Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File:                     4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier:          iNT9QvsNTA3H1wMv0gs4RoOop+w3E0W4sncv+XfvLpg=
Subject key identifier:   34:6E:C9:08:B5:4E:20:78:93:80:07:5C:4B:02:B3:C9:55:13:72:B9
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer:       /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial:       019F18D6CF5A3B000A3C3D51DA92E83ACCBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number:          09E9
Signing time:             Tue 30 Jun 2026 14:02:38 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:38 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:38 +0000
Files and hashes:         1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: +5ajgKF4/XCkSO+GZ1q9BMU0m8Rwv32A9z6kaFvt0Mc=)
                          2: VBelpQwcAQaQvThvEwysdwbgrak.roa (hash: UGGt4tB1S8FTbx+5vNuFXFdkEAnx40jxbwqWiMzAMAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:cf:5a:3b:00:0a:3c:3d:51:da:92:e8:3a:cc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
        Validity
            Not Before: Jun 30 14:02:38 2026 GMT
            Not After : Jul  1 14:02:38 2026 GMT
        Subject: CN=346ec908b54e20789380075c4b02b3c9551372b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:5f:6c:5f:40:05:76:c4:5f:57:82:74:80:
                    06:9a:6d:e1:61:82:26:de:e6:a3:6f:a1:a3:a9:20:
                    d2:7b:2a:62:b4:85:b1:e4:99:cf:1a:1d:f4:e8:dd:
                    95:fe:bc:2e:5b:e0:cb:2a:5d:e1:86:29:92:ca:53:
                    09:ee:fe:01:49:94:6d:22:b9:10:7b:0d:12:8b:8d:
                    1e:10:72:f7:7a:03:7c:54:92:ef:5e:16:d2:7e:0f:
                    50:41:22:51:69:e2:07:a3:2c:dc:1f:d2:cf:db:e3:
                    33:31:8b:e8:29:ca:a8:74:24:51:09:7b:9c:e0:2d:
                    39:75:2f:36:90:a6:e2:6d:f1:31:7a:6c:d0:3f:7e:
                    12:ed:7e:4d:3a:b2:2b:6a:78:e8:1f:3d:d5:27:65:
                    53:0c:de:3e:c5:ca:1d:cd:9d:86:0c:0b:e4:e8:8b:
                    3a:0d:8f:00:49:cb:41:49:69:3c:09:97:af:09:0c:
                    55:b2:94:54:08:28:2c:68:bb:36:6c:b1:ee:8e:2f:
                    9b:b5:05:77:f3:32:78:50:e3:4a:06:b2:52:64:34:
                    2b:cf:ea:cc:0b:84:cb:b9:d6:2c:fd:75:af:96:16:
                    c9:ef:cb:90:9f:b0:72:35:b8:49:bc:25:59:41:8e:
                    0c:13:34:cd:9b:20:9a:4c:43:d5:72:83:4f:95:85:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6E:C9:08:B5:4E:20:78:93:80:07:5C:4B:02:B3:C9:55:13:72:B9
            X509v3 Authority Key Identifier:
                keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:78:88:da:a1:01:26:8f:62:57:78:68:91:41:dc:e7:c8:c5:
         04:a6:9b:e6:ad:15:cd:b5:dc:e8:93:08:9d:86:ca:da:5c:7b:
         7b:64:44:8a:88:d8:81:f3:6b:cb:96:07:e4:83:30:78:6f:da:
         47:1d:85:d8:a0:bd:21:20:3b:d7:0a:9d:5c:d1:8b:35:a9:95:
         26:66:01:0e:41:06:57:8e:98:c3:ca:38:9b:42:be:76:d2:75:
         22:f0:9b:50:80:93:61:8b:0d:bc:30:4f:50:ae:d4:d6:0a:d1:
         ef:34:23:77:47:36:ce:43:ea:19:be:df:54:4f:17:bc:65:6d:
         99:12:9f:a3:ab:62:7c:e2:8f:22:d4:f8:cc:cc:75:7f:78:91:
         fc:b4:fd:71:b5:b9:b1:e2:53:4b:56:d2:42:56:22:6c:e7:7d:
         84:96:9a:4a:32:2e:c9:47:05:31:c4:84:20:67:e7:95:6a:a7:
         e3:24:10:23:f0:f9:ee:d7:eb:3e:c8:bb:8d:64:23:dd:4a:eb:
         88:ee:ad:f0:f9:72:36:e9:9c:f7:dc:cb:18:e2:a9:24:8e:5c:
         34:74:2e:bb:20:39:93:4c:5a:7e:a8:4b:28:ce:2b:a8:0f:e7:
         bb:ba:8e:0a:df:6f:72:4d:80:4a:00:52:19:2a:eb:d5:64:58:
         d9:a3:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:05 2026 by rpki-client