Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File:                     1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier:          vFGRCW+/ZRnzjypabLsXt4QgM6qJfPClD0g4hKq84Qc=
Subject key identifier:   3C:2A:25:F4:77:DF:FB:3D:D1:EF:17:22:DA:82:F9:6E:BD:DD:A5:89
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer:       /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial:       019F17F9F4B2532B1E28C03B3FEF39958A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number:          0BED
Signing time:             Tue 30 Jun 2026 10:01:24 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:24 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:24 +0000
Files and hashes:         1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: 2nTG+JmATLlKMkEAZLaMa+ybCOPD0+5m9AcUbzIDVAQ=)
                          2: AKAYJxK55ho0_-tu4n3xkwEVy0E.roa (hash: CwiOEuZ5WNXcf/WHMc8X4C6V6miMKO5JICnCl7N0bT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:f4:b2:53:2b:1e:28:c0:3b:3f:ef:39:95:8a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
        Validity
            Not Before: Jun 30 10:01:24 2026 GMT
            Not After : Jul  1 10:01:24 2026 GMT
        Subject: CN=3c2a25f477dffb3dd1ef1722da82f96ebddda589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:26:4a:ca:6a:14:6f:4e:7f:fd:bf:e7:ff:
                    3f:3c:80:ef:d1:48:1f:53:b8:a7:ba:6d:45:71:52:
                    97:65:a9:a0:e9:3f:35:53:d4:42:db:ff:54:c8:ee:
                    24:e3:ac:cf:bf:d5:20:fd:08:28:dc:57:39:63:a2:
                    61:f5:99:da:0c:4f:c2:d5:f0:75:f5:15:c3:07:44:
                    fe:32:88:3e:50:b4:52:bf:20:15:3c:b5:12:c4:fa:
                    fb:73:74:2d:96:fb:0a:0c:8e:66:cb:d3:67:eb:26:
                    3e:e3:e3:3a:9e:9c:fb:1d:80:94:42:c4:7e:08:5e:
                    70:9c:e1:95:41:42:46:5b:ce:42:e4:6c:50:88:2a:
                    8a:dd:14:ee:a9:cd:8e:1d:ba:22:71:e4:38:5f:6b:
                    0b:d9:f5:90:10:d7:86:54:8c:4b:ba:35:35:3a:81:
                    b4:51:e1:0c:82:d2:cd:71:a9:83:e4:f7:69:ae:5c:
                    ff:f2:60:1e:b2:80:63:76:c5:bd:6b:ef:76:a9:66:
                    5b:c9:17:12:c5:04:e2:bb:52:11:41:8d:5e:9a:06:
                    32:e6:44:d1:42:aa:0c:42:6d:65:41:6c:fe:e8:64:
                    41:ef:27:c8:19:d2:d6:2b:60:c8:a2:45:e9:53:09:
                    99:1d:74:87:92:f9:11:5c:ff:ee:88:e4:5f:96:38:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:25:F4:77:DF:FB:3D:D1:EF:17:22:DA:82:F9:6E:BD:DD:A5:89
            X509v3 Authority Key Identifier:
                keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d8:c1:6e:95:4e:8b:4f:73:c8:42:44:94:62:b6:ee:c3:75:
         4a:a7:4d:f0:ae:de:cf:3f:3d:0e:cb:9c:45:8b:54:42:6d:f5:
         d8:23:24:ad:3e:f7:0a:7c:70:da:7a:7d:9e:fb:c9:4f:a0:ef:
         ad:b0:50:7b:5d:d3:b7:af:d1:70:ef:6f:10:9b:f7:fa:b9:bf:
         ca:04:72:2b:e4:38:cd:91:6d:92:06:51:0e:cc:83:4f:c7:f3:
         77:08:3c:d9:78:f5:8d:e2:67:84:ab:28:a7:20:28:d6:1a:b1:
         5b:97:99:59:67:e5:f2:8d:41:8f:d3:89:3d:c4:f2:2e:66:df:
         c0:1c:52:81:31:61:60:56:df:40:4c:ae:1c:7b:9b:55:74:6d:
         61:ef:8b:42:c6:08:c3:a4:20:57:0a:73:97:92:86:c7:5e:64:
         84:81:3a:d5:0e:80:b4:be:50:b7:18:bf:12:8c:a5:d9:e1:9a:
         a9:72:04:25:50:12:95:5c:50:35:9e:09:09:42:00:36:97:cf:
         c2:c5:dd:43:54:da:26:d8:86:62:27:af:61:00:ba:8b:a1:c7:
         70:ed:8d:75:70:f1:e9:68:67:f5:14:39:90:a5:c2:d4:fe:32:
         a7:17:28:28:74:11:cc:ce:5d:78:bf:79:f0:e1:be:b0:90:3f:
         e9:1e:87:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:01 2026 by rpki-client