Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File:                     Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier:          pHv89uLC+QoJehCEheK2x0yZ1ZR6t0jWVZE3A/vNdTU=
Subject key identifier:   67:8D:E9:34:39:DD:8F:0D:6A:2A:C0:99:D4:61:32:0A:21:E6:92:42
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer:       /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial:       019EC3DC31CFE0072D9BFF7202ED4A6FAB2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number:          0621
Signing time:             Sun 14 Jun 2026 02:00:48 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:48 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:48 +0000
Files and hashes:         1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: lopw8SEzzgTPS/fTlFlicyXECgid+te19/gPbJdFYdU=)
                          2: zrY1kiCbt_RCBDyoPeb6Gt-rfXI.roa (hash: 99km0sbg09Xs5uX9uuCKMjDG2dbDXHFkyqnyOKsmuE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:31:cf:e0:07:2d:9b:ff:72:02:ed:4a:6f:ab:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
        Validity
            Not Before: Jun 14 02:00:48 2026 GMT
            Not After : Jun 15 02:00:48 2026 GMT
        Subject: CN=678de93439dd8f0d6a2ac099d461320a21e69242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:77:27:69:9d:01:ed:30:0e:50:4a:3e:cb:
                    2e:6b:33:6e:4a:18:a4:ad:37:85:14:3a:44:94:64:
                    09:f2:54:ca:77:90:29:e3:0e:94:27:8f:67:5b:0e:
                    72:f5:5a:66:ad:04:7c:fe:9c:d3:90:ec:49:36:fa:
                    ae:7f:66:5d:78:8f:d6:09:13:14:e4:19:83:36:58:
                    73:1b:ed:21:bc:8c:f1:5d:c6:86:46:6a:22:4d:85:
                    07:81:3e:37:8b:36:d2:98:50:9b:6f:2e:94:24:62:
                    42:48:60:db:e0:de:ac:cc:ac:f6:0c:58:70:09:5f:
                    69:81:16:c9:16:10:76:94:7f:e3:3a:7a:0c:04:8e:
                    26:77:2b:56:43:38:7f:d2:ff:b7:c7:49:67:b3:bc:
                    64:ca:f2:9e:e9:f7:98:9c:42:be:b9:d6:ad:ee:0c:
                    f0:57:ef:82:ba:8e:2c:fd:76:b6:40:8f:44:d6:e1:
                    85:c5:2a:79:e3:77:e0:75:66:b6:ce:d1:02:be:45:
                    1c:ee:da:51:75:ae:3b:3f:2b:68:1d:db:5f:e2:c8:
                    dc:5b:50:68:96:60:a5:72:96:58:af:9c:03:0f:71:
                    30:86:06:92:f9:1f:61:9e:e9:7f:a5:d3:4e:db:b5:
                    7d:0d:ed:5c:4a:ca:bc:31:92:f8:5c:a5:84:58:9d:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8D:E9:34:39:DD:8F:0D:6A:2A:C0:99:D4:61:32:0A:21:E6:92:42
            X509v3 Authority Key Identifier:
                keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:46:71:00:21:b9:25:9f:ae:a4:41:74:36:74:8b:db:23:
         f6:19:a4:c3:82:6f:49:34:cd:23:a8:34:95:6d:8c:20:48:ac:
         37:62:61:65:5c:45:12:d9:73:2e:22:66:21:c1:cc:fe:f2:de:
         a1:1e:98:6d:1d:c6:f4:9d:6c:69:fc:0e:f1:7d:9e:ae:5b:aa:
         db:e6:b8:54:55:35:40:59:bc:6a:d5:ca:2d:9e:e7:4d:5e:02:
         d9:44:b5:49:a4:94:01:ac:10:86:98:fa:70:ea:9f:3e:be:22:
         68:02:0e:34:c6:d0:ed:ab:da:5a:12:2f:ed:5f:15:7d:dd:bb:
         d0:69:9d:9c:9f:7f:39:a4:74:7e:09:45:ce:99:1c:ab:8c:b1:
         7b:14:d2:ef:8a:5c:08:04:e8:e9:66:ad:aa:c4:fb:4d:74:b1:
         85:62:04:c7:0c:f3:38:c0:45:b6:ee:26:c3:8b:6e:cd:33:fe:
         5a:0d:0e:48:7b:78:63:f5:34:2e:78:46:73:69:5c:e4:c3:88:
         b4:18:6d:d5:d4:b7:39:00:e1:2a:c9:51:9a:27:db:14:82:85:
         f0:29:dc:70:76:cc:85:4a:6e:c4:f4:79:a3:57:3f:d9:f9:0a:
         e1:8d:c7:9c:69:31:9a:dc:3e:2e:f4:a2:d1:70:17:67:10:42:
         0c:2a:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:24 2026 by rpki-client