Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
File:                     inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json)
Hash identifier:          BXM5yzH2R0aneQnTGh3OgimEQ9IpPKbkFr+UuZhlkCA=
Subject key identifier:   79:AB:1E:FD:17:AB:E7:04:DB:8F:97:43:D7:D9:FA:E4:53:69:53:48
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Certificate issuer:       /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial:       019E91DCECD0F6500148C4612F90761441A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
Manifest number:          1944
Signing time:             Thu 04 Jun 2026 09:00:35 +0000
Manifest this update:     Thu 04 Jun 2026 09:00:35 +0000
Manifest next update:     Fri 05 Jun 2026 09:00:35 +0000
Files and hashes:         1: VKvLqtX1ppXEiXVa8scV9rc2Ci8.roa (hash: MN3OM8Px4rr+GRLiVct7muu1ZFs7Cc/Qcnx5KlMSz48=)
                          2: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: m7UlV7+cWIv32YibOZbLkUfZMX/4sU80G65h5vGlxWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:dc:ec:d0:f6:50:01:48:c4:61:2f:90:76:14:41:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
        Validity
            Not Before: Jun  4 09:00:35 2026 GMT
            Not After : Jun  5 09:00:35 2026 GMT
        Subject: CN=79ab1efd17abe704db8f9743d7d9fae453695348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:38:21:46:1a:0a:95:08:c7:ff:86:dd:d8:
                    6b:81:c5:e2:f4:42:b5:de:b1:3c:43:43:91:b3:a5:
                    87:14:89:be:93:b2:d5:59:83:26:83:e8:fd:f1:0f:
                    7f:7b:1f:a8:c4:51:0c:6b:ce:22:9c:53:da:77:95:
                    01:4c:69:b7:4c:75:cb:1e:68:24:98:75:ec:6f:49:
                    d6:13:c8:5d:66:8c:61:41:49:b7:d8:eb:a8:03:f9:
                    a8:8b:cb:c9:29:f2:68:c5:10:e6:af:6b:b4:f0:ce:
                    f0:75:79:e5:ed:99:e9:0a:3f:02:6c:f4:61:ae:3e:
                    98:4b:82:33:85:68:0e:97:67:f2:7b:65:bc:57:cc:
                    08:b7:07:d7:11:c2:23:71:9a:9b:86:51:1c:36:d2:
                    6b:7f:5c:96:6f:a9:58:49:12:ff:ca:f8:dd:15:91:
                    79:4d:26:94:33:ae:e7:9d:f7:8f:6c:f2:97:be:ad:
                    72:6d:6f:e8:86:f2:75:04:eb:44:bf:bd:89:a4:20:
                    7e:25:79:ed:36:3a:73:3a:b7:14:1b:59:3c:b1:32:
                    5f:da:5c:ba:40:35:ea:b1:a7:c8:18:7f:e7:b7:2c:
                    46:16:04:c9:a9:cd:5b:86:cd:8a:3a:52:64:03:70:
                    4e:4c:6b:68:74:e0:c4:b5:85:57:35:0e:e6:aa:67:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:1E:FD:17:AB:E7:04:DB:8F:97:43:D7:D9:FA:E4:53:69:53:48
            X509v3 Authority Key Identifier:
                keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f2:0e:65:c1:25:16:b9:06:94:e0:33:8f:b4:a3:88:46:cc:
         eb:bc:fb:da:b9:b7:20:19:d9:f7:a2:a4:16:86:e6:48:14:e4:
         a7:f9:9b:bc:aa:e7:67:1a:c3:4f:96:67:ba:28:4b:b7:ad:67:
         e4:88:1c:1c:e3:5d:b5:af:1b:8f:89:c1:6f:34:c0:88:39:7f:
         e8:0a:48:6b:e8:cc:4f:62:22:9a:57:17:24:93:83:41:e0:8e:
         5c:83:70:c6:16:7e:6c:45:f5:d7:48:22:de:a8:2f:1c:94:7d:
         3d:99:af:90:aa:57:40:1f:3a:1b:40:e2:90:f4:1e:5d:4c:3b:
         91:fe:5f:3b:a4:f9:d0:71:89:19:a0:fb:fe:57:90:c0:23:70:
         69:09:f9:06:e4:61:e2:aa:80:a1:2b:78:4f:c2:ea:dc:18:00:
         b2:9b:7d:11:86:ac:9b:d3:ca:50:c0:7c:4b:91:18:c5:32:da:
         f6:69:02:66:3b:ed:1c:b7:95:3c:ab:3b:40:61:e9:c4:43:e6:
         41:4c:65:39:ec:60:bb:ee:4e:1c:27:46:40:df:9f:19:ad:c7:
         58:ab:79:e4:b4:31:4c:c0:74:22:6d:02:1d:47:11:5d:e9:11:
         c7:31:d3:e2:29:56:4a:16:4a:cc:87:db:d4:42:37:a1:2f:6d:
         53:5b:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:23:43 2026 by rpki-client