Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File:                     4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier:          ojjLM3vrDH/rPNFrQoHu1SSo0CFYFIecsiBCNHLL2eA=
Subject key identifier:   AE:C4:6B:01:6D:68:FA:AF:B9:8C:D0:5B:94:1F:B9:8F:7A:26:82:AA
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer:       /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial:       019EB87C9610C985B2F9A934134FFB435866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number:          1957
Signing time:             Thu 11 Jun 2026 21:00:33 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:33 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:33 +0000
Files and hashes:         1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: CZnV1FeojGlePZsqHkL1fOeHxbQ2eJhnA89LHp0o0WQ=)
                          2: UdwPC5AdaFNXtHywAO0ry8S25cM.roa (hash: tBmGJBJCpxYDGJAJLW9uH/5FtF0sovEOEcwJbFRoFVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:96:10:c9:85:b2:f9:a9:34:13:4f:fb:43:58:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
        Validity
            Not Before: Jun 11 21:00:33 2026 GMT
            Not After : Jun 12 21:00:33 2026 GMT
        Subject: CN=aec46b016d68faafb98cd05b941fb98f7a2682aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:be:b5:dc:0c:a2:fe:e4:d4:6b:7f:cc:c3:
                    86:a7:ed:25:df:a4:cf:e5:e1:a5:5a:68:bf:fd:a1:
                    73:9f:93:71:e4:73:cd:df:ff:87:68:c5:61:64:ba:
                    bd:fe:06:75:15:21:52:2f:9e:88:a3:43:77:bf:98:
                    60:10:6c:e6:90:40:c2:13:c2:b7:be:73:28:88:67:
                    f6:3c:ce:28:85:02:1c:df:1a:b5:6c:fb:0e:8a:e7:
                    1f:06:b0:84:d9:37:35:69:d1:36:f2:2b:ed:96:02:
                    ee:8e:e1:05:0a:38:ee:f2:28:7c:62:4b:1b:1b:2b:
                    f5:c7:1d:d3:14:91:22:6d:24:bb:34:ef:87:2f:0a:
                    f7:40:f8:9d:af:e4:d5:1b:ae:70:c6:89:19:be:4e:
                    2f:70:43:3a:51:37:e9:61:fd:b3:81:af:0f:9a:af:
                    59:85:bb:f2:c6:37:6f:06:71:48:49:85:34:cd:16:
                    0c:09:b8:f2:a8:72:79:aa:54:32:ed:3f:6d:34:34:
                    2d:6e:83:f7:55:47:bf:e3:62:f1:8e:6f:69:45:7c:
                    4b:14:16:8d:c8:c9:08:31:d3:f0:b7:70:e3:4d:03:
                    d7:14:37:3b:53:a3:97:57:9b:cd:60:19:0b:29:a0:
                    cc:22:e3:b3:4f:e0:4a:0c:08:28:7f:77:47:f2:81:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C4:6B:01:6D:68:FA:AF:B9:8C:D0:5B:94:1F:B9:8F:7A:26:82:AA
            X509v3 Authority Key Identifier:
                keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:b8:99:ba:b7:e3:f6:7b:09:ce:bf:59:29:44:b2:1a:9e:
         52:c3:c1:09:e7:dc:85:5b:6a:c8:46:bb:c5:94:43:23:90:56:
         cb:26:b2:6f:13:7c:ac:6d:2f:03:bc:98:fb:78:83:34:83:12:
         57:e9:f4:58:7b:24:07:ee:a9:10:9a:7c:66:3e:61:90:bb:cd:
         ac:07:17:80:a9:f7:3e:0a:85:e4:d8:64:7d:07:cc:26:2d:b5:
         d3:f7:18:f7:53:17:13:00:9b:40:34:06:8a:da:93:21:2e:83:
         26:a6:1a:03:d5:25:9e:c5:ce:e7:9e:cd:33:80:65:fb:12:c3:
         46:14:7b:50:38:00:30:8d:90:09:b7:7b:95:cc:7c:61:16:f4:
         30:39:a7:33:64:c4:23:c0:81:52:ea:40:00:94:69:b5:89:c8:
         ae:49:1c:7c:65:56:5e:68:58:6c:2b:31:ec:63:82:e6:5b:e9:
         18:a7:03:c5:8e:49:e0:80:a8:e9:5a:fa:9b:bf:ab:7d:54:80:
         87:70:e1:3a:a9:90:0a:5f:89:ac:b2:fe:5c:37:cf:b3:0f:5e:
         48:5c:91:78:e8:27:b2:71:c8:e9:aa:ce:08:ba:f5:21:2d:2d:
         f2:0c:c0:da:c0:36:45:ca:7d:8f:d9:4b:4c:7c:e0:af:cb:7c:
         ea:f1:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:16 2026 by rpki-client