Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File:                     QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier:          OZAIqoy8uxBDfFQ2DGIroZ9uwfffFbseCgGTOVskm1k=
Subject key identifier:   B6:F3:8B:66:27:97:23:33:2D:A8:98:FD:AD:B4:96:0C:86:9B:26:A2
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer:       /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial:       019EBEB65BE617074B8650DF521AFCDC02CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number:          0F77
Signing time:             Sat 13 Jun 2026 02:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:22 +0000
Files and hashes:         1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: 11jenTeaS8uusm2pXaFX/SE9muycoFh+TDgZXd/nXZg=)
                          2: yaEEybz2NfCWEApyu2Dzx2yLpcI.roa (hash: j2pzI49xHsyv/Ol3MBefWz6almNV2xHEmt1n4qjR/Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 02:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:5b:e6:17:07:4b:86:50:df:52:1a:fc:dc:02:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
        Validity
            Not Before: Jun 13 02:01:22 2026 GMT
            Not After : Jun 14 02:01:22 2026 GMT
        Subject: CN=b6f38b66279723332da898fdadb4960c869b26a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:0c:57:85:79:96:96:da:35:be:fa:30:78:
                    56:43:7c:23:2b:45:95:ff:cb:5d:d9:eb:e3:6a:e6:
                    b9:27:8d:9e:da:1b:e9:42:5a:dc:97:37:93:e1:fb:
                    6d:35:59:e6:eb:d9:93:07:75:86:87:3c:0f:ca:50:
                    00:3e:b0:37:78:6a:54:fc:d2:f9:16:54:63:63:f5:
                    06:f0:a7:1e:27:e7:0a:6f:31:08:79:c6:b2:91:5f:
                    9c:0b:12:50:05:21:6d:83:a6:ed:2a:86:04:34:b9:
                    ca:8b:a0:37:41:6b:e4:c5:65:cc:95:41:a1:db:11:
                    c7:74:18:b7:82:58:ea:06:09:b4:42:a2:bd:92:05:
                    6f:eb:f1:01:fc:bd:8c:6d:44:6a:c5:ba:47:ad:02:
                    5c:a6:15:63:16:b8:12:9b:db:5a:51:e2:63:55:b4:
                    18:21:a6:b1:5b:65:56:cf:6b:dc:f6:a0:10:d4:68:
                    3e:d0:10:b2:61:4c:1e:bb:66:46:ab:49:b1:13:14:
                    80:3b:a7:3e:b5:15:cd:3a:71:f1:29:18:5b:42:c5:
                    1e:fc:7c:b9:51:a7:37:33:18:b7:f0:e0:e7:3a:43:
                    d1:ca:d5:f5:0a:ae:a6:48:7f:7c:f4:c4:4a:42:b3:
                    b8:e0:91:36:2c:bb:c0:c2:1e:98:87:fd:39:d5:aa:
                    05:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F3:8B:66:27:97:23:33:2D:A8:98:FD:AD:B4:96:0C:86:9B:26:A2
            X509v3 Authority Key Identifier:
                keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:29:95:b3:4d:86:4a:72:95:aa:09:d7:49:0e:2f:f0:f2:
         e9:c7:99:e0:29:c9:26:30:da:bf:b7:36:77:e0:34:42:1c:31:
         31:e3:5b:05:a9:a5:61:90:9e:51:2c:17:79:d5:08:c4:2c:0e:
         e1:a4:d0:ff:6e:06:f1:16:d2:ac:36:2a:8f:7b:40:9e:99:a1:
         8c:94:ea:6b:93:eb:a8:88:8b:f2:81:9c:96:ad:22:2b:20:89:
         8e:6a:e8:3e:91:cb:a8:26:78:c2:30:44:af:40:d8:e6:b7:a9:
         67:dc:ee:60:bb:06:3b:2c:ca:35:54:ad:5a:f1:80:50:05:ae:
         d3:34:bb:a4:02:9d:a2:d5:c2:9c:5a:21:af:46:c4:a7:c3:9b:
         84:50:30:3f:dc:4f:c3:77:15:e7:0e:d4:d0:d1:1c:55:7b:d6:
         0f:31:fb:87:48:1c:f6:3b:69:bd:1e:9e:3a:de:0f:ae:b9:ff:
         73:ee:e6:70:31:d0:1e:ca:48:90:ee:af:bf:b5:90:1a:d7:d4:
         7a:50:a3:ad:27:43:e5:26:2e:f4:c7:c7:29:d9:a4:ce:96:52:
         cc:d4:d2:a7:40:c4:9e:3c:40:27:56:9f:77:1d:8b:3f:e3:d2:
         a9:05:05:a2:b5:28:2b:e3:1b:f5:ee:df:d2:99:a5:7b:c9:a4:
         93:97:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:40:14 2026 by rpki-client