Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
File:                     Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft (raw, json)
Hash identifier:          kEGAvoOzoh2jZP9rE+TaadYpFoXAvWbTjOaY7+JXOiM=
Subject key identifier:   45:08:00:63:B2:54:07:2D:CF:C1:C6:39:8C:35:43:2D:D8:9B:29:6F
Authority key identifier: 43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
Certificate issuer:       /CN=43a2ef27472a9604bf626fea0e187f8db624134a
Certificate serial:       019EB8EAB1F431FF33E284844AB4C063A806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
Manifest number:          10F4
Signing time:             Thu 11 Jun 2026 23:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:48 +0000
Files and hashes:         1: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl (hash: b0cbghPjURUdl5Uuomb3nzfIir7Pkqs/7R+M99o8ZoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:b1:f4:31:ff:33:e2:84:84:4a:b4:c0:63:a8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a2ef27472a9604bf626fea0e187f8db624134a
        Validity
            Not Before: Jun 11 23:00:48 2026 GMT
            Not After : Jun 12 23:00:48 2026 GMT
        Subject: CN=45080063b254072dcfc1c6398c35432dd89b296f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:41:ef:d1:0e:78:12:28:7c:a7:d8:4e:28:
                    5b:3c:b7:b4:43:92:12:60:19:53:f1:a1:e3:1d:ad:
                    5d:1e:79:11:f7:0a:67:e5:f2:c9:9e:8d:be:4b:ae:
                    fa:63:5b:a8:11:a9:da:be:4d:bb:61:a1:5f:0a:7a:
                    33:52:e3:38:b2:f1:13:fb:e2:ea:a3:40:76:a3:ee:
                    b4:ac:d3:03:20:3f:3c:61:22:d9:28:86:6b:dc:2d:
                    69:2e:9e:f2:4d:11:00:05:ac:72:d5:52:53:51:fb:
                    59:0f:b8:db:5f:0e:97:3a:ce:97:13:b8:7e:e5:eb:
                    06:02:9b:72:b4:5c:4d:b2:6d:f8:cf:8c:b4:4f:94:
                    a4:18:e8:9a:b6:e9:cb:81:17:47:78:2e:5d:a7:0d:
                    e9:ac:62:5b:34:14:1f:ef:15:cf:d6:6b:ff:c1:2f:
                    d8:cc:ea:2a:48:22:1e:66:90:ef:b9:2f:1d:57:a6:
                    aa:fa:e6:6f:d5:d3:2a:78:c1:c0:a2:fb:ea:e6:06:
                    78:b9:0d:86:25:6a:23:59:99:22:13:f2:d7:a2:e3:
                    93:2d:34:00:48:d1:cc:63:0e:1b:c4:35:d2:12:4f:
                    6b:cd:37:46:e0:b3:8a:ad:17:9e:a0:04:24:bc:18:
                    ae:6b:12:a5:bb:dc:e4:c2:7b:1e:cf:b4:4d:23:c8:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:00:63:B2:54:07:2D:CF:C1:C6:39:8C:35:43:2D:D8:9B:29:6F
            X509v3 Authority Key Identifier:
                keyid:43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:24:7a:ae:b7:da:d1:10:b3:e6:e0:7c:16:35:eb:46:fa:a1:
         33:36:20:91:06:9e:54:d0:cc:dc:9b:ac:b0:c2:55:84:87:e6:
         ec:ad:b2:fe:12:62:c6:97:56:63:64:48:e9:b7:f4:2b:0e:52:
         0c:03:17:93:55:25:23:73:b6:6d:02:01:4f:e5:2e:9e:06:2f:
         7f:08:00:01:08:a2:a1:15:25:a3:bc:b8:31:36:03:fc:c9:aa:
         4c:8a:e7:e2:91:0e:9c:09:ac:f8:53:02:b5:11:b1:03:90:31:
         49:54:be:34:14:4d:d6:99:90:04:0b:d6:bc:c4:1e:ad:de:14:
         44:03:3a:25:a0:2f:72:5d:17:81:17:c9:5d:76:29:6b:b7:46:
         38:e6:46:31:4e:4c:0f:f8:a1:e2:16:b6:c6:be:bc:66:3a:e1:
         a4:15:cf:2e:f1:0e:90:21:9c:50:61:0d:1f:7b:68:07:af:06:
         05:cf:41:54:c1:53:a5:22:10:9e:af:d0:83:f0:fc:45:aa:97:
         fd:23:a0:cf:b2:30:33:3d:a6:a9:21:92:95:19:bc:7e:36:b9:
         c9:80:26:6e:64:a8:6c:17:fe:eb:52:4a:b6:85:91:a7:1f:81:
         e7:90:42:51:60:38:4b:6f:6c:54:70:e7:98:1a:f1:30:de:35:
         49:ae:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:54:29 2026 by rpki-client