Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File:                     QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier:          XPJZye8CR8kjK08L1L+Xr71PGtu2tlk54w/SwjgDAlM=
Subject key identifier:   67:92:43:5E:91:F2:AC:25:FA:3C:E5:93:40:05:31:6D:4D:1E:2B:E9
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer:       /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial:       019F10E53744FAB88C3DBD62D43808A17480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number:          166B
Signing time:             Mon 29 Jun 2026 01:01:24 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:24 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:24 +0000
Files and hashes:         1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: posFqAo/VAofMH2Do10+UwGih+bf3InN8vAGCo7RGMY=)
                          2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e5:37:44:fa:b8:8c:3d:bd:62:d4:38:08:a1:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
        Validity
            Not Before: Jun 29 01:01:24 2026 GMT
            Not After : Jun 30 01:01:24 2026 GMT
        Subject: CN=6792435e91f2ac25fa3ce5934005316d4d1e2be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:f3:78:85:45:8e:ae:74:17:c7:2c:f7:9d:
                    7e:74:0b:a3:12:02:c3:40:42:1c:dd:15:e6:9f:5f:
                    46:d2:77:04:d7:3b:38:db:9a:14:9c:68:bc:0c:39:
                    4e:3f:40:db:c2:80:02:a0:22:a0:87:b4:8c:9b:79:
                    e0:e6:2d:9c:29:d0:88:9c:56:e8:80:7d:6d:b9:de:
                    f1:df:5a:21:8b:27:c3:b4:ec:74:2b:78:d9:61:ff:
                    e1:c2:5d:c9:40:44:cc:90:0c:51:bf:20:31:b8:91:
                    96:11:36:5e:84:67:ee:c9:f1:c6:09:e1:09:fd:88:
                    18:24:53:4a:a5:28:f8:61:55:30:a4:29:88:2b:74:
                    a0:47:30:71:f9:ce:75:89:72:dd:cb:0a:ce:35:f5:
                    8c:82:72:a9:94:f7:0f:7b:08:00:a9:4d:84:6b:2d:
                    09:a3:eb:dc:f1:7b:64:52:2e:45:39:5a:e2:c8:32:
                    be:3e:2c:08:2b:0b:ff:20:c4:55:3b:46:93:aa:e6:
                    b9:7e:f6:b3:b1:8f:10:a7:9b:1f:79:5d:8c:4a:bb:
                    ee:3c:a9:4f:9c:34:3f:85:2f:ba:75:d0:84:c2:fc:
                    1f:36:3a:f0:56:35:43:da:f1:d6:b5:51:c8:7a:cc:
                    1b:12:80:37:85:89:a1:f4:df:d6:10:e1:be:0e:25:
                    78:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:92:43:5E:91:F2:AC:25:FA:3C:E5:93:40:05:31:6D:4D:1E:2B:E9
            X509v3 Authority Key Identifier:
                keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:62:7d:b6:86:d1:36:ea:1d:2d:92:c9:7e:e9:01:bb:d4:2a:
         ee:a1:ad:16:e1:ca:02:24:47:ff:dd:53:73:1e:24:e0:db:5a:
         36:cd:fb:53:8e:e3:f9:7f:d2:0c:fb:91:68:33:b3:ab:95:e0:
         d7:ca:de:f2:16:6d:e5:ae:69:e1:0a:8c:0e:6c:e7:3f:59:5c:
         7e:a5:65:93:81:5d:9e:95:0b:b1:31:3e:ef:4c:b1:d4:c1:96:
         9c:68:2d:a4:2d:44:78:70:cc:4d:97:51:1c:7e:17:d8:4e:54:
         00:3f:84:87:e2:29:d3:6d:a6:02:cd:d2:eb:99:bb:cd:0b:a6:
         cd:86:90:c8:dd:bc:bf:7c:65:05:c9:2e:b6:04:66:8d:e0:3d:
         cb:1e:67:66:7b:b0:f0:87:3f:96:4b:95:da:7c:87:3d:57:53:
         04:32:71:af:0b:7f:b3:b1:0e:24:28:fb:e6:5f:3c:e9:e7:bd:
         5a:7b:b1:29:bd:57:98:5d:5d:ab:36:69:6c:02:71:87:c0:62:
         23:a8:aa:50:09:32:f6:b7:1a:08:52:32:62:52:56:5d:ac:ae:
         30:3e:fe:1f:89:d9:0d:dd:36:fd:aa:0f:ad:cb:16:52:06:f3:
         6e:21:41:11:f9:ea:b5:3d:e2:7c:52:dc:0c:97:38:c6:5b:7b:
         fa:f1:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:12 2026 by rpki-client