Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
File:                     auSqdx_QpXjqOqxLTT7IPYlGRj0.mft (raw, json)
Hash identifier:          9nJL6/Mu5+IZA4akw42q2M4EOZ+NbV8556VzGEaoqIs=
Subject key identifier:   47:8F:3A:F8:A8:25:6C:A4:F1:34:E1:20:45:27:AA:7C:F9:E4:E9:F8
Authority key identifier: 6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D
Certificate issuer:       /CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
Certificate serial:       019E9DE15C863C91E6C8AF436A5D7421B5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
Manifest number:          018E
Signing time:             Sat 06 Jun 2026 17:00:52 +0000
Manifest this update:     Sat 06 Jun 2026 17:00:52 +0000
Manifest next update:     Sun 07 Jun 2026 17:00:52 +0000
Files and hashes:         1: GDQQ0FqYT9AvbB4OzpV_W08txF4.roa (hash: +7D1/7LzTXBfcdD4Y5uzQNgYSY1go2hv/v2LnVgCR1Y=)
                          2: auSqdx_QpXjqOqxLTT7IPYlGRj0.crl (hash: OxkqCB3REaMNjNOYhli6Woaq9rlsbMkRFY77RC405sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:e1:5c:86:3c:91:e6:c8:af:43:6a:5d:74:21:b5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
        Validity
            Not Before: Jun  6 17:00:52 2026 GMT
            Not After : Jun  7 17:00:52 2026 GMT
        Subject: CN=478f3af8a8256ca4f134e1204527aa7cf9e4e9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:4b:9b:aa:a4:69:cb:36:78:4a:a4:dd:25:
                    c8:d3:fd:e7:40:62:e0:9e:22:2e:83:4c:09:59:34:
                    c3:f0:97:3c:16:bd:ac:fe:d7:df:2d:fd:8a:0b:c3:
                    23:ad:ef:f2:6d:13:54:a5:52:93:cb:1c:d7:26:c9:
                    be:b7:85:96:e1:fd:55:5c:dd:43:07:fb:ec:f8:ec:
                    30:53:cf:77:53:bb:c2:46:95:eb:e8:ee:4e:86:69:
                    a9:30:25:fe:5d:73:82:1c:ae:f5:2c:d6:59:28:bd:
                    88:05:76:4c:ee:ee:05:1e:fe:3b:9a:12:a8:47:78:
                    b9:08:19:14:77:9f:41:64:f0:54:00:e0:61:87:ff:
                    c5:f6:8b:1c:b4:2f:e4:a1:ae:3d:c3:41:08:c6:77:
                    95:73:6f:35:5f:0d:e8:7d:74:94:e9:38:05:31:7c:
                    e8:01:97:5b:f3:c5:12:c5:70:73:34:a0:aa:4a:5b:
                    ab:47:f3:ba:3d:a4:be:b1:1e:01:4c:40:46:68:fb:
                    48:86:43:85:3d:ca:5e:bf:86:c3:36:ce:9a:f2:c7:
                    e1:c4:c9:e0:5e:17:79:8d:2d:51:b9:3e:af:a5:e0:
                    2c:f8:2c:32:6e:f8:c4:b4:f6:34:50:be:94:f5:3c:
                    a5:a3:4e:d9:ac:d6:71:f2:5f:dd:1d:a4:e9:94:b4:
                    e2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8F:3A:F8:A8:25:6C:A4:F1:34:E1:20:45:27:AA:7C:F9:E4:E9:F8
            X509v3 Authority Key Identifier:
                keyid:6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a5:5a:02:b3:9d:eb:33:b3:5e:64:57:fc:e8:45:2e:37:50:
         80:65:65:95:9e:ab:47:72:68:0a:04:ab:de:40:83:2c:4e:d3:
         45:a3:d1:23:50:11:6a:f8:f9:91:85:42:71:d4:3e:a5:57:40:
         7b:f7:3a:51:26:c8:91:b9:44:8b:a3:f7:a8:f1:ef:91:e6:55:
         63:3f:88:13:59:74:45:7c:d0:5a:0d:50:c3:b2:c2:c9:6c:96:
         6f:51:2d:2f:57:46:5c:a4:e1:6e:20:78:4f:9e:59:ac:61:41:
         08:85:0a:e5:0b:24:80:07:be:bc:de:76:bf:e4:c3:9a:f0:81:
         5a:1e:e4:34:f1:9a:79:82:a0:d3:a1:55:1f:f9:69:70:b4:7f:
         bb:6a:7a:88:fb:c4:66:ad:85:fb:10:73:bd:df:cf:da:b3:2b:
         3d:d9:3a:a8:4b:ef:f0:31:86:82:76:27:2e:4b:a4:fd:c8:66:
         a4:2a:45:57:48:a3:32:05:0f:2d:73:c2:2a:86:b3:78:0e:88:
         06:e8:cf:c0:2d:95:20:23:15:f5:8d:a9:b9:0f:3f:f5:b6:82:
         11:46:28:ad:a1:f0:d8:36:73:a7:78:b2:e5:b7:52:a7:3e:61:
         9c:36:1b:d5:2f:2e:64:4a:90:0a:ad:9c:38:c4:09:31:4d:d9:
         11:60:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:31:58 2026 by rpki-client