Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File:                     Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier:          0yldiBK+Y3D0/Une8gJf4iyZhsWuuq8x2jPFdTdpsOk=
Subject key identifier:   A0:20:86:27:72:BF:C1:43:84:09:A9:FB:41:C7:CD:48:5B:EC:1B:66
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer:       /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial:       019EDDD2EBECAA413C48454E6D0AE612E43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number:          1443
Signing time:             Fri 19 Jun 2026 03:00:48 +0000
Manifest this update:     Fri 19 Jun 2026 03:00:48 +0000
Manifest next update:     Sat 20 Jun 2026 03:00:48 +0000
Files and hashes:         1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=)
                          2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: xNOSo+H+ZhEOCmulCp0E9JPraLUAMQnxPja1LcTbSUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dd:d2:eb:ec:aa:41:3c:48:45:4e:6d:0a:e6:12:e4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
        Validity
            Not Before: Jun 19 03:00:48 2026 GMT
            Not After : Jun 20 03:00:48 2026 GMT
        Subject: CN=a020862772bfc1438409a9fb41c7cd485bec1b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:15:07:81:f9:fa:1a:17:1c:f3:2d:c0:fb:f8:
                    43:1e:fe:9c:23:11:8f:3d:72:26:a5:c0:1c:61:80:
                    b8:f1:88:1f:05:16:2d:de:d0:a5:57:06:24:b7:f9:
                    92:c7:89:f7:85:83:2e:c1:bb:af:92:07:04:1b:a7:
                    6c:07:83:cf:e2:75:30:d4:69:1c:09:ea:3e:36:dd:
                    2b:55:0a:71:36:c8:53:4f:7b:a5:dc:45:7d:4b:c3:
                    9a:b9:8f:1f:d3:24:49:32:57:3e:15:63:4d:2f:e3:
                    32:bf:3d:9a:64:8b:26:cd:44:43:54:47:c9:5d:cc:
                    71:7f:9a:4f:bf:7a:9c:d2:3e:82:01:bc:df:04:e5:
                    7f:16:6c:b0:23:c7:dc:42:e3:65:f4:5d:76:0d:a0:
                    04:7d:53:70:ca:bf:c2:d3:8b:90:cd:26:71:35:93:
                    09:65:4d:ef:02:9e:27:12:ca:3b:07:9a:1a:9c:73:
                    ad:b5:1b:76:19:74:76:58:6f:5d:fc:ba:9f:82:c9:
                    8a:e8:87:2b:ac:d4:e4:e1:95:02:81:c2:0a:d1:1a:
                    2a:55:4b:02:21:22:5d:21:08:07:77:d1:11:2f:53:
                    f4:2a:9c:c5:fd:ca:31:1c:a6:19:71:e3:fd:9e:39:
                    1a:2f:a4:d8:79:8f:09:e5:ee:ca:e2:e0:75:cd:3e:
                    95:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:20:86:27:72:BF:C1:43:84:09:A9:FB:41:C7:CD:48:5B:EC:1B:66
            X509v3 Authority Key Identifier:
                keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2d:12:de:06:b7:d9:8d:f1:95:e4:c9:be:3a:42:74:68:6b:
         be:ac:54:96:c0:05:15:57:a0:67:ff:9c:7c:4f:29:d2:3b:a0:
         d1:9b:02:b9:2b:fb:c0:f4:e0:f9:d8:18:33:59:1a:6f:ea:1a:
         ff:9a:b7:8b:5d:78:1e:90:67:fb:54:ff:19:08:bc:fa:e8:76:
         36:6c:b9:cc:11:7e:dc:69:6d:c7:09:0a:e6:51:66:95:69:5c:
         bb:09:2e:5a:38:13:c6:9d:5d:ca:b9:b2:63:e6:3a:19:fc:f0:
         97:f4:5a:70:0f:44:67:0a:a6:82:2f:49:73:43:9d:76:62:a1:
         d4:88:cc:63:56:d0:55:b7:81:8d:20:0b:e7:0c:29:73:ab:65:
         5c:ad:2f:b0:73:41:c1:b1:15:5e:f2:1c:b6:7e:49:cb:68:d4:
         78:a7:33:12:d7:31:e8:a2:ff:da:3b:31:a2:0f:56:53:43:85:
         2c:a1:21:f6:e3:6a:c7:a8:71:0c:77:e8:85:b1:d7:95:81:78:
         9e:3a:31:ec:03:f0:5e:46:ca:30:89:02:af:26:dc:fc:16:6a:
         a6:fc:07:47:50:61:f3:9f:29:76:a7:f5:e8:ba:40:0d:34:d9:
         8b:7c:a7:f1:b7:06:b9:f0:b6:49:ae:d3:b8:e1:be:37:c8:8b:
         86:98:ba:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:17:46 2026 by rpki-client