5:d3:82:72:4b:c8:f9:76:0c:3f:e9:a1:90:16:
         75:90:11:04:33:a8:15:fd:30:f3:0c:26:50:b7:3e:4e:52:8c:
         c0:92:c2:7a:94:f9:d7:45:d1:84:1b:b3:47:a1:2e:7a:79:0a:
         b3:84:93:4c:b2:93:ae:17:95:f4:3d:5c:fb:0a:3b:91:8e:f6:
         a4:ae:bc:81:dc:f6:08:08:a3:79:80:29:46:00:21:44:79:bd:
         e7:b4:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:40 2026 by rpki-client