Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.mft
File:                     Qlp1imElK6BgMpAi_N1_U1hiD5M.mft (raw, json)
Hash identifier:          mTCev1nBNjtZb/awQGHKx2GqPb9lEHHNK3WOp1iv9NQ=
Subject key identifier:   75:4E:CE:06:B0:6A:EB:46:3D:31:12:6A:B0:80:23:84:2D:AB:56:D4
Authority key identifier: 42:5A:75:8A:61:25:2B:A0:60:32:90:22:FC:DD:7F:53:58:62:0F:93
Certificate issuer:       /CN=425a758a61252ba060329022fcdd7f5358620f93
Certificate serial:       019EC1B6D89A6806C0A40651E649CF9E36ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qlp1imElK6BgMpAi_N1_U1hiD5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.mft
Manifest number:          0B
Signing time:             Sat 13 Jun 2026 16:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:46 +0000
Files and hashes:         1: HgjghS0TcS3sXKEDkSBK8StqoPg.roa (hash: 9Et6fejSW975AgeOObLCQ5alU9YtwwctRwBtQTF5i5g=)
                          2: Qlp1imElK6BgMpAi_N1_U1hiD5M.crl (hash: EjSCxlfrlL5JMd52LTMiGlbTMpMb892o8eZYJs3/QvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qlp1imElK6BgMpAi_N1_U1hiD5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:d8:9a:68:06:c0:a4:06:51:e6:49:cf:9e:36:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425a758a61252ba060329022fcdd7f5358620f93
        Validity
            Not Before: Jun 13 16:00:46 2026 GMT
            Not After : Jun 14 16:00:46 2026 GMT
        Subject: CN=754ece06b06aeb463d31126ab08023842dab56d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:64:2a:e9:75:82:4b:68:01:e9:d3:4c:cc:
                    7a:6d:62:8a:05:05:9e:26:22:1f:7a:81:a9:a6:18:
                    1c:3a:39:04:e2:bb:16:a4:fe:23:e3:60:99:60:35:
                    78:e2:24:79:e1:a8:ff:c8:b5:b9:68:fa:a7:74:bd:
                    45:c8:62:9b:2f:87:c2:ff:55:b5:77:e0:b0:b1:68:
                    56:c7:18:8d:45:d6:b6:7b:43:25:89:89:b7:36:96:
                    ce:bd:f4:0a:9e:3a:cc:c2:72:f9:dc:a5:22:b8:a7:
                    18:c5:56:c0:0e:ae:21:02:d8:ac:59:4e:22:ef:3d:
                    e8:2f:89:af:6a:dd:85:41:c9:9b:33:3f:7a:dc:16:
                    08:28:e2:da:b3:d2:68:1d:d0:aa:5b:6f:1f:c6:66:
                    ed:84:22:f1:2f:ba:00:bd:cf:34:67:ff:5c:29:8b:
                    e6:c1:96:09:55:e5:3b:61:ef:29:f0:d4:3b:e9:0b:
                    84:e7:4b:3f:e6:51:9f:49:99:c5:7c:b5:f0:05:14:
                    14:e1:f8:d4:f5:5e:f3:88:9a:c7:c7:54:13:cc:23:
                    08:34:be:f7:11:8f:58:3c:2b:07:9f:94:d9:6b:76:
                    b2:12:b6:76:52:de:4a:f7:08:61:f1:b6:05:72:43:
                    c7:8a:6e:cf:1c:9f:6c:4a:a2:78:df:08:76:d7:bb:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4E:CE:06:B0:6A:EB:46:3D:31:12:6A:B0:80:23:84:2D:AB:56:D4
            X509v3 Authority Key Identifier:
