Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File:                     SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier:          2j/aHr0gWLIi88oHoldcCqyhatQUlQvYAi28bSD6XOQ=
Subject key identifier:   7E:3E:67:1C:1A:2C:66:BE:49:76:71:FB:A9:47:69:B9:09:4F:A6:ED
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer:       /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial:       019F1A1F740DA8274AD794093779C0289A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number:          1990
Signing time:             Tue 30 Jun 2026 20:01:36 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:36 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:36 +0000
Files and hashes:         1: D2NDXon9tRzoL-Y41MeImDBzBX0.roa (hash: hhnm2U2ilCapnJ9WdrcPHqXlSDPxhBMVV2XskPsU2V4=)
                          2: OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa (hash: oS3FUlduEB7YSg+361aWK05LocqnWlc3lIUtH4BZyko=)
                          3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: LD7G8L0oJQ/qJwlfvDUqDx9Tp44kn4rEZiJ/P9hubsk=)
                          4: Z4RE0ETdC4xhk1FbbundGTGGRB8.roa (hash: qQ3AizCsruyzTMQNiKoa4LuCo6aARO1PFZyPx/nGISA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:74:0d:a8:27:4a:d7:94:09:37:79:c0:28:9a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
        Validity
            Not Before: Jun 30 20:01:36 2026 GMT
            Not After : Jul  1 20:01:36 2026 GMT
        Subject: CN=7e3e671c1a2c66be497671fba94769b9094fa6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:78:49:56:1a:cb:f8:80:ca:70:f1:34:8d:
                    a0:21:f7:aa:a8:94:8b:2b:22:7f:fc:65:82:7a:32:
                    31:5a:7c:78:49:83:dd:6d:69:a1:80:58:84:fb:c8:
                    dc:fc:5e:57:6d:8e:f1:7a:d6:1a:20:da:1b:77:b7:
                    dd:f3:27:fc:77:ad:a8:28:29:4a:62:5c:38:fa:93:
                    74:93:db:d9:f4:4b:f0:2f:82:f5:83:db:cb:e8:ba:
                    35:9e:ce:61:80:12:8c:df:5c:53:b5:3e:d5:a4:0e:
                    da:ca:6b:43:1b:51:02:6f:6e:c0:0c:a6:36:6b:ae:
                    5e:1c:b2:c5:8e:1d:09:a0:68:92:61:4d:31:53:fb:
                    30:d9:57:72:1c:e0:7d:b6:01:84:d9:a4:02:79:aa:
                    7b:fe:6c:22:8d:54:6b:d4:35:79:3f:93:2e:fb:e4:
                    ba:78:7c:22:6d:2d:82:96:2d:36:6b:af:1e:3e:d8:
                    c1:41:18:c1:f8:67:7c:81:07:91:90:11:c9:41:e4:
                    9b:6b:81:13:53:fb:de:1d:fe:9f:65:0e:24:c8:4e:
                    c1:87:1e:2f:0a:34:57:1f:95:a7:b4:82:41:8e:52:
                    a5:e3:4c:56:76:8b:58:ea:cf:76:30:81:67:1d:95:
                    54:ad:61:0e:d4:81:d4:05:32:17:d1:4a:18:d1:d1:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3E:67:1C:1A:2C:66:BE:49:76:71:FB:A9:47:69:B9:09:4F:A6:ED
            X509v3 Authority Key Identifier:
                keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4c:b5:9f:9a:05:45:71:54:04:5d:51:38:f0:7c:21:6f:44:
         bb:26:82:66:95:5a:39:b3:f2:a9:c6:ae:e3:c0:42:0e:53:f3:
         1d:55:ab:e7:d3:88:b3:e1:11:c8:37:9a:80:8e:e0:d2:08:55:
         fa:16:30:df:a5:7c:b6:53:93:52:4c:a4:f6:b0:ba:dc:c4:9d:
         d0:e2:64:6e:84:a1:0f:c4:fc:af:f5:6a:8c:cc:16:73:83:04:
         b6:89:2d:59:37:bc:21:70:38:b6:3d:43:87:48:53:b4:a4:71:
         15:d5:ac:0f:bc:59:91:42:37:8e:7c:17:8b:53:71:af:cb:51:
         fd:fe:d5:50:4e:92:b3:f5:05:bc:30:13:c5:ea:80:93:30:3d:
         5b:ee:4b:65:4b:90:5b:a3:28:e9:9f:e6:d6:fb:52:c1:1d:11:
         63:c0:77:e4:81:94:7e:9b:2f:74:13:8e:3a:01:85:96:1a:99:
         ec:98:4b:37:f7:10:bd:89:f0:44:23:10:cd:1c:15:8e:b9:2f:
         d9:4b:a2:0f:c6:40:07:3e:c2:ff:24:0b:56:03:49:98:a2:94:
         b8:b9:83:21:ec:44:b0:b6:f0:4c:b6:21:55:b0:36:bd:7d:1e:
         76:e4:41:b2:91:45:e1:2e:36:20:7b:f7:47:0d:c4:df:59:19:
         db:fc:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:47 2026 by rpki-client