Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File:                     quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier:          dee6NX017Y5P5cu3tHyBYUjUsh9K5lRzFckS9m67uFE=
Subject key identifier:   C2:17:FB:DF:62:D2:AE:56:01:9A:4C:28:B2:51:80:A5:71:D8:F7:F9
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer:       /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial:       019EBAD9526867056A72B283D3896E4EE8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number:          195A
Signing time:             Fri 12 Jun 2026 08:01:05 +0000
Manifest this update:     Fri 12 Jun 2026 08:01:05 +0000
Manifest next update:     Sat 13 Jun 2026 08:01:05 +0000
Files and hashes:         1: VQMozEw5e5cFbAbax7TNnFtChpk.roa (hash: kcI4JK6ZQqSjrwXa7nCut12JkcTP0x/T3dN3B6kDSUw=)
                          2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: izd1ylXOGjMM0cHx0QG9Duptaj5dba4n/8jrne7Tp/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:d9:52:68:67:05:6a:72:b2:83:d3:89:6e:4e:e8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
        Validity
            Not Before: Jun 12 08:01:05 2026 GMT
            Not After : Jun 13 08:01:05 2026 GMT
        Subject: CN=c217fbdf62d2ae56019a4c28b25180a571d8f7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8f:6e:13:12:fd:f3:0d:32:a2:d7:ab:c1:49:
                    22:ff:1c:d7:a7:b5:87:69:f7:a3:54:2a:00:db:9d:
                    0a:f9:b9:e1:16:2b:e9:6a:af:f9:66:c2:3e:e2:f0:
                    4c:f2:10:f0:6b:31:a8:21:25:db:83:86:07:b6:2d:
                    6c:b6:fb:35:e4:3c:c0:b1:55:c3:aa:95:43:f2:4c:
                    c1:66:6b:ee:a2:2f:1b:3a:98:15:d8:5b:31:07:f0:
                    dd:ce:b7:30:d5:36:c0:d1:e0:15:bb:88:9a:13:d8:
                    ee:37:0e:b2:2a:f3:1e:e7:9f:ac:2f:d4:32:cd:23:
                    cf:25:4e:b1:bb:3b:7e:88:4d:e6:46:1f:38:2f:9c:
                    0e:f6:27:9b:b7:c4:83:dd:65:ab:a7:44:be:2e:0d:
                    be:50:ea:23:5a:63:e6:63:4d:ba:c8:c3:64:42:dd:
                    15:5a:1c:f7:27:31:f4:c1:f8:0a:0b:37:a8:2a:b5:
                    1e:11:d7:d1:88:db:4d:fc:fd:f3:08:f2:d0:35:21:
                    51:98:a2:87:12:c2:6d:55:a2:8c:46:31:2d:83:af:
                    32:3f:8e:f6:e9:b7:64:84:8a:7b:e7:2e:cb:d9:73:
                    31:d0:15:f2:8a:20:55:78:00:c7:cb:10:78:6e:ab:
                    81:36:88:d5:3d:1f:78:93:6d:f7:87:2a:52:89:3c:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:17:FB:DF:62:D2:AE:56:01:9A:4C:28:B2:51:80:A5:71:D8:F7:F9
            X509v3 Authority Key Identifier:
                keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:95:0d:27:0a:25:ce:e9:8d:6f:f2:b1:8e:04:96:f4:33:bf:
         35:f1:b3:fa:0b:39:af:e6:2c:f1:79:0d:2f:1e:24:78:7e:fd:
         9c:7a:59:86:69:47:be:7d:9c:ea:a6:d6:ac:7b:e0:50:d8:af:
         1d:4c:7d:04:67:3e:40:4b:56:24:f1:65:82:c2:88:bd:0b:46:
         dd:72:39:6a:5c:b9:29:e8:3d:36:32:30:42:9f:1e:38:4a:24:
         90:2a:dd:bb:c8:0c:79:6c:50:99:af:09:53:fe:62:1e:21:cf:
         a5:1d:3d:9a:6e:c7:7a:06:7f:22:9f:b8:f7:a0:e4:49:e1:a6:
         87:71:aa:79:92:2d:10:4b:59:ac:0c:34:92:e5:d2:78:9b:b3:
         59:41:a8:f4:de:07:0e:c4:4a:b0:ec:52:05:ce:23:a6:14:2f:
         50:aa:15:49:02:67:6d:f6:2c:6d:5d:e2:75:b8:e1:f7:db:d3:
         33:af:0c:05:5e:42:df:69:2a:16:31:26:88:90:ee:11:a3:a2:
         6a:34:37:77:79:6d:8a:9a:77:85:d5:1a:45:f7:c4:d9:38:89:
         38:80:c7:8f:cf:77:d9:8e:96:44:ad:77:96:c0:ce:b5:9c:89:
         ee:4d:82:1b:65:ce:e4:04:78:49:67:26:45:fb:ce:47:31:fb:
         3b:4a:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:45:57 2026 by rpki-client