Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          EbzEPr0hwKFOP/r5ifkmw3N3LDYFqEO7gInO5Kll3VM=
Subject key identifier:   FA:1A:04:32:A6:BA:49:8B:85:D4:D3:A3:FB:65:E4:64:9B:37:4E:68
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       019EB98F03B6003F42FEFCA9551535CF1CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0D43
Signing time:             Fri 12 Jun 2026 02:00:17 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:17 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:17 +0000
Files and hashes:         1: 4YMSKNsUfIJZYY47MNVzndwjo04.roa (hash: 8oujs3evvYwGVLJbLnpR6K4HU81UoQYW70JF1WusQ7o=)
                          2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: TOIssMnfRbdn7EtktbQJSS5lvhfDHvhKQEUuUNXtcVk=)
                          3: UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa (hash: narBwfpb8RAcShxX1DzjbkkEFV1ZbklkMy2WAyEvk6Q=)
                          4: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:03:b6:00:3f:42:fe:fc:a9:55:15:35:cf:1c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Jun 12 02:00:17 2026 GMT
            Not After : Jun 13 02:00:17 2026 GMT
        Subject: CN=fa1a0432a6ba498b85d4d3a3fb65e4649b374e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:97:69:38:b1:f2:cd:ea:78:10:b7:66:82:
                    21:04:03:85:c1:ed:75:7c:da:87:8c:63:a2:46:40:
                    45:ea:18:3a:d3:1e:db:4a:4c:31:9a:8a:5c:39:2a:
                    80:03:aa:03:a6:4a:8a:a8:80:95:51:c9:3b:b5:e2:
                    ee:5d:5c:60:8f:b9:57:ce:3f:8f:3f:5b:14:25:14:
                    4f:2a:9e:a3:23:30:56:b8:cc:39:08:37:d9:5e:20:
                    3d:b5:db:0c:bf:03:02:53:42:f6:e9:4c:61:79:ac:
                    9c:90:ce:d3:a9:1a:78:c8:14:2c:43:34:ea:32:9f:
                    bd:f7:8e:ee:bc:76:4c:56:14:ca:c5:94:ab:c8:ff:
                    49:86:49:9f:d9:15:9f:73:dd:25:9e:03:bb:06:e5:
                    41:a4:f0:55:65:7c:d8:56:74:fc:6a:ca:bb:20:a1:
                    f4:80:8f:07:98:de:1d:58:ae:e0:59:7c:9d:fa:6c:
                    0b:24:c9:bb:13:4e:56:cf:eb:7d:db:42:f7:79:92:
                    58:27:55:48:c9:d9:97:62:4b:bd:d8:8d:6a:d2:8f:
                    9b:41:34:c7:58:7d:75:fd:84:29:ff:86:52:72:16:
                    44:9b:d6:6e:fb:14:df:3a:be:00:a4:8d:99:ff:6d:
                    5b:7c:af:0e:85:37:b0:2c:f6:79:df:6c:a3:4b:9b:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1A:04:32:A6:BA:49:8B:85:D4:D3:A3:FB:65:E4:64:9B:37:4E:68
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:72:42:23:39:5f:4c:75:ad:e2:25:3a:94:f8:5d:77:d6:
         a3:2a:7a:4d:dd:3b:61:bb:48:f8:b8:c9:df:8a:92:b7:87:84:
         b1:da:28:13:03:f3:1b:d6:1b:7b:61:86:e0:95:0a:82:a1:28:
         ed:fb:f5:b8:bc:52:31:74:25:a0:25:bd:b5:91:8e:27:e6:71:
         06:f7:7c:2f:1e:20:2d:24:f6:63:90:0f:3b:cd:0a:18:ee:6e:
         16:78:3c:86:55:ba:ce:48:8f:81:b6:c5:73:b7:6f:91:d1:f2:
         b7:c9:65:8f:c4:e7:6a:16:21:5d:89:28:cc:3b:59:df:24:72:
         49:3e:71:71:51:e4:9f:8d:91:c3:a4:ad:ba:a6:10:cf:3a:f6:
         4e:f7:d0:23:61:0e:f5:e7:c7:6e:7b:00:01:49:80:94:e6:02:
         bd:ab:d1:99:9d:a9:93:c1:15:81:c7:32:d2:c3:e2:ed:4d:7c:
         dc:9f:8d:f0:27:76:fd:f9:a3:4c:6f:ba:de:81:65:36:bd:7e:
         db:c4:06:d8:7f:2a:35:c7:aa:08:48:0a:56:23:8d:51:82:fe:
         44:ea:c3:a3:79:76:08:f8:9a:64:72:d0:c0:fc:1d:0f:d0:73:
         5e:e8:fb:c8:df:ce:33:78:e4:08:1a:46:25:ce:d3:dc:c7:48:
         40:57:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:04:40 2026 by rpki-client