Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File:                     QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier:          6wwWquUXKCwlw5ComD2SbAGmtqe6hjLjm2BP+6eyggM=
Subject key identifier:   75:0E:1F:7B:C7:7D:15:A7:2B:DE:AF:7E:6B:31:2A:B6:77:A6:A1:1E
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer:       /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial:       019EC06D10AFBE9E02C471804336F7997394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number:          0688
Signing time:             Sat 13 Jun 2026 10:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:33 +0000
Files and hashes:         1: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: Ea6W4pyEF5XzLEjtRjENFmlBIIePE2DyhwKiNm89Gis=)
                          2: lqPB-_tpvjZaRMURMIYlaL-x7v4.roa (hash: PwPNHJ6WdN+tYHjQQVUmAufUKj9CcNQAjnCYOsVYIJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:10:af:be:9e:02:c4:71:80:43:36:f7:99:73:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
        Validity
            Not Before: Jun 13 10:00:33 2026 GMT
            Not After : Jun 14 10:00:33 2026 GMT
        Subject: CN=750e1f7bc77d15a72bdeaf7e6b312ab677a6a11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f5:1c:0e:ce:ab:ff:27:cc:0e:a3:cd:2b:15:
                    70:36:90:a6:ba:75:2c:c3:55:cc:6d:0c:9d:05:02:
                    7d:4a:4d:31:07:6c:59:a0:aa:92:ca:a3:30:29:14:
                    bf:bb:3d:db:33:76:09:39:80:aa:e0:06:ed:25:8f:
                    0c:2f:24:ef:de:98:48:e5:2c:06:51:86:8c:a5:71:
                    41:0a:ff:22:7d:04:8d:75:7e:9e:f0:15:7b:be:b0:
                    d8:cf:34:36:e5:33:02:16:09:10:a7:3f:6c:68:f6:
                    b4:cb:e9:33:45:07:63:87:d8:d8:2e:39:af:92:ef:
                    45:a8:2c:08:9d:98:2f:c3:45:10:b1:60:7a:f3:ba:
                    2e:9c:18:46:08:ad:a3:6b:1c:86:78:eb:da:08:54:
                    c3:a7:41:fd:f5:f2:32:6c:d3:a4:3d:ce:8d:68:09:
                    56:67:19:0f:0d:95:24:a5:c6:3e:f1:64:bd:de:d3:
                    ca:46:45:f7:da:c7:00:7e:0e:5c:8f:81:8c:91:f2:
                    9b:11:34:d2:f0:54:2d:c7:b5:43:c6:02:42:5b:19:
                    1f:90:43:3b:bc:75:a7:43:e9:f4:9d:dd:24:f0:05:
                    a4:e2:97:d3:76:57:7c:ea:33:b0:f8:55:d1:38:47:
                    a0:f9:58:5c:a7:e1:04:07:ff:f4:a1:c6:24:79:14:
                    e1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0E:1F:7B:C7:7D:15:A7:2B:DE:AF:7E:6B:31:2A:B6:77:A6:A1:1E
            X509v3 Authority Key Identifier:
                keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:72:e0:5b:12:47:4f:21:e2:f3:22:e9:6b:ab:77:5b:46:
         06:f8:24:ad:68:c2:71:de:40:09:a2:4d:c8:ba:e2:cd:c5:51:
         4b:35:f6:d1:34:93:05:43:d6:56:af:3b:ff:e5:bd:e0:7f:30:
         c0:62:b3:71:f5:cc:37:b1:e7:e2:d2:03:03:a9:3d:f3:56:8f:
         25:e2:55:0c:50:dc:99:41:c9:b7:90:0c:63:69:2a:c4:51:a3:
         d4:53:07:c2:f3:a1:63:8d:be:20:d1:1a:e4:4b:ef:49:d0:56:
         e2:18:6c:9e:40:ce:a6:1f:e3:5b:fa:e0:ff:51:9f:c9:25:82:
         d9:72:47:0f:99:2e:09:a8:87:7f:bd:e2:da:7d:01:91:30:fa:
         96:b5:a0:c7:bd:57:77:05:b6:5b:e8:96:de:eb:d0:31:14:b1:
         14:76:32:95:c2:ed:40:80:d5:4f:f2:60:6e:06:51:6f:93:af:
         38:5f:45:7d:34:8a:13:1a:d6:16:7f:65:b0:5c:32:5d:fe:2c:
         2b:34:da:18:9f:02:37:4f:b2:5b:9b:8c:ef:20:30:0e:93:0c:
         4c:62:42:76:59:5e:21:ca:17:b5:03:92:41:c2:95:4b:9b:5f:
         dd:d9:c3:cf:1c:80:12:e8:bf:22:c8:b5:35:6c:47:96:a1:ff:
         12:97:4f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:05:37 2026 by rpki-client