Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File:                     QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier:          HuSbEThI3A6FEVxrexEokIYqBIWXmfOBSDxsis6WqEo=
Subject key identifier:   14:CE:9A:7A:EE:9E:DF:AC:38:91:0C:36:29:43:5C:46:74:3E:4B:16
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer:       /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial:       019EC0A447A8382B7DE5C41EEE2C2037051C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number:          0B1F
Signing time:             Sat 13 Jun 2026 11:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:52 +0000
Files and hashes:         1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: ldeATpBTJ+cpSUuDlLjjR1dpTs7v3mE8jC+Rtp2i2GI=)
                          2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:47:a8:38:2b:7d:e5:c4:1e:ee:2c:20:37:05:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
        Validity
            Not Before: Jun 13 11:00:52 2026 GMT
            Not After : Jun 14 11:00:52 2026 GMT
        Subject: CN=14ce9a7aee9edfac38910c3629435c46743e4b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:54:c3:0a:92:0a:30:48:6b:fb:24:af:18:
                    72:82:96:94:c5:01:49:bb:23:de:06:62:86:06:c9:
                    b4:3c:19:7e:de:1e:d2:a0:53:76:89:f8:f9:17:ad:
                    c4:15:8b:d8:78:3a:de:29:63:93:65:a2:ef:6a:c5:
                    34:99:eb:1f:cb:02:26:52:84:b6:4f:a9:ea:ba:71:
                    5f:bb:04:02:a6:86:df:4e:3a:43:11:23:86:ff:31:
                    59:c0:c1:f4:c4:76:cb:c6:92:fe:fe:d2:05:f3:37:
                    a3:f5:30:f4:13:06:ce:df:a3:50:02:b1:01:2f:83:
                    31:ff:b1:32:aa:d5:94:54:17:54:b2:d4:a6:07:7d:
                    43:20:51:45:83:2d:c0:19:29:fa:c1:37:0f:6b:bb:
                    48:ba:35:b7:71:34:8f:da:5b:bd:d0:ff:f8:40:2b:
                    73:e0:2a:4a:4f:e7:73:29:c7:a7:08:c2:8f:e6:c0:
                    aa:2d:3f:34:08:c3:e7:11:a9:ad:bc:b7:b5:91:ca:
                    5c:31:48:72:27:74:5e:e3:d5:f2:ae:bc:bc:1d:d4:
                    0b:cd:9b:23:ab:cb:5c:22:85:7d:65:43:98:da:6a:
                    8b:59:c0:4c:29:94:f1:60:eb:1c:91:e4:38:da:e0:
                    c2:91:e3:1d:a4:80:3e:1b:57:83:6c:ea:e4:fc:04:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:9A:7A:EE:9E:DF:AC:38:91:0C:36:29:43:5C:46:74:3E:4B:16
            X509v3 Authority Key Identifier:
                keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5c:43:ae:d7:a0:93:6b:97:cf:4e:14:5b:c0:86:a4:c2:46:
         97:f2:43:1c:c9:cb:a0:7d:5b:3d:03:7d:e5:dd:12:c0:81:43:
         4c:6c:5a:fd:1b:48:63:d8:3e:62:97:8f:c1:5a:c1:29:2f:d2:
         bc:61:41:5c:15:5f:97:c7:71:03:78:7e:ef:8a:b3:6d:e9:e2:
         17:0f:3c:ec:a5:4d:27:6a:97:0a:e1:3e:b4:67:8a:89:bc:82:
         92:31:0d:cf:76:7b:29:92:72:ca:c1:34:4e:cc:88:b5:09:1b:
         55:0b:fa:82:04:22:7b:0d:34:3a:43:53:46:d2:df:53:6b:02:
         d8:0b:5b:e8:3d:9d:9c:14:7f:35:02:17:1a:b2:4f:3b:0c:5e:
         02:23:0a:18:26:b6:23:bb:ce:5c:f1:21:26:8e:11:c4:3a:6c:
         e2:cc:2a:e0:fc:60:04:d7:08:8e:37:5e:2b:ef:0d:84:6a:e9:
         a5:db:51:5c:2a:6f:43:ed:7f:8e:d2:b0:23:7f:34:70:b9:c2:
         f4:29:3c:1e:68:0b:89:ce:d6:13:4d:7c:5e:83:3a:f0:bb:8b:
         72:17:cb:4b:25:88:7c:99:d8:9e:5d:1e:4b:bd:06:aa:c5:af:
         6d:50:cf:ee:80:76:32:01:21:39:5a:1d:24:ef:12:8a:6c:c8:
         3b:50:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:47:30 2026 by rpki-client