Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File:                     qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier:          fHVBogku0y3P7s/QYZd5u8f+N5+i/v4JVwOFTQNQWzg=
Subject key identifier:   57:28:3D:17:43:15:10:F2:82:BA:21:68:3D:70:F9:12:8F:D5:D0:18
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer:       /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial:       019EC0DB01287E69A556DAD070A2AB283DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number:          01BA
Signing time:             Sat 13 Jun 2026 12:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:38 +0000
Files and hashes:         1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
                          2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: Pgd8di8W+0xvtVvY3Nh+ND9whCpiBgF+T3RM4OnSfoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:01:28:7e:69:a5:56:da:d0:70:a2:ab:28:3d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
        Validity
            Not Before: Jun 13 12:00:38 2026 GMT
            Not After : Jun 14 12:00:38 2026 GMT
        Subject: CN=57283d17431510f282ba21683d70f9128fd5d018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:dd:e3:37:6d:8e:c9:29:79:e2:c3:cd:d9:
                    9f:a3:d9:ef:84:cc:b8:2d:24:e0:a7:a5:d2:22:5c:
                    ff:d1:ef:ba:71:29:42:d2:3a:64:6b:be:5c:42:55:
                    02:dc:9e:b2:58:24:8c:14:53:7e:a0:16:99:5d:c5:
                    ad:ed:ff:85:55:46:10:df:66:17:72:0f:7a:e2:85:
                    df:df:c5:05:20:d6:d3:0e:fe:48:98:2a:77:76:7f:
                    fc:a0:5a:90:8a:38:05:76:1a:8b:12:93:aa:a9:0f:
                    eb:3a:4c:d5:2b:78:01:09:40:e7:d8:49:79:69:8d:
                    fd:36:dc:5a:93:96:20:d6:c0:ea:82:aa:37:83:c1:
                    fa:c0:3d:0d:e9:96:bb:8e:8d:d9:de:9a:09:01:c9:
                    f6:d0:fc:6d:34:dc:2b:38:39:1b:9f:40:a6:63:a0:
                    f7:18:cf:39:89:bc:61:ea:9a:d2:83:4d:eb:13:ff:
                    8e:77:4a:f1:ea:63:d1:b8:49:b1:52:e1:0f:24:94:
                    59:6e:aa:f3:bc:53:e1:22:27:fa:52:65:b0:97:f0:
                    9b:84:b7:41:5a:52:fd:2e:2b:8d:e5:f1:e1:ad:79:
                    0f:a6:3a:f4:36:dc:cf:6e:fe:14:14:ad:54:b3:96:
                    19:fc:0b:28:fd:4f:83:72:2e:16:22:13:f8:77:45:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:28:3D:17:43:15:10:F2:82:BA:21:68:3D:70:F9:12:8F:D5:D0:18
            X509v3 Authority Key Identifier:
                keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:86:f7:d5:33:4e:df:9e:57:74:c6:3a:06:c7:0f:a6:c3:41:
         79:8f:f7:ed:c1:f2:43:ba:ec:21:bb:09:a7:be:b6:4a:0f:22:
         32:b3:38:ba:f9:ba:df:9e:e3:ff:45:6d:52:cb:3b:e1:cb:2e:
         90:6d:36:0c:46:a7:17:32:14:a6:6d:05:35:26:c8:c3:b9:c8:
         1f:50:dd:2d:60:ec:56:bd:0b:09:31:75:e7:6a:aa:7f:20:4b:
         c0:e5:c7:84:c9:76:49:68:13:0a:9d:e3:f0:3d:0c:f6:bc:c4:
         27:d2:c7:ff:f1:0a:6f:78:05:6e:93:2b:71:6f:0d:6f:7c:9c:
         bf:6e:a1:a1:d8:37:9f:7f:b7:1d:19:c9:9b:e1:90:53:31:53:
         fe:42:83:32:b4:ff:69:e2:4c:39:09:3d:c5:ad:4e:74:86:7d:
         90:de:2b:19:06:fa:73:f9:da:f7:44:3e:52:16:a3:1b:af:c3:
         b1:31:0d:24:80:96:f5:e0:e4:82:4b:99:f8:2c:d8:63:2c:3c:
         36:92:cf:2a:82:15:98:5a:b6:51:4a:64:05:cf:a9:fc:9c:eb:
         63:d9:6c:c6:61:0f:fe:d3:64:d7:60:f7:31:36:04:33:de:40:
         6e:78:f5:03:7a:9c:6c:8b:52:b1:d3:b9:5d:86:7c:86:ae:bd:
         4c:64:94:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:47 2026 by rpki-client