Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File:                     r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier:          HHtvn0BHP0u4lf0tY5LSE9QmgLYxOcS7i88OV5CFBuo=
Subject key identifier:   D1:3F:F3:F2:B0:7C:9A:F2:B6:3F:2D:E7:AC:BE:14:8F:6F:37:AA:A0
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer:       /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial:       019EFBDDA7154ED92634AB85A01802460434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number:          061F
Signing time:             Wed 24 Jun 2026 23:01:07 +0000
Manifest this update:     Wed 24 Jun 2026 23:01:07 +0000
Manifest next update:     Thu 25 Jun 2026 23:01:07 +0000
Files and hashes:         1: aSIDX5WLR1A1a-e0CCn8Rm1sYHc.asa (hash: A2WMcHk2uY0A/akcC7UBsiivFyfzZonC6SeSkOH6b8Q=)
                          2: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: QQ4QkHSPWC8qJxc0tv5Ugnu/jzz14i9hWZ1aKxNqgP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:dd:a7:15:4e:d9:26:34:ab:85:a0:18:02:46:04:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
        Validity
            Not Before: Jun 24 23:01:07 2026 GMT
            Not After : Jun 25 23:01:07 2026 GMT
        Subject: CN=d13ff3f2b07c9af2b63f2de7acbe148f6f37aaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:16:40:70:b1:df:9c:2d:1c:73:72:65:21:
                    e5:25:f0:aa:ee:53:98:fc:3a:b1:fb:b6:b6:64:21:
                    9d:1f:5b:4f:d9:ce:49:b8:cf:74:01:15:87:c0:9d:
                    d1:23:71:89:43:e7:8c:f5:10:3d:c4:2d:a9:be:1a:
                    a3:1c:67:9f:79:ce:34:0a:9e:54:00:13:3f:70:ea:
                    93:e8:35:e8:46:00:01:e9:36:e8:43:10:39:c0:2f:
                    b9:5c:50:70:e7:3a:ef:26:6e:a8:a9:a6:4b:e7:66:
                    16:29:23:0d:af:1a:46:45:43:6c:9a:e1:ac:aa:31:
                    ae:3e:cd:8b:69:52:e5:d5:b8:45:bb:e5:bd:99:87:
                    3b:e9:2c:0d:ed:dc:c4:7c:23:35:02:3d:3f:bb:f8:
                    45:7d:31:ac:f8:be:8d:89:c5:ec:02:c5:d9:42:f8:
                    00:50:f3:af:84:6f:63:ae:e9:f2:77:90:31:2d:e8:
                    bd:5d:3e:4a:25:00:23:11:5c:5d:78:f4:cc:40:94:
                    95:e4:dc:b3:4b:1e:da:f2:bb:f3:92:fb:80:23:67:
                    56:18:d1:51:1d:05:2b:b2:22:6d:18:cc:f1:7c:2b:
                    42:2b:6b:98:f8:04:e4:f5:71:a0:fc:72:fa:42:f3:
                    c3:2d:4b:18:59:43:f0:46:89:45:dd:8d:f0:14:65:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3F:F3:F2:B0:7C:9A:F2:B6:3F:2D:E7:AC:BE:14:8F:6F:37:AA:A0
            X509v3 Authority Key Identifier:
                keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:17:9a:e3:67:b8:46:b7:c6:c9:be:c3:d6:72:ed:cf:81:aa:
         e3:9b:1b:d7:29:f9:d2:d5:94:ef:ea:46:43:20:c8:98:0e:43:
         79:48:09:fc:2f:f7:bf:4d:41:9e:40:b7:ff:c6:fa:f3:dd:32:
         3c:a5:86:d7:d1:8b:61:a0:c5:9a:06:84:55:73:18:ed:18:17:
         8c:52:14:3b:0f:21:a0:ed:c1:be:31:1e:0e:dc:6c:23:83:da:
         5f:eb:d8:77:c4:1a:1a:11:76:c0:bc:77:cc:34:2e:d9:4b:fb:
         8a:d2:6f:32:a7:1f:d2:ca:84:2b:e8:b5:44:19:a2:97:9b:c9:
         9e:4c:80:b0:59:37:79:5b:57:36:13:ac:7c:b1:9a:04:b3:23:
         7c:1a:11:dd:26:4d:1e:88:85:8e:9b:df:06:00:db:9f:19:9d:
         64:c8:bd:75:b6:50:4c:9e:0e:7b:11:16:6c:17:19:ce:48:2c:
         3a:b7:70:99:ec:03:50:a2:63:2f:8c:25:f1:c8:67:ed:ce:72:
         89:e0:9e:33:66:24:01:47:04:0d:98:59:16:8e:f0:f6:f2:1a:
         3c:29:40:9f:98:d1:2f:63:69:8b:8a:9b:85:d9:2b:14:2c:b8:
         c3:c9:ba:65:5b:df:63:61:20:3f:78:7f:f2:e7:df:8d:de:52:
         73:72:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:41:15 2026 by rpki-client