Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          TgNjM3OkzfHeqsgCtfYPWbYIjws+7fFDWSzMRvIj8PM=
Subject key identifier:   8A:BD:33:69:4C:F9:DB:93:32:4E:AB:56:A0:64:56:33:0B:99:94:D2
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       019E92B85D4DB75DB144B21336946447CB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          1946
Signing time:             Thu 04 Jun 2026 13:00:16 +0000
Manifest this update:     Thu 04 Jun 2026 13:00:16 +0000
Manifest next update:     Fri 05 Jun 2026 13:00:16 +0000
Files and hashes:         1: 3ZiFvY-Cgcsn1T3DHXJhNHlrMbM.roa (hash: QMUQaheEQkA0MuEkm4MPIvv4qbnyv2b8MIRuQ/sS3qA=)
                          2: 7o1SWwCM_cXOFE762glcqqrc0g8.roa (hash: sE4Y/ceaKQXMuGNY66ML+K4wpI2dw3LerD1iYOVm02w=)
                          3: B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa (hash: xAVVZn3+u5SiYc0g3K3z0LHTfUSG0q/VqxbfyLSsAU0=)
                          4: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: cezes7+hqw7NkIPDoQbxEWZj8Rl0oNujRGDKYR2CLp8=)
                          5: RBn0x09QP17HKTcUk35SeRs4wcQ.roa (hash: K/tTO8Tdy7lEQRLsArj6GBa808uE/Om7+O6QXLd3MN8=)
                          6: hE8C31w_RpAXSBqCw_OOMk-JFm8.roa (hash: HNil33scanjIhVtVF2DLJ+3VEH2NbJtgfLv8Zd42M2M=)
                          7: rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa (hash: k3IT1blcLOwKvPoRomK4b+Py9VtjJ31MfrlWEqMTSvE=)
                          8: ysOgSedTzNHk11K4jKIf8bjTvJY.roa (hash: sn0AlxCtP5/CYV/E85JBe+P2cnutzVIoTcXj+Kz8kMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:b8:5d:4d:b7:5d:b1:44:b2:13:36:94:64:47:cb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Jun  4 13:00:16 2026 GMT
            Not After : Jun  5 13:00:16 2026 GMT
        Subject: CN=8abd33694cf9db93324eab56a06456330b9994d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a7:d6:11:04:c5:f9:46:b6:2a:98:9f:60:e8:
                    70:2f:4a:2c:77:4d:e5:fb:1f:95:8b:0f:86:4b:e1:
                    5c:b1:80:1c:8f:03:36:4c:17:06:49:4e:0f:af:15:
                    64:70:1e:39:2c:bc:95:0f:45:1b:f2:bd:e7:7e:fd:
                    5f:3c:f9:71:41:9a:a8:e6:5d:a7:9f:45:41:0f:d0:
                    f0:12:bf:6f:4d:13:10:d9:5e:91:57:4c:0b:bc:2b:
                    ce:e6:19:bf:20:a0:2c:6c:16:56:c1:f6:06:d7:31:
                    c4:32:a5:be:4d:e0:ef:6b:4f:27:5d:14:eb:d4:12:
                    67:bb:f6:82:f8:fb:6d:c4:df:3b:05:fa:fc:76:fe:
                    e2:f0:0b:05:33:00:39:c1:12:6c:5d:79:5e:05:13:
                    c3:c9:66:47:47:f1:27:a6:12:51:1b:92:fc:fb:1a:
                    8c:92:d8:fd:ea:5b:d3:8e:d1:1c:2a:dd:30:bc:9f:
                    ff:49:ca:37:47:0e:16:a1:48:d3:58:8a:3f:ba:e2:
                    38:8a:7a:51:16:3a:29:17:51:1d:75:9b:38:e8:21:
