Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File:                     kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier:          Ax1FPpEoCDpzr7FLdIC3nP96UG06pwPIEp+1RqxEUYc=
Subject key identifier:   FE:AE:12:9A:FD:DD:A2:D0:5D:51:BD:92:93:7F:E9:76:4C:3E:6E:F4
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer:       /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial:       019EB8B473BF6555AC752FE186A2569469D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number:          1501
Signing time:             Thu 11 Jun 2026 22:01:34 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:34 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:34 +0000
Files and hashes:         1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: HVh8XePhk+d/jwoAGuxehwvXVGsHJrObJXdzPQMc1RA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:73:bf:65:55:ac:75:2f:e1:86:a2:56:94:69:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
        Validity
            Not Before: Jun 11 22:01:34 2026 GMT
            Not After : Jun 12 22:01:34 2026 GMT
        Subject: CN=feae129afddda2d05d51bd92937fe9764c3e6ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:a8:24:4a:74:ef:50:d9:75:91:41:30:d4:
                    14:76:b2:79:93:e8:81:e9:c4:77:69:69:78:e0:5f:
                    e4:08:62:9b:95:a2:5d:16:0d:a6:8b:03:ed:3e:e1:
                    dc:59:26:30:37:23:41:61:66:97:13:53:11:a0:2f:
                    a4:3c:75:ee:98:fd:69:8f:d2:70:6a:fd:47:4d:c4:
                    ad:e3:55:52:8d:70:74:7d:7f:4c:8f:bd:0a:a1:be:
                    59:43:0c:c7:0f:ea:81:5f:8c:c5:65:ca:76:2c:44:
                    25:29:ae:50:1d:7e:bf:2b:f9:fc:2b:30:f5:98:12:
                    0b:29:15:01:54:c6:0d:0c:88:89:07:00:6f:81:66:
                    ba:92:fa:ad:01:5c:67:eb:e9:cf:b3:1f:47:35:d5:
                    7c:16:98:d2:f5:f3:d8:f6:35:55:c1:44:af:cf:45:
                    37:8d:cc:5c:09:cc:b4:40:fc:49:f0:ab:4e:b2:9f:
                    0e:a8:37:16:4a:69:e9:c9:92:23:1b:07:86:19:d0:
                    71:1d:31:ba:0a:b6:af:50:7c:9d:28:7a:64:ca:ef:
                    ee:c7:5f:44:f5:d2:2a:35:50:14:37:a3:70:06:af:
                    e2:d7:ed:73:a3:21:28:67:ee:8b:24:4f:13:4f:d1:
                    9c:e8:27:8b:b3:d3:5e:3d:71:f1:03:a8:56:4c:be:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AE:12:9A:FD:DD:A2:D0:5D:51:BD:92:93:7F:E9:76:4C:3E:6E:F4
            X509v3 Authority Key Identifier:
                keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2b:75:49:c5:31:19:30:05:df:fd:12:ef:8b:09:b3:1d:c7:
         d8:0e:8c:d8:04:57:99:9f:fa:14:63:7f:19:43:12:ba:91:18:
         dc:a9:30:6e:b2:29:f1:26:46:ab:0b:d1:9e:ad:ba:ae:8e:52:
         b2:54:65:a1:08:f6:a0:e5:07:23:bd:60:35:ca:3c:60:17:5b:
         05:da:60:98:29:dd:41:ed:f7:b6:6d:0f:f2:e0:dc:e8:d2:88:
         d7:d5:9e:b2:71:42:59:4f:4c:45:ca:b7:d8:aa:64:9f:ff:f5:
         09:b4:c2:1f:bc:12:38:84:6e:35:8f:74:4c:dc:41:3b:55:a5:
         26:2c:1a:a2:e3:20:57:5f:0d:a3:9d:12:f0:de:0a:bc:12:5b:
         09:e2:71:8d:eb:6b:44:47:a7:4d:48:5c:3a:d1:26:3f:83:d9:
         e5:af:d9:60:6b:1e:44:c5:5f:6e:49:1b:65:e2:17:c3:75:00:
         65:ab:87:e1:a6:cb:4a:0d:52:7b:73:32:8c:1d:3b:07:40:35:
         3a:e1:11:b0:14:74:c3:fb:ef:de:30:65:57:a9:c0:4c:19:d5:
         12:5b:bd:93:49:fd:c8:de:e3:5b:a2:71:8a:87:2e:49:54:e4:
         ee:d3:39:8d:46:69:07:e8:20:ea:75:90:cf:fa:4d:f0:84:82:
         28:f2:ca:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tHO/ZVWsdS/hhqJWlGnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYTFmYmEyYWIyY2QxMDExNDhhOTU5ZTdmOGMwOGY3YTQx
YmMzYzUwHhcNMjYwNjExMjIwMTM0WhcNMjYwNjEyMjIwMTM0WjAzMTEwLwYDVQQD
EyhmZWFlMTI5YWZkZGRhMmQwNWQ1MWJkOTI5MzdmZTk3NjRjM2U2ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EOoJEp071DZdZFBMNQUdrJ5k+iB
6cR3aWl44F/kCGKblaJdFg2miwPtPuHcWSYwNyNBYWaXE1MRoC+kPHXumP1pj9Jw
av1HTcSt41VSjXB0fX9Mj70Kob5ZQwzHD+qBX4zFZcp2LEQlKa5QHX6/K/n8KzD1
mBILKRUBVMYNDIiJBwBvgWa6kvqtAVxn6+nPsx9HNdV8FpjS9fPY9jVVwUSvz0U3
jcxcCcy0QPxJ8KtOsp8OqDcWSmnpyZIjGweGGdBxHTG6CravUHydKHpkyu/ux19E
9dIqNVAUN6NwBq/i1+1zoyEoZ+6LJE8TT9Gc6CeLs9NePXHxA6hWTL5ZYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6uEpr93aLQXVG9kpN/6XZMPm70MB8GA1UdIwQY
MBaAFJKh+6KrLNEBFIqVnn+MCPekG8PFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYt
ZGM5YzNhZTdlMzBiLzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYtZGM5YzNhZTdlMzBi
LzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSt1ScUx
GTAF3/0S74sJsx3H2A6M2ARXmZ/6FGN/GUMSupEY3KkwbrIp8SZGqwvRnq26ro5S
slRloQj2oOUHI71gNco8YBdbBdpgmCndQe33tm0P8uDc6NKI19WesnFCWU9MRcq3
2Kpkn//1CbTCH7wSOIRuNY90TNxBO1WlJiwaouMgV18No50S8N4KvBJbCeJxjetr
REenTUhcOtEmP4PZ5a/ZYGseRMVfbkkbZeIXw3UAZauH4abLSg1Se3MyjB07B0A1
OuERsBR0w/vv3jBlV6nATBnVElu9k0n9yN7jW6JxiocuSVTk7tM5jUZpB+gg6nWQ
z/pN8ISCKPLKew==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:11:53 2026 by rpki-client