Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File:                     _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier:          /FvZbqbsbsbVTo/yNiGnUT5F/00py/hY+1XgQAF9Ke8=
Subject key identifier:   61:E2:43:D0:E8:DD:0B:D6:E6:4F:4F:B8:B8:5E:19:1F:9F:9C:7A:80
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer:       /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial:       019EB7338DA702DA184EDCD422534D502E2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number:          0FEC
Signing time:             Thu 11 Jun 2026 15:01:09 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:09 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:09 +0000
Files and hashes:         1: BO14bA7PeRb0D7KQP3CWollCutc.roa (hash: KWBfGK/f5gpdRKkzCSVIg8eJkkTlP4Rw/G54X2xmAk8=)
                          2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: WFgjdNOceuOu4oYUWWEaWtoHxp4KGpI+gmoofgkwo+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:8d:a7:02:da:18:4e:dc:d4:22:53:4d:50:2e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
        Validity
            Not Before: Jun 11 15:01:09 2026 GMT
            Not After : Jun 12 15:01:09 2026 GMT
        Subject: CN=61e243d0e8dd0bd6e64f4fb8b85e191f9f9c7a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:ca:c6:4a:1f:7e:bf:d8:54:6e:fd:0a:b0:
                    a0:2f:d2:23:c1:08:0c:e9:42:26:27:0a:54:d8:12:
                    2f:00:72:40:97:5b:33:f7:16:3c:8e:b7:82:b9:a9:
                    61:5e:f1:06:aa:de:50:d8:80:c3:76:86:9e:0c:94:
                    1d:8d:f0:3d:d4:e8:12:5e:31:a3:65:96:94:6c:6d:
                    58:3d:ed:36:1d:8e:4b:f5:5a:bb:c2:e5:ce:db:9a:
                    e6:e2:6c:59:32:09:45:97:9f:e4:95:24:07:4b:1f:
                    80:1b:5c:26:ca:05:0c:e4:e8:d6:7d:43:d3:ff:63:
                    72:90:a2:ba:d5:63:45:7d:64:ef:63:a8:ed:8b:2f:
                    bc:7e:3c:b7:f4:0e:ff:b6:44:10:27:e6:26:5e:f3:
                    73:cd:51:6d:fd:a9:f9:58:bb:66:d7:5a:9b:21:60:
                    b0:a3:70:6a:bb:83:f0:de:71:8f:f6:de:be:35:69:
                    fc:6c:d1:e8:a7:65:87:70:56:f1:73:e1:50:76:f5:
                    f8:99:b1:16:64:0d:8b:ad:4c:85:ed:bd:3c:8c:89:
                    07:8b:40:ee:e9:c0:ac:2c:23:fc:a8:c6:71:a2:4e:
                    87:65:30:c1:30:29:0d:eb:08:6d:e9:93:dc:22:dd:
                    60:f8:ca:ce:df:5d:da:0b:0e:03:8d:02:c3:68:5c:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E2:43:D0:E8:DD:0B:D6:E6:4F:4F:B8:B8:5E:19:1F:9F:9C:7A:80
            X509v3 Authority Key Identifier:
                keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:20:f4:ac:a4:e6:bb:70:39:a7:3b:77:57:64:73:03:a7:20:
         10:95:af:02:c7:53:c6:57:a8:52:cd:f4:3a:3f:98:09:bc:e9:
         99:72:96:d7:a2:aa:2b:c2:ed:6c:75:4f:3b:d1:d7:67:d8:e3:
         96:79:23:65:89:1f:10:34:f3:7f:2d:41:fe:94:85:a1:06:3b:
         09:c9:4f:db:f8:3a:c2:35:ee:57:74:52:97:51:3d:0b:55:ff:
         53:cb:5d:6f:f3:14:9e:34:eb:18:7b:19:c1:72:dd:f9:36:a0:
         d2:67:2c:2f:de:82:b7:0f:09:e5:d2:86:e8:0e:5f:e0:0e:fb:
         82:3b:04:3e:cf:59:2e:8b:b0:81:a1:63:97:d6:04:cf:c7:8b:
         0d:25:64:b8:04:4f:70:84:07:7b:e5:46:08:ac:64:23:cc:84:
         45:ad:51:3a:f3:40:67:7b:93:ae:68:b2:89:64:ac:c1:02:7d:
         d0:a2:75:05:ae:50:25:db:92:58:d9:a7:25:c6:4f:a8:df:df:
         37:ca:63:67:9f:f5:a1:83:7d:21:0d:e9:17:bb:2b:54:d8:9f:
         70:2d:46:9b:dc:8e:d9:90:f0:22:61:a8:9e:e8:6c:98:fa:b6:
         90:4b:9e:d6:4e:ab:28:dd:4e:b9:2f:3f:92:31:96:0b:79:fc:
         63:18:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:13 2026 by rpki-client