                    5c:9f:cc:a1:db:97:08:38:1e:85:a5:dc:3a:0f:20:
                    72:71:28:b6:9e:b6:17:8c:2b:aa:f3:67:8f:b8:9a:
                    48:dc:89:23:37:13:da:85:22:c6:47:0f:0c:a1:47:
                    88:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BD:33:69:4C:F9:DB:93:32:4E:AB:56:A0:64:56:33:0B:99:94:D2
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:2e:26:39:18:d3:a8:c1:7c:87:fc:5c:d8:18:5a:74:b8:
         91:db:44:48:8b:af:b8:86:11:62:a1:24:ad:6c:e7:50:0a:e2:
         f3:39:83:ac:7c:5c:56:eb:55:59:dd:cc:1d:18:af:63:52:0b:
         b9:69:ca:15:18:df:9a:e5:80:14:65:42:d9:61:99:a9:ad:33:
         f1:aa:8c:06:62:e6:3c:30:6b:91:a0:df:49:4d:f6:4f:79:f2:
         d0:e5:e3:ce:a0:28:39:77:02:28:da:4c:52:ae:ac:cf:d0:10:
         01:8f:9f:72:d3:e1:ee:ff:b9:9a:f4:df:4e:c9:10:2d:6f:3c:
         12:29:9e:d1:2a:90:47:e4:18:aa:88:b1:b8:4e:3c:5a:0b:7d:
         15:8c:3e:2e:40:c7:1a:58:01:12:24:b5:cd:c3:44:02:60:b7:
         e6:5c:6e:84:bb:06:ed:f0:03:2d:98:f5:22:57:42:34:7a:b8:
         95:28:80:ec:ec:22:7a:e6:a8:32:9d:5a:3c:92:4f:bf:86:e4:
         23:7a:4c:65:9c:55:58:67:09:09:3a:db:dd:51:2f:53:2b:a4:
         91:00:58:ce:23:f7:78:76:f2:1f:73:6b:1f:c7:cf:9f:c8:e3:
         bd:84:50:04:bd:85:32:10:5b:05:a5:c6:f1:e7:99:05:43:68:
         62:ac:87:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6SuF1Nt12xRLITNpRkR8t8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDJkM2Y5YjMxMTI2ZTA4NTAyNjU3MTVjOWZjMzIxNzRi
NTU3YTQwHhcNMjYwNjA0MTMwMDE2WhcNMjYwNjA1MTMwMDE2WjAzMTEwLwYDVQQD
Eyg4YWJkMzM2OTRjZjlkYjkzMzI0ZWFiNTZhMDY0NTYzMzBiOTk5NGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1afWEQTF+Ua2KpifYOhwL0osd03l
+x+Viw+GS+FcsYAcjwM2TBcGSU4PrxVkcB45LLyVD0Ub8r3nfv1fPPlxQZqo5l2n
n0VBD9DwEr9vTRMQ2V6RV0wLvCvO5hm/IKAsbBZWwfYG1zHEMqW+TeDva08nXRTr
1BJnu/aC+PttxN87Bfr8dv7i8AsFMwA5wRJsXXleBRPDyWZHR/EnphJRG5L8+xqM
ktj96lvTjtEcKt0wvJ//Sco3Rw4WoUjTWIo/uuI4inpRFjopF1EddZs46CFcn8yh
25cIOB6Fpdw6DyBycSi2nrYXjCuq82ePuJpI3IkjNxPahSLGRw8MoUeIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIq9M2lM+duTMk6rVqBkVjMLmZTSMB8GA1UdIwQY
MBaAFEFC0/mzESbghQJlcVyfwyF0tVekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGIt
OWM5OGQxMTE5N2I3LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGItOWM5OGQxMTE5N2I3
LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjYuJjkY
06jBfIf8XNgYWnS4kdtESIuvuIYRYqEkrWznUAri8zmDrHxcVutVWd3MHRivY1IL
uWnKFRjfmuWAFGVC2WGZqa0z8aqMBmLmPDBrkaDfSU32T3ny0OXjzqAoOXcCKNpM
Uq6sz9AQAY+fctPh7v+5mvTfTskQLW88Eime0SqQR+QYqoixuE48Wgt9FYw+LkDH
GlgBEiS1zcNEAmC35lxuhLsG7fADLZj1IldCNHq4lSiA7OwieuaoMp1aPJJPv4bk
I3pMZZxVWGcJCTrb3VEvUyukkQBYziP3eHbyH3NrH8fPn8jjvYRQBL2FMhBbBaXG
8eeZBUNoYqyHxA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 16:15:08 2026 by rpki-client