Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File:                     QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier:          kD/Q15d7wu0JOw7VENIM01G1noyAX+io7aP9hD+Igsw=
Subject key identifier:   E6:6C:91:A5:50:92:51:78:D3:7E:37:BC:4A:C8:5D:C9:17:11:97:54
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer:       /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial:       019EB8B48F28C90C7AF1C9FA09E310BCCCBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number:          0964
Signing time:             Thu 11 Jun 2026 22:01:41 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:41 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:41 +0000
Files and hashes:         1: D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa (hash: NEAvke3XuRiHlogwVc4RcyWVQUznukeff4gqiKDQn+U=)
                          2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: 7f4bGI2yQkdb/b3JTCYgOgAga2BhGp+AtPVv7ihvtj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:8f:28:c9:0c:7a:f1:c9:fa:09:e3:10:bc:cc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
        Validity
            Not Before: Jun 11 22:01:41 2026 GMT
            Not After : Jun 12 22:01:41 2026 GMT
        Subject: CN=e66c91a550925178d37e37bc4ac85dc917119754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:48:06:7e:ae:b4:f8:5b:fb:f7:c3:95:27:ec:
                    4f:37:09:e5:c7:c7:70:76:8b:44:19:d6:b9:1e:c8:
                    16:90:5a:bd:dc:44:d2:b2:8f:ac:ea:15:ba:64:75:
                    e5:22:7e:79:a3:57:6e:a8:fd:3d:9d:50:6a:ba:42:
                    ef:71:6c:63:d2:f1:ac:f2:08:56:1e:4e:08:86:e5:
                    41:25:aa:0a:3d:47:c0:09:56:65:7a:cc:10:93:51:
                    03:f3:98:7e:23:61:83:d5:69:05:a4:f6:a5:22:3d:
                    c1:32:b5:3e:bc:fb:6c:44:00:c0:5e:18:da:4d:01:
                    9e:42:95:f5:ce:93:c9:64:9a:e2:0a:54:f8:cd:4a:
                    ff:be:e5:e8:78:93:e3:f0:00:fb:df:99:eb:56:94:
                    17:ee:4b:42:11:d0:3c:0f:86:28:e8:b7:ef:00:6f:
                    01:49:d5:52:da:5f:2f:31:d6:9e:ff:a2:53:6a:54:
                    fb:bb:57:b0:78:e0:1e:2c:08:57:76:13:e5:eb:64:
                    3e:51:b4:7f:23:24:6f:ff:6c:47:ea:b3:5b:b4:0b:
                    82:0b:a7:be:b4:b5:27:46:fd:ac:3d:3a:2f:5b:2a:
                    f6:14:9c:80:16:49:58:4a:f1:77:b7:25:b3:c8:40:
                    cc:3a:55:06:6e:9c:5d:f2:09:77:80:ff:10:c3:2c:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6C:91:A5:50:92:51:78:D3:7E:37:BC:4A:C8:5D:C9:17:11:97:54
            X509v3 Authority Key Identifier:
                keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:76:11:54:f5:e4:37:d7:94:bd:46:90:ce:51:50:6f:9f:cd:
         a2:01:c7:4a:10:6d:76:be:2a:16:f6:a5:e6:30:cf:86:a8:7b:
         46:04:da:b5:aa:e9:b7:08:7d:98:37:78:b4:fb:30:d9:4f:7f:
         df:c2:c8:fb:16:50:92:14:a2:d9:cf:fb:d5:14:3e:15:4e:49:
         6a:7f:d4:f5:6e:88:7d:04:de:98:08:a8:94:f1:56:a0:7b:90:
         72:13:05:5e:54:41:4a:5d:15:b5:e4:3f:c9:20:6b:3d:b2:52:
         29:11:80:2e:24:2d:5e:da:6a:06:eb:b6:8d:00:dc:bf:91:54:
         ac:29:95:3f:98:a1:b6:06:86:65:53:37:7d:51:41:bf:01:c9:
         a1:13:10:86:49:30:07:93:66:32:8f:fd:17:c1:83:c8:97:70:
         71:44:30:e1:bd:5d:12:9b:ca:39:3c:52:c4:fa:8d:3f:2c:46:
         af:81:3a:0b:36:e7:86:32:ca:f1:72:c4:62:48:6b:fa:ee:72:
         1e:75:b0:ae:43:70:31:54:ec:45:9c:02:a5:3b:f1:45:81:00:
         df:b6:8d:b9:6c:bd:3b:ef:96:c3:6a:c7:7e:8d:d8:3e:0d:ee:
         be:31:ab:df:9e:aa:6b:dc:3d:1b:46:7d:01:d2:97:e3:b2:c5:
         11:a2:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:39:00 2026 by rpki-client