Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          3zXPRydP8rIvANUr7LLayinp9JWhXeRWHRBuGbkMAcU=
Subject key identifier:   DE:7C:1B:01:51:F1:0C:B0:F1:E9:46:BE:6B:64:23:F7:70:04:E0:CB
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       019F111C49C5412BD01BB30DCD77DCD224EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          1989
Signing time:             Mon 29 Jun 2026 02:01:34 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:34 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:34 +0000
Files and hashes:         1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
                          2: 6wrwVwIOmyHRFv2kHnVse0hIMz0.roa (hash: 3Bl4eyRcujw6eiEUMKOOuOVx73Mu069CKt56gjYDvno=)
                          3: MaMuRhJpZN3sUs2ReczUrxtPqog.roa (hash: CIDmAVgYtghMXGXHEdC7pvKkJAeXg2JMbpBDZ4AJ2O8=)
                          4: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: FfuARy7oEs0Yec5sodA/9iyH8UOqkt1iU2DypS4ktbo=)
                          5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:49:c5:41:2b:d0:1b:b3:0d:cd:77:dc:d2:24:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Jun 29 02:01:34 2026 GMT
            Not After : Jun 30 02:01:34 2026 GMT
        Subject: CN=de7c1b0151f10cb0f1e946be6b6423f77004e0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:7c:dc:c4:5f:13:5d:a3:d4:19:be:1a:27:
                    fc:fc:16:68:8f:5a:31:04:30:26:a1:85:07:a9:ce:
                    09:ec:78:83:aa:dd:b7:6c:7f:cd:a4:2d:62:eb:62:
                    c1:ee:14:ff:7f:31:3c:f9:b6:6f:92:71:bd:29:b6:
                    d5:81:af:2f:c6:d0:e9:8e:ff:a4:5b:04:63:a6:0e:
                    d5:e7:ef:95:fb:b9:ca:36:30:73:6e:94:cd:04:2c:
                    27:b4:0d:40:b2:9c:b4:63:82:36:5e:d4:4c:b2:1e:
                    b8:1c:6a:5c:f2:67:14:87:b6:f0:d3:1a:63:ca:82:
                    77:fa:8b:42:05:50:d4:fa:43:c4:61:11:14:f7:d6:
                    d7:a8:e7:ff:46:5f:07:16:88:e4:d0:95:4d:a9:bf:
                    17:18:a7:a3:a4:00:4b:d2:3c:72:f5:bf:bf:81:6d:
                    32:bb:20:ae:eb:81:8b:34:88:eb:d8:7a:5b:3c:18:
                    7d:81:a7:db:2e:07:cd:e2:2b:ab:f8:24:b2:38:ca:
                    b8:46:33:47:fb:24:f9:8b:cc:4a:31:a1:b8:2c:b9:
                    1e:d2:94:13:a9:dd:83:98:1c:7b:02:27:f6:39:14:
                    ae:98:13:0e:12:85:7d:8c:65:1a:1b:a0:3e:28:ae:
                    c7:e3:f6:7b:1c:59:9a:ca:25:e0:4e:b4:c3:7a:e0:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:1B:01:51:F1:0C:B0:F1:E9:46:BE:6B:64:23:F7:70:04:E0:CB
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:70:35:67:92:64:32:8b:f6:1d:53:b7:df:16:95:7b:0a:98:
         c7:91:b4:a7:48:87:11:90:26:6e:b5:5a:96:56:d6:74:fb:bd:
         a0:11:e8:33:6d:a6:c2:12:04:6e:cb:a5:69:76:09:20:c2:15:
         61:90:b7:86:7f:92:2c:d4:c6:d5:8c:78:bb:57:e9:2a:69:64:
         df:c1:79:ca:c2:e4:43:16:87:e7:c2:b1:f8:64:5c:80:26:e0:
         46:10:e3:3c:16:11:5e:0b:57:74:ac:33:6f:09:c1:32:9a:14:
         a0:66:be:af:62:04:fc:61:31:5c:2b:2c:f4:77:c5:6f:14:d2:
         2c:bd:8c:72:31:e2:9d:02:c0:03:76:ef:59:95:4a:90:9f:f4:
         fd:fa:7e:0a:4f:6b:37:52:e6:d3:19:dd:cf:88:f3:a5:8d:4c:
         a1:35:7d:7e:d9:ab:cd:8d:60:25:0e:d0:72:d0:51:7f:14:71:
         b2:cc:28:22:4a:f9:cd:4d:aa:e1:a1:82:34:09:3e:ce:1b:f3:
         67:ce:4b:1d:40:99:79:9a:b0:e9:01:92:d8:f4:6d:3c:15:47:
         78:23:e8:5f:9d:a5:86:22:7d:52:b6:65:57:31:f9:53:b8:61:
         bd:df:91:e1:aa:f4:6b:af:0f:46:8e:09:70:cb:d5:ef:25:9f:
         c9:5e:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:11:25 2026 by rpki-client