Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
File:                     QhuumJiY2UAkJKra-7R8Om1MJbM.mft (raw, json)
Hash identifier:          ZvqXB3eJgQSO7cVxb9CUrx4w8/8xMOLh0Q1CXm5eosg=
Subject key identifier:   00:E1:A1:84:D2:B0:76:61:93:40:AD:28:C5:57:7D:44:BC:52:68:1E
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Certificate issuer:       /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial:       019F129CBB6F2FFBEB398E93A1103D77B039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
Manifest number:          1991
Signing time:             Mon 29 Jun 2026 09:01:29 +0000
Manifest this update:     Mon 29 Jun 2026 09:01:29 +0000
Manifest next update:     Tue 30 Jun 2026 09:01:29 +0000
Files and hashes:         1: NJO_Y8Rmad7gmCoQl4EFdeb0puI.roa (hash: PeV4K+XBlCAlY87jlA0oZLozJmq4/8N/ed2usUmq5JY=)
                          2: NOncOo0ID7OFhBxkxahXCWMkSks.roa (hash: eW58ef5cup8x8SSubU4LarAJsD4cHKXH22VsKckNWME=)
                          3: QhuumJiY2UAkJKra-7R8Om1MJbM.crl (hash: RTG8tCpucNlzB0Jseg9i4dMmiaMpNqFhikHSHkoafmw=)
                          4: QxEip3wlOXriAz7nnAs_AC0I9NA.asa (hash: iXtb4Nzk+e2nFY3GJNhD9F09a2bTSvaIp01d/mdO65Y=)
                          5: rNA54cjskPX4lQNjfLFcvXVm1ps.roa (hash: 25Bd9sAqIVmNUoNvrSpnzoBxZmHIxEPQvqsKC2Kc+TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:bb:6f:2f:fb:eb:39:8e:93:a1:10:3d:77:b0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
        Validity
            Not Before: Jun 29 09:01:29 2026 GMT
            Not After : Jun 30 09:01:29 2026 GMT
        Subject: CN=00e1a184d2b076619340ad28c5577d44bc52681e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9d:d1:dd:05:46:30:e7:be:18:62:5e:05:be:
                    c2:90:da:f7:ff:cb:15:e2:da:1e:8b:60:1e:33:ea:
                    44:81:02:58:41:3f:9c:b2:56:27:c8:af:29:b4:bc:
                    73:51:ce:fe:6a:26:11:d4:a4:64:15:c7:ab:f1:ef:
                    02:b9:26:0e:82:6a:42:48:11:24:51:1e:10:db:52:
                    91:d0:47:6d:46:ac:dc:54:72:3b:4e:4c:cf:25:93:
                    f5:96:f3:de:ca:fe:4e:3d:62:0f:d2:8b:1c:51:6e:
                    92:9a:25:94:8b:ea:c1:6c:27:6a:f5:31:de:6c:4e:
                    1b:8a:9f:aa:ac:4d:2c:85:c2:5d:9c:e1:30:43:bc:
                    84:8a:84:38:c4:1b:e8:48:2d:1a:6f:a4:8f:9d:ef:
                    f1:5e:f4:d0:fa:17:d2:4c:27:d1:e6:16:1e:0d:e9:
                    73:ca:7d:f2:48:64:dd:95:40:b7:f1:e9:36:81:89:
                    5a:c2:3a:11:6a:2c:96:4e:d3:4f:e9:4a:60:bb:25:
                    2f:1d:62:55:ce:c0:7a:5b:90:21:18:9e:7e:5f:8b:
                    b5:38:81:6e:00:f5:94:cc:52:40:31:e4:65:9a:bb:
                    75:02:a0:cf:45:a8:40:99:4d:ba:60:0b:30:c2:a0:
                    37:c6:53:0d:6d:68:b1:0a:93:08:9f:f6:d0:87:18:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E1:A1:84:D2:B0:76:61:93:40:AD:28:C5:57:7D:44:BC:52:68:1E
            X509v3 Authority Key Identifier:
                keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1b:48:a0:18:40:c5:df:71:85:2b:b2:ca:61:7e:bc:f5:bf:
         df:ea:ee:aa:04:c3:ac:3e:44:40:cc:47:c8:91:55:06:30:84:
         a1:9c:e2:2c:54:0e:62:27:f2:85:a4:d4:9a:d9:4f:91:92:9c:
         f2:ea:04:65:9b:be:a6:01:60:5d:77:fc:dc:7b:61:3c:7d:74:
         a2:2d:ba:97:16:00:db:ec:cf:b5:cb:33:29:cc:bd:4e:a0:dc:
         70:47:82:b0:99:1b:8e:13:ef:94:e9:6f:2f:ca:4e:8d:26:5e:
         94:30:1b:9f:2b:fd:84:ca:41:69:5f:01:0d:6a:0c:8e:72:34:
         83:61:3d:15:4f:81:b8:12:35:e4:cc:5d:cb:af:0d:68:d5:d4:
         6e:42:db:c9:5a:38:9a:2a:1b:6f:8f:c8:72:36:5c:44:4a:ed:
         cc:0c:48:a9:b0:64:99:4b:2c:4f:18:4a:06:de:9e:84:88:50:
         56:14:bd:e8:58:b4:04:f7:26:5b:14:63:d4:b4:be:0e:d9:82:
         68:88:52:82:f0:d7:27:30:c1:10:92:3d:d4:8d:d7:dc:83:c1:
         89:5f:56:5f:5f:05:3d:e1:8b:bd:fd:c4:ef:b2:1e:6b:06:c9:
         7f:24:f1:c0:6e:a4:40:59:81:26:70:a6:3c:c8:ff:36:8b:b4:
         00:15:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:27 2026 by rpki-client