Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File:                     Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier:          UHxDtinvnZuZffTbdxYbzxfytugeHZh6+PKDvtr+pHI=
Subject key identifier:   EF:EC:5A:97:DF:0A:E6:E6:10:CC:84:B4:B3:47:AD:6A:2C:2C:C3:99
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer:       /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial:       019EB76ACDFCB75AEE733EB787A335B8CCCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number:          03F6
Signing time:             Thu 11 Jun 2026 16:01:30 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:30 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:30 +0000
Files and hashes:         1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: hpkjfjdfYBqo4H+SQmXWYkCQe1RaU2h2owe/zhl7scE=)
                          2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:cd:fc:b7:5a:ee:73:3e:b7:87:a3:35:b8:cc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
        Validity
            Not Before: Jun 11 16:01:30 2026 GMT
            Not After : Jun 12 16:01:30 2026 GMT
        Subject: CN=efec5a97df0ae6e610cc84b4b347ad6a2c2cc399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:93:ad:c8:33:36:5d:89:fc:93:86:b3:1e:
                    29:3b:c7:55:0f:45:2c:1c:c1:52:1b:ef:12:32:4f:
                    23:6b:4f:fd:3e:1c:56:aa:6c:cf:0a:23:cd:5f:b0:
                    87:db:d0:5e:ba:3f:37:a8:55:f8:4a:7e:b5:b6:6a:
                    82:89:0f:0e:ee:1d:4c:e4:e6:c2:58:3d:cb:4a:3b:
                    e4:66:83:e1:aa:38:4a:b9:4f:75:0c:66:eb:70:c3:
                    5f:af:21:d7:6a:4d:4f:62:89:47:2e:f9:a7:72:2f:
                    f5:93:53:ff:38:3e:2b:83:b8:94:1d:34:d7:3f:55:
                    8f:7e:87:24:24:8f:70:15:2b:1e:ca:8f:68:d4:52:
                    06:11:e6:bb:d3:f7:1f:1c:a3:47:71:c6:53:41:73:
                    00:0f:e9:40:31:16:4b:3e:cf:51:b7:0b:1a:5c:9f:
                    8c:30:be:73:4b:b5:4c:46:b6:2d:d1:20:81:12:79:
                    dd:f9:84:a3:f1:d3:c5:14:f1:3a:2c:e4:f4:19:bf:
                    ca:41:c1:df:6c:21:a6:6a:e8:4e:0b:45:ef:e8:0e:
                    5b:3b:05:a8:6c:e0:2e:3f:cc:89:56:4e:4e:f8:dd:
                    7c:61:06:43:cd:f9:ce:22:03:97:64:64:9f:e6:f8:
                    dc:f9:65:1c:a4:b9:0a:08:62:5b:31:6b:8c:72:f0:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EC:5A:97:DF:0A:E6:E6:10:CC:84:B4:B3:47:AD:6A:2C:2C:C3:99
            X509v3 Authority Key Identifier:
                keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:5b:d4:ab:99:b6:8a:16:7d:e4:5e:29:8d:15:f2:7e:6d:
         1c:65:a0:1f:59:46:cf:66:a4:88:f2:68:aa:29:4b:3a:7d:13:
         fc:a2:9d:9d:0b:d1:9a:fd:50:83:97:de:ea:de:f4:fa:97:e5:
         44:18:57:23:27:39:db:72:d4:87:17:54:59:49:69:0c:54:34:
         67:95:c5:3f:86:4f:b9:15:b9:fc:6b:67:47:f8:7d:4c:35:63:
         7e:b6:72:e3:6b:13:5a:6b:42:f3:13:76:bf:95:3f:6a:81:59:
         52:5a:53:77:5b:58:9c:41:ea:a7:0e:67:ba:df:28:b7:e1:13:
         18:d8:9f:6d:b8:a6:3b:09:70:a5:be:e4:52:db:bc:6f:02:ed:
         cd:c5:e5:92:b6:07:13:2f:98:0c:40:8b:a1:4c:53:67:f2:97:
         08:71:da:8b:99:af:ac:f9:3a:50:6a:af:ef:b9:d2:1c:8e:f5:
         5a:20:b7:98:33:f9:3c:4e:b0:9e:dc:d8:d7:ba:f6:05:fd:5e:
         3c:c0:f8:6e:03:67:c8:b7:a7:75:98:6d:14:b9:4f:ce:0c:20:
         f3:b1:a6:7a:81:71:01:c6:38:1f:78:ee:6c:fe:20:1c:60:c8:
         bd:87:f1:01:74:a9:95:ac:39:01:43:b7:10:7f:46:74:2a:65:
         aa:4f:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:50 2026 by rpki-client