Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
File:                     qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json)
Hash identifier:          sg0ZtYdvUkwHhN77qBlTfmmRCC/WrjtkdSLOS7+4/7I=
Subject key identifier:   1B:5C:A0:FC:28:D2:AB:C3:F4:C7:89:EB:8B:6E:EA:E0:E5:5B:5F:5A
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Certificate issuer:       /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial:       019EC06DEB05CC15DD82290420AA61D5FD9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
Manifest number:          1156
Signing time:             Sat 13 Jun 2026 10:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:29 +0000
Files and hashes:         1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=)
                          2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=)
                          3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=)
                          4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=)
                          5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=)
                          6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=)
                          7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=)
                          8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=)
                          9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=)
                          10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: GNXFhu1gRXNZ5AOSljwWNCRjClqsnBqxgmmFT+b61iM=)
                          11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=)
                          12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:eb:05:cc:15:dd:82:29:04:20:aa:61:d5:fd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
        Validity
            Not Before: Jun 13 10:01:29 2026 GMT
            Not After : Jun 14 10:01:29 2026 GMT
        Subject: CN=1b5ca0fc28d2abc3f4c789eb8b6eeae0e55b5f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:bb:99:8e:4b:b2:98:85:11:99:8b:9b:f3:
                    c0:db:fb:d7:df:2b:f8:35:24:51:47:81:f3:d2:a2:
                    ec:e3:34:ab:58:a2:24:52:a4:e2:e6:56:56:83:ca:
                    2e:85:d8:e7:82:66:82:7b:ab:ce:2a:46:36:a7:1e:
                    47:55:0e:7a:80:f1:78:b1:81:da:5c:85:0a:aa:30:
                    f4:46:7a:26:00:dd:9d:0e:e4:5c:0d:b2:81:88:3c:
                    1f:c5:53:11:2c:76:d3:e0:7c:f8:02:ef:95:5f:b8:
                    1d:07:83:8c:14:81:92:af:19:40:3a:8c:4f:52:bb:
                    31:8e:8c:eb:3a:ff:ce:48:e1:b6:26:6b:ff:88:b1:
                    b6:07:5d:ee:05:28:d8:67:a2:f2:54:31:ab:e9:79:
                    d9:0c:de:96:47:14:6e:ca:44:ef:02:96:81:10:50:
                    81:46:2a:fd:c3:eb:56:bf:b2:58:7e:86:dd:a3:45:
                    c1:47:63:7b:6e:87:27:ee:42:47:0b:6f:01:72:77:
                    ae:5c:bb:9d:d6:c6:3d:d0:77:21:83:19:e0:85:10:
                    df:90:d8:0e:16:8d:36:17:b1:8c:c7:f9:de:bb:8c:
                    99:ae:9f:0c:38:01:3a:da:a7:bc:f9:2c:cf:ff:40:
                    7e:2e:21:1b:9f:40:89:1a:0e:d6:9f:50:89:c8:0a:
                    5c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5C:A0:FC:28:D2:AB:C3:F4:C7:89:EB:8B:6E:EA:E0:E5:5B:5F:5A
            X509v3 Authority Key Identifier:
                keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:64:c4:7a:6f:dd:9f:64:9f:4e:88:03:d1:2e:23:ff:b7:7f:
         48:f4:59:f7:b1:33:d1:82:d5:3f:39:26:fb:aa:93:9b:5c:c0:
         03:43:49:e3:6e:51:d8:8f:80:fe:bb:19:b8:85:2f:24:70:98:
         6b:ab:e5:46:79:a2:72:ce:b3:2a:64:00:05:c1:c2:de:c6:29:
         cf:d8:a3:32:84:9e:41:10:2d:26:ea:41:7b:95:9e:1b:a2:b8:
         a4:7f:33:89:0e:54:93:95:a9:22:c9:56:c9:28:d3:0c:0b:13:
         c0:16:96:84:05:c6:ba:f1:05:27:9e:64:cd:b4:47:64:79:46:
         25:45:5d:6e:5a:35:21:55:09:d7:fa:d2:fb:fb:6e:50:b7:04:
         48:ca:9c:c2:9e:e4:f5:ce:83:a0:be:ba:7d:ed:22:87:c6:ab:
         fa:a5:ec:2a:36:22:41:89:c7:0e:42:a0:1c:be:16:ac:7d:e1:
         bd:62:a3:a9:e3:c8:3b:c0:42:9b:1d:2f:f8:ca:8e:ef:51:29:
         e6:8a:e7:d6:08:17:45:ee:60:38:78:d7:66:26:59:6f:27:5d:
         ad:af:23:d0:8e:1e:4a:dd:a3:d1:a7:01:2c:48:cf:4f:1a:a7:
         9b:74:51:fd:84:be:cb:83:87:17:f9:13:48:a1:bf:4c:ee:50:
         47:99:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:58:44 2026 by rpki-client