Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File:                     RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier:          53BrIvdRQazpkVVI8Q6//YyyX3QvI+05nriX8cWnz24=
Subject key identifier:   B3:24:A7:8E:21:CC:F7:BC:04:10:C5:33:B6:D9:5B:F1:16:14:9B:C1
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer:       /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial:       019EC1488DE5651168DA5EE244EB23F0DC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number:          0891
Signing time:             Sat 13 Jun 2026 14:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:17 +0000
Files and hashes:         1: 0mENkr9R3Eaz0bgbzTHZ_lmoh-k.roa (hash: awpYUvwutpxyVAYPBKGZqnzY4J1Y2wVFIsJg6l5sbpw=)
                          2: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: 3H5hi7zi94kUucXK/Lxnh5fp5g+BuRh0sLqvpLHM/rM=)
                          3: o3zLYzfT2580u-9CLddXhuyulyE.roa (hash: mwi/4c6LgdDRlLk19tfzSF9ChskElpBtCMQAXkoaQJk=)
                          4: uU9WSNDEX66vzzhhXOoe21fcdxo.roa (hash: 6MvyTg+A5MSPoBXPWElfN6DEbE9gMvp/ra0DMu41c84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:8d:e5:65:11:68:da:5e:e2:44:eb:23:f0:dc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
        Validity
            Not Before: Jun 13 14:00:17 2026 GMT
            Not After : Jun 14 14:00:17 2026 GMT
        Subject: CN=b324a78e21ccf7bc0410c533b6d95bf116149bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:b6:b9:79:d0:54:eb:31:52:83:6d:ab:3c:
                    ab:f3:f7:ef:76:cd:c7:36:8e:59:7b:df:f3:49:59:
                    ba:25:c2:91:ed:c0:0a:07:9e:d7:c5:06:90:d2:e2:
                    be:33:b2:fb:77:70:9f:fd:17:a2:53:85:b6:07:73:
                    15:ed:80:dd:97:db:2f:f1:0f:24:c4:10:17:6f:3f:
                    df:93:2f:47:5d:c2:d6:03:78:80:92:d4:1e:8a:a0:
                    92:9d:4e:43:4d:cb:0f:0c:18:0d:f6:ae:3b:23:e2:
                    3a:98:5d:f2:30:f2:c1:4e:d4:93:e6:32:c0:91:d2:
                    0a:91:a9:8a:3d:88:5d:e3:3d:3b:03:5f:bd:ae:20:
                    61:62:35:89:0a:b6:c4:f4:cf:bf:a7:8e:e6:b0:e2:
                    b1:23:ff:dd:89:6e:c5:89:eb:ef:b9:83:74:40:20:
                    bc:52:c2:7f:3e:39:a4:6f:9a:8a:ef:fd:6e:30:e3:
                    8c:a6:6e:e5:14:7b:65:e6:cd:5c:bc:42:96:94:96:
                    2d:0d:31:6c:7d:b6:54:4a:4b:11:3c:98:61:d5:57:
                    21:26:17:d0:4a:14:a0:fe:ca:da:a9:e4:b2:82:3a:
                    d1:8c:a4:9a:cb:1c:f6:c2:0b:0e:8b:c0:c2:be:31:
                    75:10:27:c8:40:48:55:82:9b:44:64:ec:e2:f3:8a:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:A7:8E:21:CC:F7:BC:04:10:C5:33:B6:D9:5B:F1:16:14:9B:C1
            X509v3 Authority Key Identifier:
                keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:a1:de:53:c9:6f:ac:a2:cd:e6:50:e8:d8:ba:88:d5:7a:
         5c:68:ad:52:81:26:96:25:50:5d:5d:c2:8d:9c:5c:27:9b:32:
         b8:e8:03:81:c0:7e:70:40:33:14:23:4a:d1:22:f4:b6:ad:48:
         60:99:47:d6:a9:67:6a:e3:15:9a:d1:22:c0:cf:25:1e:47:53:
         19:dd:06:af:d5:f7:80:1e:8b:f0:8f:ba:05:c1:e7:23:72:89:
         39:75:ea:4d:ee:38:0b:31:d2:13:7c:51:6c:e0:2f:2b:0f:57:
         fc:1b:79:c5:c9:40:65:7b:dc:8a:e7:d0:4a:30:f9:44:12:8c:
         d5:a0:93:b7:29:80:0f:2f:99:e8:06:cc:7e:d2:42:6c:45:55:
         36:8a:ee:87:7a:ad:c3:e0:55:3c:19:e2:b1:dc:2e:10:6b:35:
         3b:dd:79:8c:7f:bf:d1:d0:9b:ad:fc:a6:62:d8:d6:d4:73:9b:
         e2:17:57:df:3f:f2:e3:b4:81:3e:34:66:34:8b:16:53:ba:0f:
         6b:40:0b:b5:dc:4b:b7:32:4b:49:51:3b:14:99:40:b6:19:7b:
         9a:d3:28:5d:07:11:96:99:60:66:13:c8:ec:2d:c4:3c:b9:d4:
         f0:95:94:99:91:e1:f7:1c:59:e3:60:e9:6b:4b:6c:9d:e4:25:
         bf:2c:bd:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSI3lZRFo2l7iROsj8NwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1
ZTcyYTgwHhcNMjYwNjEzMTQwMDE3WhcNMjYwNjE0MTQwMDE3WjAzMTEwLwYDVQQD
EyhiMzI0YTc4ZTIxY2NmN2JjMDQxMGM1MzNiNmQ5NWJmMTE2MTQ5YmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOa2uXnQVOsxUoNtqzyr8/fvds3H
No5Ze9/zSVm6JcKR7cAKB57XxQaQ0uK+M7L7d3Cf/ReiU4W2B3MV7YDdl9sv8Q8k
xBAXbz/fky9HXcLWA3iAktQeiqCSnU5DTcsPDBgN9q47I+I6mF3yMPLBTtST5jLA
kdIKkamKPYhd4z07A1+9riBhYjWJCrbE9M+/p47msOKxI//diW7FievvuYN0QCC8
UsJ/Pjmkb5qK7/1uMOOMpm7lFHtl5s1cvEKWlJYtDTFsfbZUSksRPJhh1VchJhfQ
ShSg/sraqeSygjrRjKSayxz2wgsOi8DCvjF1ECfIQEhVgptEZOzi84rSvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMkp44hzPe8BBDFM7bZW/EWFJvBMB8GA1UdIwQY
MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt
NzQ5OWE4MjMxZjU2LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2
LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDqh3lPJ
b6yizeZQ6Ni6iNV6XGitUoEmliVQXV3CjZxcJ5syuOgDgcB+cEAzFCNK0SL0tq1I
YJlH1qlnauMVmtEiwM8lHkdTGd0Gr9X3gB6L8I+6BcHnI3KJOXXqTe44CzHSE3xR
bOAvKw9X/Bt5xclAZXvciufQSjD5RBKM1aCTtymADy+Z6AbMftJCbEVVNoruh3qt
w+BVPBnisdwuEGs1O915jH+/0dCbrfymYtjW1HOb4hdX3z/y47SBPjRmNIsWU7oP
a0ALtdxLtzJLSVE7FJlAthl7mtMoXQcRlplgZhPI7C3EPLnU8JWUmZHh9xxZ42Dp
a0tsneQlvyy9eg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:39 2026 by rpki-client