Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          YymrsFSjNM0kVnTEa+/H5t+SQ0SVE8Lelc2AcduiIIU=
Subject key identifier:   19:7D:B0:46:13:46:BE:4F:9C:C5:F5:BB:D7:BA:5F:73:44:52:B0:DC
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       019ED461EE31E4A57D11430A9C2C5BAC5BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          1944
Signing time:             Wed 17 Jun 2026 07:00:48 +0000
Manifest this update:     Wed 17 Jun 2026 07:00:48 +0000
Manifest next update:     Thu 18 Jun 2026 07:00:48 +0000
Files and hashes:         1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
                          2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: CjTXpNliRywDnIIS+ZUH7G/vtKfZh5R+F3spKrHfUko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:61:ee:31:e4:a5:7d:11:43:0a:9c:2c:5b:ac:5b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Jun 17 07:00:48 2026 GMT
            Not After : Jun 18 07:00:48 2026 GMT
        Subject: CN=197db0461346be4f9cc5f5bbd7ba5f734452b0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:04:be:5f:ec:7a:3c:e5:33:18:e7:80:dc:52:
                    42:50:b1:d9:d8:ad:ca:23:86:5d:dc:22:9e:ac:e5:
                    0f:0e:eb:b0:5a:48:6a:9b:41:d2:98:3a:3f:12:06:
                    fd:b4:5d:20:0d:99:01:d5:9a:5f:99:ed:83:0f:d9:
                    3e:fc:60:9c:ee:99:12:f5:63:fe:4b:67:51:30:7e:
                    bc:a2:ff:85:68:be:44:74:f8:69:aa:18:ec:70:45:
                    3e:40:85:84:f4:64:aa:c3:51:80:ef:9f:57:33:a1:
                    b8:60:09:1c:f9:da:fb:7a:62:e1:c3:d8:66:ad:e7:
                    a5:20:7a:0d:cf:fa:51:ae:63:20:6a:fa:64:77:ce:
                    74:1c:cd:1c:32:3e:8b:45:a7:7b:15:8b:ea:d0:a1:
                    f7:98:11:0c:7c:2d:c0:70:7e:ff:43:fb:2b:3e:de:
                    ea:95:80:a5:24:8d:77:08:b5:2e:73:20:c8:a7:cd:
                    8d:6e:4f:5d:7d:a8:cf:2d:66:d3:68:8f:dc:b8:5c:
                    90:98:bb:c4:fc:43:10:f3:c3:43:17:57:62:26:fb:
                    64:56:80:12:c3:f9:bd:26:18:66:b9:3c:8c:18:76:
                    5f:75:ed:bb:52:d5:9f:dd:68:79:d4:54:e5:d7:07:
                    8b:31:75:df:a3:28:3b:a4:84:b1:99:1f:96:a6:60:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7D:B0:46:13:46:BE:4F:9C:C5:F5:BB:D7:BA:5F:73:44:52:B0:DC
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:18:14:2f:54:6c:18:42:5f:02:c6:ba:6c:db:6d:64:d3:1a:
         fe:eb:da:29:84:06:dc:bf:a7:d2:cc:73:c5:fa:07:c3:b6:ad:
         8b:4c:8b:f9:66:0b:b9:19:68:22:00:11:34:1c:3b:91:72:8e:
         26:ef:42:b2:41:fa:1c:ee:5e:6a:cd:d8:1a:89:e1:03:f9:70:
         d4:c0:6b:fe:10:f2:cb:7a:3c:3b:e7:ee:d3:86:2d:98:54:c2:
         01:2d:fe:72:b9:0d:f6:76:44:bb:a9:69:04:69:aa:1a:e8:e8:
         ce:27:29:d9:1e:1e:37:e6:f7:a5:26:bb:81:36:33:a4:1f:01:
         32:75:03:23:5e:39:1f:f7:9e:d0:f4:38:46:55:36:fd:51:a4:
         88:f5:3b:29:64:aa:98:35:e3:60:6e:20:50:40:50:81:e2:3c:
         82:1b:a8:6c:18:8a:ea:2c:30:d6:f1:55:18:0d:61:d6:63:e0:
         92:ca:14:73:1b:2d:55:02:c1:f2:b7:24:83:57:d2:d2:9a:16:
         37:53:2f:d5:8f:ee:c5:f2:0c:4b:a3:6a:e4:2c:90:4a:a4:64:
         94:29:af:25:2f:35:de:6a:83:67:56:e5:f4:99:b1:c8:11:00:
         5b:7c:07:25:4c:4b:86:e7:46:67:b1:50:48:e3:c7:46:46:f6:
         ad:ce:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:39 2026 by rpki-client