Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File:                     QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier:          OcTe7Lrtu2pcmz8ZI+svA1RyTUOGOXEHX3ulVfWdaXw=
Subject key identifier:   80:E9:1B:AD:C8:54:60:C5:98:64:91:89:E0:78:A1:E4:04:2C:9E:7D
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer:       /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial:       019EBA34414CAFC180982622FF2FE50EC38F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number:          1610
Signing time:             Fri 12 Jun 2026 05:00:47 +0000
Manifest this update:     Fri 12 Jun 2026 05:00:47 +0000
Manifest next update:     Sat 13 Jun 2026 05:00:47 +0000
Files and hashes:         1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: stGg7ur995nQlWJrCxRyk1E68p2dCKmdc70PDmQlX/g=)
                          2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:41:4c:af:c1:80:98:26:22:ff:2f:e5:0e:c3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
        Validity
            Not Before: Jun 12 05:00:47 2026 GMT
            Not After : Jun 13 05:00:47 2026 GMT
        Subject: CN=80e91badc85460c598649189e078a1e4042c9e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:49:dc:e9:3f:52:9e:da:78:87:e4:79:e7:91:
                    f1:eb:55:eb:3b:69:74:74:29:af:e2:6b:e4:8c:88:
                    49:bb:19:cc:80:8d:91:8f:a2:2c:ea:d6:79:1f:c4:
                    ff:83:94:16:40:9f:a0:bc:31:08:0d:ea:26:db:04:
                    91:17:25:91:fc:e3:22:76:1f:3a:71:15:a7:33:9a:
                    16:7d:f3:98:f1:d2:09:cb:c6:7d:17:8e:27:55:98:
                    ca:fc:ed:c0:e7:16:1c:28:e9:57:94:11:f1:a7:76:
                    ab:2b:0a:a7:63:d6:4c:ba:06:ea:16:ef:f7:f3:e2:
                    f1:f1:3b:35:18:fc:e6:26:04:28:d0:81:5c:a8:26:
                    96:e3:c9:77:42:a0:e2:c9:42:2a:ef:33:71:63:8f:
                    dd:cf:5c:ae:b1:fa:84:78:78:aa:c6:65:41:fc:7e:
                    28:77:13:41:1d:1a:60:49:25:9a:9e:cf:17:75:33:
                    b8:c9:49:f9:c5:82:37:4b:8d:72:a3:2c:ab:66:00:
                    5a:54:d9:0a:09:20:6a:b4:ec:64:51:0d:3b:30:8a:
                    64:9d:ed:88:cb:98:4e:fa:21:59:68:5a:59:cc:f7:
                    27:4f:23:a9:f1:f7:97:bd:3c:47:1a:91:ed:4a:a7:
                    95:d3:12:e9:f7:e4:03:fb:1e:55:a8:ab:0e:59:da:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:1B:AD:C8:54:60:C5:98:64:91:89:E0:78:A1:E4:04:2C:9E:7D
            X509v3 Authority Key Identifier:
                keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:26:aa:22:d7:54:3f:1f:51:f7:c4:b4:61:0d:c8:c1:a5:
         3c:32:8a:ab:21:66:1b:bc:8b:82:38:a4:20:43:80:0b:02:ee:
         9b:9d:78:2c:ab:c6:b2:64:27:21:df:66:c6:f5:44:df:03:dc:
         9e:95:13:92:df:c9:75:54:71:23:0e:96:31:1f:2b:61:83:03:
         ab:66:e4:73:a5:cd:9d:5e:e1:24:b4:87:1a:8a:05:34:53:05:
         35:2f:d3:d2:3f:6f:c2:d7:8d:6c:ae:5e:b4:5f:53:be:d5:77:
         33:6b:fd:07:c9:2e:bb:82:44:1d:23:72:c9:e0:d9:42:72:e9:
         fc:24:5c:f8:b5:9d:96:c2:dc:72:ef:91:11:f0:a4:30:84:64:
         88:3d:85:67:58:1d:3f:48:67:6c:0d:62:5a:06:f1:70:a9:03:
         5c:14:c6:2f:7f:c0:d9:be:0b:50:e0:fc:92:3e:bd:9f:ce:9c:
         1b:48:2b:d3:11:31:31:a0:a8:7f:33:bf:88:18:69:c8:b2:62:
         8c:42:d2:ec:d4:10:55:82:db:d9:de:06:30:46:2f:0c:12:4a:
         ab:d4:35:19:4c:76:31:e3:7a:fb:2e:3a:94:cd:38:54:ee:ef:
         e7:95:27:3c:c5:0f:2f:47:04:1c:0d:a0:8d:90:f9:b4:15:6b:
         41:28:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:06:42 2026 by rpki-client