Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File:                     qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier:          kmXVGq6i8TQJhTnIwfvgJ+6r/cNWE1lKfxegV1GArlY=
Subject key identifier:   D8:1B:F9:C0:71:A6:EC:FE:C9:1A:3D:B5:CE:4D:A2:30:84:AD:12:D8
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer:       /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial:       019EDB4060245EF93B26CD7C54FD2DAF4226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number:          0B15
Signing time:             Thu 18 Jun 2026 15:01:29 +0000
Manifest this update:     Thu 18 Jun 2026 15:01:29 +0000
Manifest next update:     Fri 19 Jun 2026 15:01:29 +0000
Files and hashes:         1: QRd4aPFV9jlBuWiqVWId4f78nwU.roa (hash: z76kR0ZXpWXElfaEyx2j2tbap+nSUCRwRkiT2NmSfmM=)
                          2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: QdfoGv+UDOYW7T1tmwRYp1OPBvQUG6Ga++ykh9WQXtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:db:40:60:24:5e:f9:3b:26:cd:7c:54:fd:2d:af:42:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
        Validity
            Not Before: Jun 18 15:01:29 2026 GMT
            Not After : Jun 19 15:01:29 2026 GMT
        Subject: CN=d81bf9c071a6ecfec91a3db5ce4da23084ad12d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:27:ae:3f:02:1c:b9:40:e5:01:62:3b:52:
                    f1:e2:0e:3e:cf:c4:5c:47:5c:7c:77:2d:c6:9a:e9:
                    f8:cf:32:cf:a7:05:e8:a8:93:a0:47:1b:88:33:ab:
                    d9:c0:c6:f0:f0:50:bc:15:4a:f0:c3:2b:0a:12:41:
                    ad:42:58:5b:da:5f:c3:54:3d:94:e0:35:be:33:09:
                    87:cb:be:ac:f6:d0:e0:30:30:a0:38:91:fe:23:eb:
                    27:69:3f:f6:42:bd:77:fd:fe:5d:9c:fb:54:67:60:
                    d8:28:af:05:51:91:ac:17:bb:09:ef:08:1b:c9:01:
                    79:75:83:90:b7:3c:86:da:54:b0:93:86:db:39:ec:
                    eb:d1:bf:91:1e:f5:99:f2:be:31:8a:07:4d:bb:7e:
                    dd:ab:51:da:bd:8b:12:71:cd:f9:c0:96:db:f1:8b:
                    e3:09:51:43:99:67:8f:7b:22:7a:13:0a:cd:0a:96:
                    97:ac:a7:e4:05:f1:00:b4:cd:01:bd:18:07:b1:b8:
                    68:64:78:2f:4b:9c:93:1b:19:81:e8:0e:1e:48:19:
                    1b:74:e3:1b:7a:dc:2b:e0:0c:3e:b7:b0:54:f4:1b:
                    e5:35:f5:c1:15:53:2e:82:35:b9:8e:c8:6d:eb:04:
                    10:e6:13:3c:2a:44:20:ab:60:b9:3c:af:16:2e:53:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1B:F9:C0:71:A6:EC:FE:C9:1A:3D:B5:CE:4D:A2:30:84:AD:12:D8
            X509v3 Authority Key Identifier:
                keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:22:7c:4f:7e:df:a7:36:91:e5:63:8a:10:db:5e:10:1f:81:
         d7:46:a9:90:ec:3f:01:63:fd:86:57:3e:a7:94:f0:d3:e7:10:
         02:58:c4:33:a2:e7:6b:2b:fd:c0:02:56:fc:5d:65:8f:b0:1e:
         80:1b:df:86:35:31:29:f3:d9:e2:84:2e:79:be:2a:70:48:2c:
         0d:a6:ed:86:77:69:d4:9d:20:4f:71:d5:a9:a5:b8:f9:d2:e8:
         4a:33:df:bf:d6:8c:08:c5:d8:cd:10:04:2b:7a:a5:a6:05:da:
         22:6d:2b:8f:a7:15:7b:32:e4:71:05:cd:42:b3:86:e6:83:26:
         01:36:62:25:c9:b3:f8:71:de:19:a4:8f:cd:39:6f:3f:c4:dd:
         4c:b0:c2:a9:3c:87:b8:d5:2c:cc:3a:29:bf:1a:2f:6e:e5:19:
         16:35:81:a6:90:8c:9a:ea:37:e9:ce:a1:ba:6c:e5:77:39:4e:
         da:49:67:ef:3e:30:71:5e:f0:5d:0c:6f:59:ba:ca:d7:b6:99:
         b5:58:5a:a3:8e:13:07:ad:05:e4:d1:b5:2e:a4:86:21:15:17:
         57:a2:20:36:16:de:3a:15:d4:db:1b:55:94:cf:e8:4e:80:9b:
         41:94:18:af:2d:34:cd:fe:71:80:ff:a9:58:4b:35:23:e1:c1:
         e3:05:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:49:49 2026 by rpki-client