Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File:                     qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier:          fGnj5SoTMFrvUgKG/2vXhh5ImMZFHsos/zSdmwlIZco=
Subject key identifier:   50:6B:84:16:24:CA:73:7E:2E:CA:9B:52:B8:B0:16:59:EA:A0:21:EE
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer:       /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial:       019EB7D7C37F1EDAABB69F4CAB8712E20BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number:          06C1
Signing time:             Thu 11 Jun 2026 18:00:31 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:31 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:31 +0000
Files and hashes:         1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=)
                          2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: J1ZYFQTlCFvGvGIWSHhZ7MUrfTsaTHuTy/granaL2NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:c3:7f:1e:da:ab:b6:9f:4c:ab:87:12:e2:0b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
        Validity
            Not Before: Jun 11 18:00:31 2026 GMT
            Not After : Jun 12 18:00:31 2026 GMT
        Subject: CN=506b841624ca737e2eca9b52b8b01659eaa021ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:b1:d3:2f:ad:9d:45:2b:a3:70:b8:b5:8e:
                    bd:ea:53:d2:1a:d3:8c:37:3d:98:ed:c5:2d:cd:2b:
                    e2:af:94:c3:7d:ed:7f:90:5d:e6:2d:6e:e8:d5:81:
                    3b:f7:53:d1:43:b1:cf:99:33:f0:84:d3:a5:a1:09:
                    2c:54:e3:08:3e:82:3c:fc:25:1c:2a:58:b7:8b:7e:
                    43:01:6d:d4:cc:89:6e:3c:5a:b2:7c:f5:43:e5:00:
                    23:d7:39:7d:4f:b7:a8:fc:16:fb:d9:27:2f:b7:fd:
                    16:49:64:58:47:71:45:90:7d:b8:d3:53:45:c2:10:
                    33:d2:1d:17:43:73:a1:72:28:83:7f:ca:e0:cc:1d:
                    6e:b1:3b:dc:62:3c:27:cf:c6:2a:47:c2:f3:77:0d:
                    6d:66:46:ae:99:fa:7f:b0:cd:cd:6f:0f:29:38:df:
                    4d:1b:6a:d3:9f:13:ad:5f:20:1a:67:9c:e4:c8:29:
                    83:41:af:30:18:39:9a:0a:ab:63:4c:3a:1c:32:2f:
                    5f:77:12:6e:fd:da:43:9c:0c:c6:67:87:52:b1:40:
                    3a:0c:90:d9:c0:d2:e9:93:19:0c:62:14:18:9b:e4:
                    2a:4d:5d:eb:92:03:c0:84:37:03:39:af:c0:e7:1f:
                    6b:73:82:52:df:9f:45:42:33:a2:55:10:73:8a:86:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6B:84:16:24:CA:73:7E:2E:CA:9B:52:B8:B0:16:59:EA:A0:21:EE
            X509v3 Authority Key Identifier:
                keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:62:11:39:60:d1:26:5b:54:fb:11:f6:96:90:88:a3:ee:
         9b:62:bd:ba:4c:e4:5b:93:ff:43:80:bf:ec:ce:b2:af:09:da:
         07:5a:75:33:1d:3f:25:7c:d7:f3:e4:26:9c:13:42:ae:b1:7d:
         3e:56:86:06:3e:4b:99:20:b1:ca:b7:65:90:6e:70:0b:9b:ed:
         25:1d:4f:cd:0e:18:18:14:3a:bd:8c:fa:81:af:9a:06:37:cb:
         34:1a:f7:9e:e9:75:2d:0e:e2:95:c4:6b:95:94:81:a1:00:a4:
         51:16:4d:a2:8a:75:c8:c7:27:51:b7:3f:84:d3:b2:e0:d8:b6:
         b6:28:9e:5d:94:92:81:00:57:e4:0c:6e:c9:48:e3:ef:94:11:
         28:da:33:f8:ed:90:a5:df:5b:10:9e:61:80:e6:93:d2:00:17:
         bc:8b:b5:39:57:54:4c:00:9d:46:8f:a9:b5:5f:ce:6a:04:0e:
         dd:b3:3a:82:85:8f:12:5d:e5:95:4a:d4:72:c3:0c:93:e6:2a:
         b8:81:c0:6d:54:45:91:ad:dd:a9:7e:b9:70:4c:32:4f:ef:28:
         34:0e:56:a2:76:88:a9:b8:45:a5:64:20:3d:72:f8:b6:b9:d1:
         73:7c:e0:81:6d:8a:51:07:ab:e9:9f:8a:b3:fd:b3:04:d9:a6:
         23:64:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:07 2026 by rpki-client