Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File:                     QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier:          jPvQhxvSDbNVgcw9Q3yjt4WcDRJqJoS616li4ORzsjY=
Subject key identifier:   1E:39:E8:73:4C:46:71:3F:C2:D9:1D:BF:8C:3C:87:C6:B5:2A:68:BF
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer:       /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial:       019EBB467F5601B61BD8BD71327CA2A3F41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number:          0EB5
Signing time:             Fri 12 Jun 2026 10:00:19 +0000
Manifest this update:     Fri 12 Jun 2026 10:00:19 +0000
Manifest next update:     Sat 13 Jun 2026 10:00:19 +0000
Files and hashes:         1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
                          2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: 7NuSgZ3aInVivNrN4MGKgUTGSrAeaTvlzNLohi1xNIs=)
                          3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
                          4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:46:7f:56:01:b6:1b:d8:bd:71:32:7c:a2:a3:f4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
        Validity
            Not Before: Jun 12 10:00:19 2026 GMT
            Not After : Jun 13 10:00:19 2026 GMT
        Subject: CN=1e39e8734c46713fc2d91dbf8c3c87c6b52a68bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:9b:18:0f:5d:2c:29:92:76:46:b0:99:a5:
                    ce:19:a8:bf:fb:73:d4:08:13:39:89:e4:2f:25:73:
                    f6:7b:3d:22:4f:00:e6:83:12:a0:af:c5:d4:9d:3e:
                    32:84:fd:4c:3a:38:b7:b5:c0:ea:42:b2:ff:94:53:
                    66:6e:8a:cc:11:bb:4a:1d:ba:23:2d:bf:02:df:f5:
                    f9:34:a9:d1:66:eb:60:40:ab:73:fc:32:95:49:8e:
                    40:9d:3a:ce:f5:b9:8f:14:8a:f1:47:b3:fd:90:1d:
                    d5:a0:43:8d:a9:a2:0b:16:d1:04:65:ea:78:8a:73:
                    56:e8:f2:f9:d3:d7:55:25:b4:68:84:06:42:7a:ee:
                    6b:ef:1a:73:24:81:57:5f:70:a5:04:08:b3:45:78:
                    fd:36:90:29:d0:0b:51:d7:51:5e:ec:a5:4e:0d:99:
                    6d:b8:04:ab:49:54:fa:85:e1:83:07:7e:98:d0:c8:
                    12:37:10:b8:53:f6:98:f7:2e:e0:41:65:15:d6:32:
                    2b:56:9e:9d:47:70:bb:54:e4:86:fd:75:a0:d9:6b:
                    65:6b:12:d4:f1:a7:2e:4d:c1:85:17:0b:84:2f:58:
                    04:ef:8f:64:7a:1c:53:1c:f9:d2:03:1a:ef:c5:54:
                    ad:18:cb:48:65:bd:be:b2:c0:fd:df:e2:3f:41:61:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:39:E8:73:4C:46:71:3F:C2:D9:1D:BF:8C:3C:87:C6:B5:2A:68:BF
            X509v3 Authority Key Identifier:
                keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:19:9f:a5:24:4a:31:b1:bc:4e:dd:fe:39:a1:88:77:9b:
         5f:50:6b:e7:41:37:4b:38:d6:4a:1e:1a:08:de:eb:79:b9:49:
         1c:31:4a:cc:c3:ad:4f:bc:4d:33:8c:7f:e3:e7:96:1a:15:82:
         27:5c:00:e3:de:62:22:b3:2c:39:3e:db:3c:32:eb:ea:56:a9:
         3f:8e:ec:df:0f:da:62:cb:eb:af:1c:d3:40:8e:93:05:97:f9:
         e4:c7:fa:2a:2f:10:2a:0c:7f:eb:53:6b:9c:03:09:1c:95:4d:
         89:75:20:35:3e:85:b9:ba:8a:c5:d6:0c:c3:8a:7a:92:f6:af:
         4d:71:b4:e5:2e:48:14:40:ce:27:f7:9a:62:72:c5:9c:71:e8:
         d5:80:ca:9a:8c:05:e0:98:f3:e4:69:aa:45:14:c7:b5:50:45:
         77:8e:1f:40:9c:8e:b2:f5:b7:af:cc:d7:5a:6c:3a:e6:23:81:
         6e:42:44:e4:06:f5:00:f9:d0:25:a4:b8:df:51:1c:78:b2:f5:
         7d:6a:37:ea:94:0a:a4:b9:fc:58:cf:18:92:a4:86:aa:b5:ef:
         79:bc:c1:78:61:a4:04:a0:2f:79:86:53:e4:95:53:ca:77:7a:
         0d:46:00:9e:6b:38:b3:fa:6a:6b:b8:9c:9e:39:00:66:6e:68:
         ce:0a:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:12:58 2026 by rpki-client