Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File:                     qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier:          2Z2D0E2CCBrlK7ne/cih6JsMHArBK2twkUOz7/ooxlk=
Subject key identifier:   14:F3:D1:CF:26:83:F9:AA:83:38:EB:6E:4F:82:DA:9C:EE:B1:08:0D
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer:       /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial:       019E9D05AF2F902C8C3E82A47EA52AC018E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number:          034A
Signing time:             Sat 06 Jun 2026 13:00:55 +0000
Manifest this update:     Sat 06 Jun 2026 13:00:55 +0000
Manifest next update:     Sun 07 Jun 2026 13:00:55 +0000
Files and hashes:         1: TvCeC-CTMvUOvfqvZDepdi4lqnQ.roa (hash: ESVtJ3kouBpjTr4WqJWzhzotaZoW4Cj/KB3SLHg/1MA=)
                          2: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: wcTK7r+j894Dnx6aMofoAOtbyOackOXwlEp+ifNbGuM=)
                          3: yQ4lwVZKtZ37ncDrw-J5ETPGiug.roa (hash: YOCERM8UiZIP0yKzgGY8Yras8dDVp4zqydgV9vmHZ3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 12:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:05:af:2f:90:2c:8c:3e:82:a4:7e:a5:2a:c0:18:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
        Validity
            Not Before: Jun  6 13:00:55 2026 GMT
            Not After : Jun  7 13:00:55 2026 GMT
        Subject: CN=14f3d1cf2683f9aa8338eb6e4f82da9ceeb1080d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:b2:c1:a9:f5:5f:de:ab:1b:6f:b6:ea:94:
                    50:c5:40:3f:75:ac:d6:6c:70:2e:25:e8:ed:77:cd:
                    6e:48:e3:a4:29:51:38:99:00:d9:3a:be:fe:14:2e:
                    63:ba:0c:5b:cb:c8:44:bf:76:a8:8b:60:93:d1:6d:
                    3b:ca:39:de:ae:d6:bb:15:11:61:86:7b:b6:4c:29:
                    fc:23:8b:21:9f:66:8a:e2:5c:f1:ce:87:5a:56:a9:
                    ae:dd:90:11:18:07:a3:ac:a6:01:6f:c9:7b:e1:4e:
                    cd:8f:5c:0c:36:67:09:35:a1:ff:fc:27:c5:04:ee:
                    d7:af:65:eb:51:eb:7a:e4:8d:3a:f7:73:66:a7:e7:
                    30:e4:2d:46:04:4a:d0:75:e9:0c:02:f5:ca:0e:e5:
                    01:89:f9:8a:9d:0a:98:3e:cc:b5:a0:bf:e6:57:1a:
                    2c:bc:88:b6:57:8a:4a:e2:3a:59:65:b3:0b:eb:e7:
                    86:5d:40:91:53:a3:f3:6c:e2:d2:e2:07:2c:30:ac:
                    3c:00:f8:57:dc:06:f5:8d:62:b7:ad:8b:4f:58:be:
                    fc:2e:49:14:f8:e5:c9:5e:3f:e2:ae:b8:7c:92:45:
                    52:f8:03:08:35:bc:34:65:4b:d8:32:81:f3:c2:fa:
                    4a:74:eb:b7:9a:58:8f:f9:4a:1e:fe:7b:8b:47:70:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F3:D1:CF:26:83:F9:AA:83:38:EB:6E:4F:82:DA:9C:EE:B1:08:0D
            X509v3 Authority Key Identifier:
                keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b8:b4:c3:40:de:29:55:f6:c1:08:73:eb:5e:a5:6a:39:c3:
         96:97:ec:f1:c7:ee:92:96:67:d6:ad:20:40:23:41:87:64:f5:
         b4:c3:05:0b:80:19:eb:ee:62:0a:b3:c0:e8:a9:e3:d5:db:db:
         70:e1:a9:92:94:15:01:8e:65:74:eb:64:9d:aa:59:c5:35:8b:
         7b:02:4b:87:d1:00:2b:b9:9c:6b:9f:99:5b:4c:fb:dc:c6:b1:
         a6:b6:61:c6:24:1d:c1:04:b0:9d:d4:53:6a:84:b2:d3:92:6f:
         74:bb:2c:48:57:d7:26:f7:8c:c7:2e:cf:c0:0a:57:c9:43:28:
         42:c7:bd:61:e1:7f:77:f9:b8:28:73:c1:ff:99:ae:47:9c:05:
         39:e5:db:51:d0:43:79:17:1a:fe:9c:16:0b:74:4c:f3:29:c0:
         78:ae:ab:1a:00:9c:8a:ca:bb:bd:11:9b:ec:c8:66:a3:63:7b:
         f4:59:ca:76:9b:0d:12:7b:60:79:34:f8:be:8b:ed:16:3d:16:
         32:0b:9a:ae:37:cd:56:0a:db:3b:9a:8b:44:0e:87:a4:e3:8a:
         ef:04:9f:20:37:0b:d6:55:d1:c7:b0:b0:b2:c4:3b:29:72:b9:
         62:41:c2:85:99:7c:f4:67:ea:5c:53:47:bc:fb:f6:3d:e2:77:
         98:b4:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:00:59 2026 by rpki-client