                keyid:42:5A:75:8A:61:25:2B:A0:60:32:90:22:FC:DD:7F:53:58:62:0F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlp1imElK6BgMpAi_N1_U1hiD5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:59:ef:aa:f2:3b:ea:33:60:b3:85:66:73:09:de:83:00:26:
         ad:67:29:45:f1:13:2a:ad:91:70:a2:cd:b4:bf:a0:11:7b:06:
         2e:f4:25:bb:3a:fb:da:96:fb:26:94:6c:42:65:38:c3:b5:41:
         62:52:17:be:af:2b:01:a4:57:93:91:94:2e:ac:df:51:35:49:
         39:fb:eb:0f:df:bd:97:1e:08:bc:b4:4f:a2:e6:d1:d9:02:24:
         bb:90:13:c9:a0:b3:69:c5:74:83:63:6b:5c:ea:48:b5:2c:b1:
         34:15:e9:ca:d3:d8:12:60:52:43:42:5d:2f:b0:89:22:fc:9d:
         db:be:ae:59:eb:c6:0b:54:0c:b7:fd:1d:2b:ae:f4:48:95:ce:
         82:8a:7e:fa:7f:b6:d9:dd:9f:4d:19:f5:bd:fb:62:b9:8f:58:
         35:f5:9a:0e:db:5c:a5:b0:5d:78:0d:4b:03:9f:59:34:dc:31:
         27:65:1c:94:01:93:00:a3:96:08:95:03:c7:86:d8:23:2e:bc:
         23:69:1c:da:00:f0:8b:c7:65:30:cc:84:3e:9c:3f:fd:98:5b:
         c4:21:b8:58:71:53:95:26:0d:7a:b7:87:e0:1a:7e:51:bd:ef:
         71:94:19:02:8d:0e:77:b7:38:7a:0a:4e:45:ae:25:25:25:c8:
         de:8c:a0:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BttiaaAbApAZR5knPnjbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWE3NThhNjEyNTJiYTA2MDMyOTAyMmZjZGQ3ZjUzNTg2
MjBmOTMwHhcNMjYwNjEzMTYwMDQ2WhcNMjYwNjE0MTYwMDQ2WjAzMTEwLwYDVQQD
Eyg3NTRlY2UwNmIwNmFlYjQ2M2QzMTEyNmFiMDgwMjM4NDJkYWI1NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln1kKul1gktoAenTTMx6bWKKBQWe
JiIfeoGpphgcOjkE4rsWpP4j42CZYDV44iR54aj/yLW5aPqndL1FyGKbL4fC/1W1
d+CwsWhWxxiNRda2e0MliYm3NpbOvfQKnjrMwnL53KUiuKcYxVbADq4hAtisWU4i
7z3oL4mvat2FQcmbMz963BYIKOLas9JoHdCqW28fxmbthCLxL7oAvc80Z/9cKYvm
wZYJVeU7Ye8p8NQ76QuE50s/5lGfSZnFfLXwBRQU4fjU9V7ziJrHx1QTzCMINL73
EY9YPCsHn5TZa3ayErZ2Ut5K9whh8bYFckPHim7PHJ9sSqJ43wh217usSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVOzgawautGPTESarCAI4Qtq1bUMB8GA1UdIwQY
MBaAFEJadYphJSugYDKQIvzdf1NYYg+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxwMWltRWxLNkJnTXBBaV9OMV9VMWhpRDVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yMmIzYmMtNzI4Ny00MTkwLThlY2Ut
YTcxNzU5YWE2MzhkLzEvUWxwMWltRWxLNkJnTXBBaV9OMV9VMWhpRDVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yMmIzYmMtNzI4Ny00MTkwLThlY2UtYTcxNzU5YWE2Mzhk
LzEvUWxwMWltRWxLNkJnTXBBaV9OMV9VMWhpRDVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1nvqvI7
6jNgs4VmcwnegwAmrWcpRfETKq2RcKLNtL+gEXsGLvQluzr72pb7JpRsQmU4w7VB
YlIXvq8rAaRXk5GULqzfUTVJOfvrD9+9lx4IvLRPoubR2QIku5ATyaCzacV0g2Nr
XOpItSyxNBXpytPYEmBSQ0JdL7CJIvyd276uWevGC1QMt/0dK670SJXOgop++n+2
2d2fTRn1vftiuY9YNfWaDttcpbBdeA1LA59ZNNwxJ2UclAGTAKOWCJUDx4bYIy68
I2kc2gDwi8dlMMyEPpw//ZhbxCG4WHFTlSYNereH4Bp+Ub3vcZQZAo0Od7c4egpO
Ra4lJSXI3oygwQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:01:38 2026 by rpki-client