Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
File:                     bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json)
Hash identifier:          ts3C9sq3Jh3RfXjOi6cvhMLShpahzv/7bdfprhzku8Y=
Subject key identifier:   7D:80:C4:6A:64:B4:D9:45:48:1F:6F:8D:54:95:58:3C:B4:96:9B:99
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Certificate issuer:       /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial:       019F122E7E2E047D0F2C63CE1790266B6E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
Manifest number:          16AC
Signing time:             Mon 29 Jun 2026 07:01:04 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:04 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:04 +0000
Files and hashes:         1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=)
                          2: 2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa (hash: JPioNw406pRxJydsBBDsLTocLaIvgiBjIbhi/i3xRcw=)
                          3: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=)
                          4: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=)
                          5: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=)
                          6: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=)
                          7: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=)
                          8: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=)
                          9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: cpZXfoC2B6aS4VZZ6/WNKgDoX8UVKfAv0/PBUFhB9zE=)
                          10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:7e:2e:04:7d:0f:2c:63:ce:17:90:26:6b:6e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
        Validity
            Not Before: Jun 29 07:01:04 2026 GMT
            Not After : Jun 30 07:01:04 2026 GMT
        Subject: CN=7d80c46a64b4d945481f6f8d5495583cb4969b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cb:30:c2:01:7a:98:77:03:0d:be:9b:83:be:
                    b2:f7:c1:01:2c:a7:56:71:8d:ec:15:24:54:43:73:
                    bf:49:fe:a4:37:dd:a7:61:be:ff:7f:f1:54:3b:7f:
                    cc:30:81:86:de:b6:c4:25:21:da:5d:99:87:29:99:
                    35:b4:df:de:7d:a5:aa:20:55:8d:22:85:5f:9a:80:
                    7a:c2:78:eb:5c:90:2a:9b:13:63:1c:c3:5d:0f:86:
                    73:f7:ea:44:8b:30:b3:5d:e2:83:6e:85:3e:17:3e:
                    73:87:d9:f6:36:dd:d7:45:b7:e0:53:fc:41:ce:1e:
                    41:10:b1:e8:f1:ba:2e:64:d3:5d:61:ad:e7:ef:e4:
                    93:f5:fe:0d:60:92:ab:cc:4b:d9:1a:62:86:f5:58:
                    21:18:87:b2:b2:19:88:bf:b2:72:1f:fa:ee:59:ca:
                    f4:b4:bf:c3:dd:e1:70:3e:22:d8:73:c8:e6:50:13:
                    d3:8e:39:f7:65:e0:0f:08:ae:54:6f:c9:c9:68:e4:
                    1e:fd:d5:34:d8:a8:b7:12:73:a6:66:ec:b6:8a:a2:
                    7e:2f:f6:57:da:7a:10:48:1c:42:22:eb:36:b4:06:
                    41:69:cd:c1:68:9b:c5:a1:a8:13:25:95:5c:a9:e5:
                    27:37:24:c7:bf:49:aa:13:e7:2e:fe:b1:01:3f:5d:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:C4:6A:64:B4:D9:45:48:1F:6F:8D:54:95:58:3C:B4:96:9B:99
            X509v3 Authority Key Identifier:
                keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:74:43:e7:31:68:1a:95:7a:fb:ef:0b:6f:c1:f3:86:08:eb:
         16:ad:64:fc:d4:81:99:d7:dd:5a:ba:9e:9c:ab:2d:e9:f8:74:
         ef:a6:c4:02:21:3e:28:2e:ce:c6:07:9e:4a:f9:db:0d:b3:d1:
         92:cf:e8:e0:50:87:19:7b:1b:06:96:11:b0:92:99:89:9b:96:
         a5:56:50:9e:4f:18:52:f1:2b:0e:c7:34:85:d3:36:af:9c:9c:
         6c:ae:ec:0e:7e:6a:34:b2:e5:2a:e4:3b:e0:a9:49:15:ac:4a:
         6a:83:55:d7:ba:31:14:eb:84:63:7a:d2:2c:f7:16:84:e7:4c:
         f7:3e:e7:f4:1d:24:03:27:79:a4:44:0a:7f:e1:eb:14:a1:80:
         09:d7:1b:8a:25:25:27:90:ff:cd:5c:bb:b7:b8:8d:91:02:d0:
         c0:a4:87:55:de:60:ba:9c:e7:37:a0:66:b4:1b:a5:1e:40:e3:
         41:35:3b:ff:e6:38:7f:fc:a4:b5:9e:a3:39:25:20:9a:b4:af:
         d5:62:93:7f:77:88:81:d7:2b:da:ba:fc:f3:40:3c:b8:47:73:
         47:73:7c:05:c8:d0:86:4b:a7:f0:ab:f9:e9:55:93:6e:a5:d7:
         cd:aa:29:ce:6b:77:4b:b4:3f:10:dd:cd:e4:d1:60:bc:45:3a:
         41:8f:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:09 2026 by rpki-client