Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File:                     QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier:          Iz/5BFnrs+SKwQNghZgBL2SZEwcUho6yuauTWJSV8tw=
Subject key identifier:   DC:8E:09:C2:54:F3:0D:81:4C:AB:AE:0D:45:41:60:3B:C5:3D:55:A3
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer:       /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial:       019EB76A36AC558BC0D139F656B5AABA8BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number:          01E0
Signing time:             Thu 11 Jun 2026 16:00:51 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:51 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:51 +0000
Files and hashes:         1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: 3eApXMB/wyfxRyw3HHwT6xCxYuz+5ICnSyA2nCPTbjY=)
                          2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:36:ac:55:8b:c0:d1:39:f6:56:b5:aa:ba:8b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
        Validity
            Not Before: Jun 11 16:00:51 2026 GMT
            Not After : Jun 12 16:00:51 2026 GMT
        Subject: CN=dc8e09c254f30d814cabae0d4541603bc53d55a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:44:35:7d:8c:a3:f5:02:e3:7b:09:40:5c:
                    9e:1f:98:47:00:69:3c:a2:d0:c9:ba:f3:8c:4b:f7:
                    ca:64:85:b8:60:d9:f1:f2:27:65:77:85:df:85:7a:
                    35:da:1a:2f:5e:72:43:e1:29:04:ac:79:1b:80:a9:
                    bc:f7:a1:90:9f:56:36:d6:e1:9d:26:92:d3:b9:ea:
                    77:10:9f:90:f6:3a:ff:29:ad:2f:7e:f1:14:65:dc:
                    f3:50:85:24:9c:00:fc:81:01:5e:a8:cc:ca:48:f9:
                    c4:ea:d5:78:c4:dc:52:aa:b8:1a:82:ca:ed:b3:fa:
                    e7:b9:56:eb:80:3b:4c:e2:ed:9d:dd:4e:b3:dc:e4:
                    47:70:01:54:ba:dc:50:84:69:de:1b:5b:ea:6b:ee:
                    cc:56:b8:b6:3e:e7:82:00:e6:10:75:43:67:bb:c0:
                    9e:fc:22:a5:6a:10:71:a2:af:51:4e:cf:1b:33:d4:
                    c0:33:f7:9a:ae:ff:00:69:0d:5a:ba:10:77:a5:04:
                    a3:5f:37:68:40:cb:39:08:43:f1:22:ff:a0:00:63:
                    da:a5:a8:28:39:1d:71:5f:ef:4b:06:4d:b2:f8:46:
                    48:fb:6d:e7:31:13:98:8a:d1:ec:54:4a:df:8d:b1:
                    15:66:6b:5e:08:0e:33:e8:05:04:32:cb:62:2c:ab:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:09:C2:54:F3:0D:81:4C:AB:AE:0D:45:41:60:3B:C5:3D:55:A3
            X509v3 Authority Key Identifier:
                keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:10:d3:e9:4c:f7:b9:f0:01:8b:f7:e9:f5:cb:8d:ff:62:84:
         33:64:ca:53:4d:88:7c:61:bd:0d:11:2d:97:34:39:28:bd:f6:
         00:a9:e5:fc:16:ea:e2:28:a4:bb:69:ea:f3:6c:ab:5c:d3:55:
         e6:0a:8e:0b:b0:14:29:67:19:8d:b9:ae:e5:f9:42:82:6d:1a:
         f7:11:dc:43:59:63:02:89:48:30:9a:9c:7f:de:a8:72:d6:ec:
         1a:eb:12:60:8e:a8:93:9c:83:97:22:50:2e:2b:09:71:de:2d:
         47:8d:f1:03:52:6a:eb:76:6d:68:96:80:58:92:6e:18:f8:1b:
         8f:ea:dd:31:a0:80:fd:54:84:b4:f3:91:a1:31:fd:ab:32:a3:
         1a:81:cf:1f:03:42:03:5f:b0:88:68:5f:a1:6b:31:46:0e:6f:
         e3:6c:79:d4:7e:fb:dd:ba:df:36:78:99:29:98:3c:a5:eb:36:
         be:1c:5c:a9:0e:01:10:5c:ba:5c:9c:2e:b5:26:20:5e:3a:dc:
         3b:28:80:23:ca:6c:25:c3:9c:67:71:bc:e8:d6:35:94:27:03:
         35:fa:9d:aa:03:6a:30:12:b7:16:0d:08:75:39:64:4e:2b:1f:
         f2:3e:db:d3:a5:2a:c9:f1:e6:6e:11:ef:ed:33:e8:d4:b4:6a:
         72:44:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:39 2026 by rpki-client