Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File:                     Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier:          lbtqqUddrh0T21HbKByGszzVYG0KPXygNkl6A2cLIzI=
Subject key identifier:   D9:A6:C4:4E:2E:D9:E7:28:24:70:72:6E:21:C5:4F:BB:1D:8A:D9:49
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer:       /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial:       019EBA6B0644CB5DBAC0D89DB5D2E62F9343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number:          0B6A
Signing time:             Fri 12 Jun 2026 06:00:36 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:36 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:36 +0000
Files and hashes:         1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: L3kQI9qtHnclQzicCe38VdajISN0gqJqZWW/FqxE6rU=)
                          2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6b:06:44:cb:5d:ba:c0:d8:9d:b5:d2:e6:2f:93:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
        Validity
            Not Before: Jun 12 06:00:36 2026 GMT
            Not After : Jun 13 06:00:36 2026 GMT
        Subject: CN=d9a6c44e2ed9e7282470726e21c54fbb1d8ad949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:82:63:83:a1:c5:f6:42:25:f5:76:9d:e2:c8:
                    80:cf:2d:71:29:b5:d1:2f:01:4a:62:2c:32:21:c7:
                    7e:76:76:f3:1c:85:16:04:02:46:50:a5:97:f9:fe:
                    58:9c:07:06:da:d6:0e:c6:75:30:15:85:5c:96:dc:
                    3f:fa:f5:53:f7:34:e5:a0:24:a8:43:15:d1:d6:21:
                    26:ad:9c:21:88:de:a8:94:e5:a9:91:90:a7:cb:19:
                    48:75:8d:0a:ea:2a:79:39:08:c0:c8:be:1f:f6:94:
                    d5:e2:19:8c:a9:1a:c2:a6:2d:f3:83:e3:fa:2b:0f:
                    6f:1d:ee:90:b3:5a:99:64:d9:e5:94:e3:76:f5:df:
                    02:3d:91:a8:e8:7c:68:e4:fd:5b:e2:33:ce:66:4a:
                    e6:41:9a:f8:20:76:9d:27:f6:30:88:57:1b:38:68:
                    6f:aa:eb:f4:d9:4b:b7:e0:65:8f:39:24:d2:8c:bd:
                    28:f1:93:9f:f4:a5:06:08:6e:07:f2:a6:25:74:7a:
                    dd:fe:3d:f6:59:8e:d1:f3:84:b4:e6:d5:c0:ad:3f:
                    07:62:96:18:dc:bd:44:3f:8f:c5:3e:30:15:ef:6c:
                    75:bb:01:ba:aa:c2:6b:26:a0:e2:1b:2b:ab:df:21:
                    a1:e3:91:1f:d3:a0:cb:c2:7b:c5:14:6c:7b:f7:c5:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A6:C4:4E:2E:D9:E7:28:24:70:72:6E:21:C5:4F:BB:1D:8A:D9:49
            X509v3 Authority Key Identifier:
                keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:da:dd:70:cf:5e:f9:b9:70:67:9d:e9:32:66:f8:f1:6a:b3:
         c9:97:35:fb:dc:40:7f:c6:5b:f4:31:7a:ba:8f:2b:48:2d:48:
         8e:3c:df:b9:18:e3:20:32:c8:17:56:d6:ca:ca:a5:59:0b:73:
         e4:ff:ca:3d:5d:a0:f9:c2:ce:70:6e:c0:b1:41:2b:26:d1:8d:
         fb:4d:fe:7b:ed:7b:0e:d5:4d:e3:60:28:5b:01:cc:59:09:f8:
         b9:04:86:eb:8f:d9:d1:75:af:68:79:e9:a9:4d:49:34:9c:56:
         e7:ff:d8:1d:fe:af:df:da:87:61:66:8a:05:9c:39:a9:54:61:
         05:32:73:db:94:8e:1c:d1:c2:33:2c:67:98:76:a0:65:a0:c6:
         84:a6:50:53:28:84:6c:44:75:cd:1a:67:00:09:28:b0:a0:d5:
         9f:4f:de:e5:bf:79:49:2e:9a:52:49:0f:b5:07:8d:8e:d5:fa:
         ff:d0:5f:90:15:85:7f:e0:bd:d8:cf:40:28:f8:b5:8d:ef:35:
         93:99:c7:cf:56:6d:ad:9c:eb:34:16:35:19:8e:c4:19:fa:2e:
         ab:f6:01:1e:41:17:5e:72:e4:4c:ae:d0:78:d7:ec:96:4f:0a:
         be:d5:5e:12:ae:9f:01:45:d4:2e:8c:81:ea:37:75:bb:60:64:
         f6:e4:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:11:44 2026 by rpki-client