Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File:                     qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier:          vBSESaLXMlOoCaFEVLbE2LPPoOeY9bPcAZpsDdROVno=
Subject key identifier:   5A:9C:BF:EA:61:9E:F9:EF:6C:E5:2B:9C:7E:5B:73:89:13:EA:E7:D5
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer:       /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial:       019EF914E2C02BE974E94192C6E65B630EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number:          1006
Signing time:             Wed 24 Jun 2026 10:02:35 +0000
Manifest this update:     Wed 24 Jun 2026 10:02:35 +0000
Manifest next update:     Thu 25 Jun 2026 10:02:35 +0000
Files and hashes:         1: JLgki92L26vgomF3wfSSuh1nDvo.roa (hash: CiXEqBng4Y1tHGwa/wiL3CgsnavhpNvBwwl4OGe5/4I=)
                          2: NcpN8sW8qQBrAdmBdPAjvFVJbQ4.asa (hash: YF9c0azhuf6/qBJm+KdWT2V2rii+OM05USUNERyUwKo=)
                          3: fKbITxoxfBmzkn5iR0VgygDPyi0.roa (hash: KdtKUNbFJJYqnd0wx10wIIQRBQE9tIaSTN//dYTfeQQ=)
                          4: m6hIErNMpBZVw2qZHKcW2BJUVwg.roa (hash: CKojvhqXdroeSLPSwIAOGazGVtOAtTG05hf6NLW4WCs=)
                          5: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: 8sIwiZNMaJEtAToGqUc08xahTKwuL4YpqYFIdkYbIHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 10:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:14:e2:c0:2b:e9:74:e9:41:92:c6:e6:5b:63:0e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
        Validity
            Not Before: Jun 24 10:02:35 2026 GMT
            Not After : Jun 25 10:02:35 2026 GMT
        Subject: CN=5a9cbfea619ef9ef6ce52b9c7e5b738913eae7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:36:c5:a7:e9:d0:9d:2e:8b:81:f6:ff:b7:
                    a3:a3:5f:8a:23:31:9c:a9:b2:3a:50:cd:ad:fa:d0:
                    14:6c:41:f4:e5:dd:9c:59:be:bb:87:6c:20:6a:3b:
                    67:81:4f:dd:7f:90:1e:62:f4:91:ba:0f:2c:da:94:
                    46:70:29:a6:87:21:ff:18:7b:3f:35:28:97:68:4c:
                    fb:18:d3:01:50:72:44:50:5f:e3:c3:46:a3:4e:f0:
                    c7:e2:14:3a:94:21:f4:45:0f:13:fd:cf:2d:27:7a:
                    ef:60:8d:04:49:e7:9c:52:89:78:65:a5:ce:29:02:
                    9f:4b:60:2d:a8:7e:1e:c9:8e:83:a3:bf:65:3e:41:
                    17:c2:9a:c3:73:e2:27:26:cb:25:3b:ca:9b:2c:f9:
                    83:79:2b:6c:cf:55:d6:61:7f:77:0b:23:5c:87:b4:
                    ed:65:a9:de:ac:96:8c:bd:3a:95:4a:15:1c:ce:36:
                    ba:86:8a:3c:0d:fa:cd:11:4f:5c:0b:a4:68:c0:69:
                    5c:71:e7:b8:86:2d:a2:d8:92:0e:df:e4:14:25:fe:
                    09:39:50:2f:ae:10:8b:92:34:a0:eb:f5:c2:c6:00:
                    64:ba:b3:2d:96:ce:1d:8c:2d:75:8c:11:ca:10:87:
                    f3:ee:c2:6b:9d:96:2c:25:bf:3f:a8:9e:38:36:f5:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9C:BF:EA:61:9E:F9:EF:6C:E5:2B:9C:7E:5B:73:89:13:EA:E7:D5
            X509v3 Authority Key Identifier:
                keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:77:d7:d0:73:27:a4:3a:bf:dd:93:82:49:29:13:ac:91:
         05:57:3d:a7:63:c3:0e:7c:5f:6d:58:f0:5f:be:74:0c:2b:e8:
         d5:ea:ad:97:79:8d:89:28:63:c9:72:18:8e:62:53:60:50:d4:
         b3:5e:e6:fc:d2:dc:4c:66:82:e2:e8:db:d6:f4:b9:0c:6c:1f:
         5c:2a:ce:9b:92:8b:49:2c:1b:3b:c3:1b:68:2e:4d:9e:f6:4b:
         e8:b4:16:2a:43:b0:96:b8:65:ce:7c:71:82:d2:4e:be:fb:cf:
         ba:d2:fc:0f:23:ea:d3:3c:e4:82:45:95:22:01:46:4e:4a:11:
         4e:7b:2b:61:59:e1:1a:41:cd:33:5f:44:d9:02:7f:a0:0d:ec:
         ad:db:66:7a:f4:8b:85:b1:5b:6e:e2:30:86:d6:cb:01:28:9e:
         6a:ed:19:35:67:28:51:d9:27:9d:42:62:6e:0c:02:fa:d3:65:
         d1:d9:c7:34:ef:8f:82:a8:f4:d0:fa:29:82:1c:3f:02:bb:7b:
         4e:83:d0:27:ba:a9:d0:78:ad:33:8c:f9:0b:01:50:35:d5:4b:
         35:67:dd:59:01:29:ef:ea:72:62:8a:81:10:b7:bb:bb:a8:78:
         cb:34:29:98:5c:6b:bf:e1:aa:e8:ad:ab:5e:68:54:15:7a:04:
         09:dc:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:05:02 2026 by rpki-client