Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File:                     q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier:          qQRll1oI27hh0PWnjmfs+5NKCF2kfC0TNl1/nrTz44g=
Subject key identifier:   88:51:93:C2:1E:F8:71:59:46:EC:CA:0A:24:25:9D:1D:86:AB:10:B3
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer:       /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial:       019F137858276F1656189227F5071DAC73F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number:          0984
Signing time:             Mon 29 Jun 2026 13:01:21 +0000
Manifest this update:     Mon 29 Jun 2026 13:01:21 +0000
Manifest next update:     Tue 30 Jun 2026 13:01:21 +0000
Files and hashes:         1: QmtTzyy0B6VINllZo5hoGV_0tME.roa (hash: Kss8BrAGEQwDauIv9e80R/ByqBQjOIdQoGwsK/YXN9o=)
                          2: YasjItyYLr7ldXZzoAE4Tqx_wK0.roa (hash: OuG7rFmV3hcieE9XEH+njL33ISFbow8zG5iA5JYMNV4=)
                          3: nYyVLm0gMDde0qblfT3ncHKAnz8.roa (hash: jNbahQjR6FvDEsOWUHlprHyKe5vIEPV9UxOl9Q91iVk=)
                          4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: THmUlZgJCTEHgjTezkbKTcJG5mvZegG4LAgHtf3tfBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:78:58:27:6f:16:56:18:92:27:f5:07:1d:ac:73:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
        Validity
            Not Before: Jun 29 13:01:21 2026 GMT
            Not After : Jun 30 13:01:21 2026 GMT
        Subject: CN=885193c21ef8715946ecca0a24259d1d86ab10b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:3a:dc:e7:4f:21:62:4d:e0:cb:1e:9e:cd:
                    43:d5:01:b7:37:0e:8b:ac:31:42:a1:ad:76:42:85:
                    d5:c9:d6:da:2d:68:de:b2:75:7b:e4:13:ad:9b:ae:
                    14:9b:d9:e1:7f:cd:7b:64:8b:56:ca:63:a5:79:76:
                    5b:96:69:91:ae:2c:21:4c:78:97:2c:ff:a8:a2:01:
                    23:11:ef:d6:38:e6:25:75:a6:3c:6c:48:f7:66:9d:
                    01:d3:69:b1:68:c7:b4:06:6b:9e:76:7e:23:96:07:
                    31:b0:58:bc:0a:35:4e:79:00:1c:3d:4a:4d:8a:aa:
                    00:82:e2:c4:71:19:bf:56:b3:26:25:7a:bb:17:bb:
                    89:01:28:97:8e:30:83:5d:4e:ff:11:3c:e3:13:11:
                    45:b4:23:d2:23:b2:7b:b9:41:1e:2a:c1:50:dd:4b:
                    82:f0:15:08:a1:2d:60:6d:7c:5e:fa:41:00:2a:71:
                    60:39:55:49:6b:3d:2d:f6:86:46:41:01:b9:b9:3a:
                    49:ac:92:70:64:40:5a:0a:4a:07:5b:cd:02:77:d1:
                    d7:cf:cf:cd:11:fe:31:62:13:3f:c5:b3:b0:45:d4:
                    34:02:cc:9b:57:24:37:7b:3e:c7:1a:53:b1:8b:2f:
                    18:19:da:e3:23:a6:f0:27:ad:03:7c:00:24:b1:40:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:51:93:C2:1E:F8:71:59:46:EC:CA:0A:24:25:9D:1D:86:AB:10:B3
            X509v3 Authority Key Identifier:
                keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:01:e6:39:ca:a5:df:9c:68:2d:d8:54:d0:75:e5:b8:e8:e1:
         2f:de:9c:59:1b:69:94:7e:50:d8:c6:d7:ae:54:37:87:00:29:
         ea:f0:6c:f2:b4:23:7e:e0:aa:13:ae:73:23:8e:bc:e5:9a:0c:
         ca:5b:9b:2e:fe:a6:3a:79:64:ab:c1:fc:16:3a:88:e6:2f:8d:
         34:ab:5a:20:32:8d:cc:c7:e0:a8:60:16:12:28:37:54:f0:e1:
         c6:96:ea:f3:16:b5:cf:22:d1:b4:20:2e:e8:bc:24:dc:96:a2:
         51:a7:94:24:a4:1d:1d:86:f2:f2:a9:ea:4d:0a:a1:8d:55:87:
         fb:0a:de:dc:b3:d9:57:a2:f3:b6:83:f1:c6:21:39:4c:71:d6:
         cc:86:ea:b3:17:30:ca:72:0d:30:9a:ea:8f:81:33:4e:31:44:
         86:3b:3f:37:4e:35:1c:2f:80:8a:11:40:44:93:8b:65:f3:70:
         96:de:6a:99:36:9c:88:d8:dd:cc:dd:94:7c:2c:d0:a9:68:6e:
         8a:62:56:e1:67:f7:04:01:0e:92:5c:80:1a:3c:65:85:c4:62:
         f9:37:38:61:ba:b4:de:47:b8:6a:b6:ad:2b:f2:71:b8:00:e7:
         fb:eb:95:ee:4a:97:a1:6b:ad:cd:7d:ec:15:3c:a2:20:cb:fb:
         39:9c:f8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:34:40 2026 by rpki-client