Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File:                     qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier:          ix1EkR2T880SmD3dsdRQqib9DEWyu9/wK72vTMgA1wI=
Subject key identifier:   9B:3E:1D:CB:6C:24:D9:C1:E5:7C:F4:5E:9C:54:63:B1:86:0A:75:61
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer:       /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial:       019EB5B32665B156DA3C9CBA1B493EAF44F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number:          1955
Signing time:             Thu 11 Jun 2026 08:01:17 +0000
Manifest this update:     Thu 11 Jun 2026 08:01:17 +0000
Manifest next update:     Fri 12 Jun 2026 08:01:17 +0000
Files and hashes:         1: E3Abz8c2x25X2p1IuNZFKekLDzE.roa (hash: DciKvL6unAo5I4YBQh4SUA/jwjzYuA3QTOA40FWqmwU=)
                          2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: 5zHoK+u0eQSDNzNcbDGjsAUhF/uSTqDephhEP/5kxac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:b3:26:65:b1:56:da:3c:9c:ba:1b:49:3e:af:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
        Validity
            Not Before: Jun 11 08:01:17 2026 GMT
            Not After : Jun 12 08:01:17 2026 GMT
        Subject: CN=9b3e1dcb6c24d9c1e57cf45e9c5463b1860a7561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:bb:c7:64:30:aa:d4:da:44:f4:5c:10:92:
                    a3:7a:7f:cd:b6:14:ac:21:bf:51:12:dc:9a:62:cd:
                    40:27:2d:20:8a:dc:bd:b5:5b:fe:f7:eb:f9:6c:b4:
                    95:34:6a:14:67:c3:7b:22:80:ae:fe:c4:d8:7d:18:
                    3a:ec:6d:c3:33:e7:8c:b1:9a:3b:1a:98:19:e4:89:
                    bd:7b:ac:84:08:60:b7:bb:b7:ec:47:fc:9b:49:18:
                    dd:93:b9:45:0c:5a:fb:0c:d7:50:ea:0f:e9:9a:72:
                    68:fa:9c:f7:f0:7a:83:c9:0b:b5:4c:12:f8:33:17:
                    47:b7:1f:af:90:cd:23:a7:2e:2f:29:4a:07:3f:fe:
                    68:84:ce:81:57:12:9a:d5:75:4d:90:f8:59:52:6c:
                    30:58:a1:7b:71:8f:b4:55:ed:1d:6c:36:06:5c:e0:
                    8d:bd:f4:f0:e7:d0:9b:38:1d:ed:6e:03:cf:9a:68:
                    6e:02:5c:fc:c5:64:c9:fe:ee:cb:71:d8:9b:b1:79:
                    81:b8:60:60:43:66:5b:8a:15:64:77:81:fe:3f:f0:
                    3c:21:6a:5b:a5:c8:4d:39:de:05:3f:a8:1c:f4:ed:
                    58:30:aa:31:9c:a5:66:48:7c:7e:df:7f:4a:78:2b:
                    4d:8c:a1:0a:d1:d7:73:d0:c9:39:43:77:ee:82:f4:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3E:1D:CB:6C:24:D9:C1:E5:7C:F4:5E:9C:54:63:B1:86:0A:75:61
            X509v3 Authority Key Identifier:
                keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:25:41:df:02:ab:dd:b2:3d:2e:80:38:44:4c:8e:e3:43:
         a5:af:0c:3a:4c:36:d1:43:46:7f:a5:91:0c:a2:16:69:36:a9:
         4c:4c:73:cd:54:30:4b:65:91:2b:e0:1d:1f:16:ce:c5:7f:a5:
         7e:ff:a3:56:f0:80:21:f0:4a:f2:28:bc:c0:39:56:9a:c2:25:
         fd:9f:f3:ee:ec:e3:ec:e9:a3:d3:9f:e3:60:17:36:c2:69:47:
         df:36:8b:83:21:5d:2d:6b:3b:78:cf:d7:0d:7f:00:e2:4a:be:
         e4:47:1d:4d:8b:aa:bd:73:3c:69:b4:6c:ef:c5:f9:d6:c9:6d:
         ca:c2:5f:cb:62:a1:91:bc:bc:ef:ae:7a:ae:1d:11:7f:8d:5a:
         0c:d2:17:d6:0b:71:ad:d2:8b:d7:ea:20:e0:19:d8:25:b9:86:
         78:be:d1:b0:f7:04:a8:d8:97:90:97:b4:21:40:4e:a0:ec:74:
         67:57:71:38:ed:d0:ea:bf:ff:65:90:71:18:06:4b:c1:ff:f4:
         9f:d6:27:69:3f:ba:55:6b:f7:22:4b:01:dd:fd:96:75:51:2c:
         9c:92:ee:3b:cf:1c:e8:09:b3:65:87:86:1f:0c:75:f8:51:27:
         05:ad:5f:53:68:23:76:70:b3:ab:7e:aa:b8:8c:33:92:7a:2f:
         b7:d3:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:15 2026 by rpki-client