Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File:                     qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier:          YJZMXWnXo9V/dj+3NAedWssXPDbcqtLELar8lLcUC1g=
Subject key identifier:   8C:CB:52:AD:6E:1D:73:96:6F:64:41:F8:4F:5A:54:56:9F:85:63:B5
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer:       /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial:       019EDB0915CF91C45D4CF08195B6008FFC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number:          1315
Signing time:             Thu 18 Jun 2026 14:01:06 +0000
Manifest this update:     Thu 18 Jun 2026 14:01:06 +0000
Manifest next update:     Fri 19 Jun 2026 14:01:06 +0000
Files and hashes:         1: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: Bok/xu74DM+SSUcF7Kvg5JdHZUnRKVX0Ft2hXmdqEvc=)
                          2: y4ozBsAhD0SXzDXTnSLIwi05yzY.roa (hash: UpquKmMoHnebuH46QTJH9ZI2B7xELceGE768LObgLRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:db:09:15:cf:91:c4:5d:4c:f0:81:95:b6:00:8f:fc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
        Validity
            Not Before: Jun 18 14:01:06 2026 GMT
            Not After : Jun 19 14:01:06 2026 GMT
        Subject: CN=8ccb52ad6e1d73966f6441f84f5a54569f8563b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:35:fa:3c:7d:dc:85:ca:ec:3e:44:11:4b:41:
                    56:1a:3b:04:3d:04:28:f1:6e:4e:8f:2e:f0:1f:33:
                    d3:4c:a5:90:09:b2:17:ee:db:66:1e:39:f6:4b:e4:
                    67:bd:17:42:2f:cb:47:43:e1:58:8f:ce:39:19:3a:
                    3b:5e:df:b8:1e:06:b1:ee:ba:f9:cd:3d:20:f7:bd:
                    8e:94:87:ac:e8:a9:8b:fd:bc:03:28:7c:96:b2:ff:
                    91:e7:c6:6a:79:2d:5f:05:d9:f4:10:b7:5e:16:84:
                    fc:1d:3d:ee:2f:31:67:ae:5b:a1:8a:2f:45:57:be:
                    59:d0:6b:00:0e:d4:2e:9b:4c:9c:b8:02:be:c1:b9:
                    ce:fc:83:c6:e2:7c:66:bd:d5:1d:04:6f:ee:cb:1f:
                    f4:92:e6:c1:cb:04:4e:02:81:db:8d:32:ae:41:3e:
                    5d:f0:a6:b7:6e:7b:b5:83:1e:41:46:02:1e:76:c5:
                    01:f3:ba:e7:93:68:57:ef:19:32:f5:49:4e:2f:a7:
                    63:66:3c:51:66:eb:ab:01:7a:b2:08:b7:2d:00:9f:
                    94:4d:54:f7:0d:3f:af:8b:93:be:34:68:73:8e:16:
                    1b:87:b1:af:1c:ae:1e:e7:01:9b:fb:93:fa:31:8c:
                    77:29:a6:c2:cc:22:10:99:6f:6e:f9:6c:a7:c0:30:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CB:52:AD:6E:1D:73:96:6F:64:41:F8:4F:5A:54:56:9F:85:63:B5
            X509v3 Authority Key Identifier:
                keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1f:f2:73:01:a1:7c:8a:47:af:c6:cc:60:02:15:79:c8:e4:
         f9:6c:aa:11:53:c6:89:83:d1:9e:10:23:d6:d5:25:f0:6f:a1:
         84:d8:d4:45:b3:b4:fe:07:a0:fa:d1:fc:f7:a0:42:ba:7b:b1:
         7b:35:f1:6f:d7:e4:01:67:08:5a:58:4e:91:ff:c2:72:88:09:
         ca:a6:d0:8d:ae:79:1a:92:79:fc:e6:0e:83:a6:39:c9:17:31:
         3f:42:6c:d6:b1:d8:09:da:87:6c:28:c7:0c:48:03:9c:40:8e:
         8a:cd:96:e4:58:02:26:35:ab:ba:45:62:8d:6f:92:b0:0e:3b:
         09:d9:04:2b:51:1f:b1:82:56:3d:54:29:f1:5c:1a:08:88:0e:
         73:9f:f1:8f:77:f0:7d:08:8d:f7:0a:14:bb:a7:a2:e7:57:3f:
         d9:92:25:85:e8:fe:3b:a2:2c:e7:93:b5:1f:bb:9d:1f:6e:b4:
         fa:77:97:d9:95:ec:9d:88:d3:ca:41:92:8c:63:82:ab:aa:19:
         3c:e7:59:1d:46:51:aa:5a:30:a2:aa:ca:2f:e5:b0:a6:b8:89:
         a1:78:77:bc:6a:be:d1:cf:85:ff:ea:23:19:1a:9e:ce:e6:1e:
         a1:f9:92:74:a7:5a:2c:38:f6:e7:f3:13:57:52:87:a3:ae:37:
         95:03:34:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 01:34:10 2026 by rpki-client