Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File:                     SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier:          VL5r3Dbqwh9fEWEJ82yefSYx9JiMwhoACGPh+IjXTBM=
Subject key identifier:   6E:03:FB:20:3D:B4:E2:AE:16:1C:10:CB:5D:60:F1:EB:D7:2C:B3:3C
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer:       /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial:       019EBDDA97A6278CBF63F44CCCCEF142AB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number:          195B
Signing time:             Fri 12 Jun 2026 22:01:19 +0000
Manifest this update:     Fri 12 Jun 2026 22:01:19 +0000
Manifest next update:     Sat 13 Jun 2026 22:01:19 +0000
Files and hashes:         1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: GfMW5E6QXvqcwmqX5UNwfjJOF/cdORcYjFK9j9LVFoA=)
                          2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:97:a6:27:8c:bf:63:f4:4c:cc:ce:f1:42:ab:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
        Validity
            Not Before: Jun 12 22:01:19 2026 GMT
            Not After : Jun 13 22:01:19 2026 GMT
        Subject: CN=6e03fb203db4e2ae161c10cb5d60f1ebd72cb33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:e6:04:43:2f:db:63:29:d4:63:fd:45:ca:
                    47:27:d6:60:bd:7a:e7:5f:32:c7:c8:9e:fd:bc:53:
                    34:e2:23:1f:a0:3d:36:0a:a2:b0:17:cf:58:54:cc:
                    99:d8:95:19:d7:57:81:68:75:1d:9a:50:16:e4:1b:
                    11:d5:8a:88:0c:9c:41:00:97:2a:71:23:9a:2c:aa:
                    94:76:96:ca:e2:23:3d:98:e4:3b:c1:61:5e:ba:de:
                    fa:c6:86:70:73:b3:67:56:50:52:d6:9f:33:8d:39:
                    2a:af:5b:3f:eb:7e:b6:c3:cb:82:67:ba:71:7c:cf:
                    56:eb:7c:45:8e:b4:12:1c:21:33:5d:ac:f3:b0:4e:
                    21:17:6b:97:61:6e:ea:5f:47:af:78:4a:d3:bd:a5:
                    dc:a1:d5:fb:a5:1d:19:0c:1a:f7:0e:90:c8:32:06:
                    e9:ff:73:09:a8:56:9b:bb:36:14:2b:cb:85:50:c9:
                    02:fb:84:0b:f5:7a:a4:a7:8f:d4:77:a6:0a:51:13:
                    28:5a:9f:62:82:95:8b:23:73:d3:c7:6e:3e:eb:fa:
                    d6:bb:5b:f1:ca:35:b7:24:83:26:3f:d8:b9:01:96:
                    25:79:1f:58:5b:4c:1d:a6:01:3e:f8:2e:49:8e:9e:
                    a3:8a:ed:b6:8a:52:6d:27:01:e3:55:3c:ae:0f:d8:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:03:FB:20:3D:B4:E2:AE:16:1C:10:CB:5D:60:F1:EB:D7:2C:B3:3C
            X509v3 Authority Key Identifier:
                keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:29:d4:cb:98:79:7c:d0:72:08:f0:57:4a:74:4b:c4:70:6d:
         d1:02:a5:e0:61:e8:50:89:5c:bd:5a:f8:e6:37:bb:a4:dc:33:
         77:06:a6:85:46:e7:d9:72:76:37:89:ad:d0:a1:ed:47:64:32:
         68:d3:6c:45:ca:9e:79:09:6f:7a:30:dd:be:80:22:87:a6:fb:
         59:a4:5e:75:b3:e1:bc:e5:e1:bf:3e:be:e9:e0:72:ab:c4:f8:
         bf:e6:a7:5f:93:bb:08:bc:9f:57:34:7e:30:08:58:c1:3d:e7:
         9e:fb:6d:78:64:cd:98:8b:c6:5a:1f:06:10:71:8b:ed:9a:f0:
         26:73:0b:b1:e7:02:60:4a:e2:90:d6:4e:2e:a8:62:02:3a:66:
         d5:40:b9:ff:ba:bb:ca:7f:7d:a5:b8:ee:0c:19:2d:b2:4c:31:
         26:e4:6e:57:ec:ce:85:34:3d:07:80:5d:53:28:39:f3:fb:9c:
         b0:f3:f5:87:78:34:da:c5:da:4d:63:6a:37:be:9e:bb:9b:93:
         fc:e5:a6:80:79:e5:75:0c:fd:36:64:39:06:00:e1:fe:49:ca:
         6f:f9:52:14:ee:05:64:a8:8c:96:48:83:c9:d8:4c:68:33:a9:
         f1:bd:7a:5b:53:d2:c6:81:8f:fa:a1:7b:a7:ed:87:47:ce:9f:
         04:b8:e2:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692pemJ4y/Y/RMzM7xQqtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGRiOTk5Y2E0Y2UyODdjNWM5MmFiMTY3YTUwMDkwMjI1
OWJiMDUwHhcNMjYwNjEyMjIwMTE5WhcNMjYwNjEzMjIwMTE5WjAzMTEwLwYDVQQD
Eyg2ZTAzZmIyMDNkYjRlMmFlMTYxYzEwY2I1ZDYwZjFlYmQ3MmNiMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/nmBEMv22Mp1GP9RcpHJ9ZgvXrn
XzLHyJ79vFM04iMfoD02CqKwF89YVMyZ2JUZ11eBaHUdmlAW5BsR1YqIDJxBAJcq
cSOaLKqUdpbK4iM9mOQ7wWFeut76xoZwc7NnVlBS1p8zjTkqr1s/6362w8uCZ7px
fM9W63xFjrQSHCEzXazzsE4hF2uXYW7qX0eveErTvaXcodX7pR0ZDBr3DpDIMgbp
/3MJqFabuzYUK8uFUMkC+4QL9Xqkp4/Ud6YKURMoWp9igpWLI3PTx24+6/rWu1vx
yjW3JIMmP9i5AZYleR9YW0wdpgE++C5Jjp6jiu22ilJtJwHjVTyuD9h4KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4D+yA9tOKuFhwQy11g8evXLLM8MB8GA1UdIwQY
MBaAFEkNuZnKTOKHxckqsWelAJAiWbsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUt
OThlMjVlMDQ2OTA4LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUtOThlMjVlMDQ2OTA4
LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSnUy5h5
fNByCPBXSnRLxHBt0QKl4GHoUIlcvVr45je7pNwzdwamhUbn2XJ2N4mt0KHtR2Qy
aNNsRcqeeQlvejDdvoAih6b7WaRedbPhvOXhvz6+6eByq8T4v+anX5O7CLyfVzR+
MAhYwT3nnvtteGTNmIvGWh8GEHGL7ZrwJnMLsecCYErikNZOLqhiAjpm1UC5/7q7
yn99pbjuDBktskwxJuRuV+zOhTQ9B4BdUyg58/ucsPP1h3g02sXaTWNqN76eu5uT
/OWmgHnldQz9NmQ5BgDh/knKb/lSFO4FZKiMlkiDydhMaDOp8b16W1PSxoGP+qF7
p+2HR86fBLjizg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 02:23:18 2026 by rpki-client