Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          AERx0f3yJafEWoN1mrI83zHZMKBrU9Ic7G6SIGGkEJM=
Subject key identifier:   51:1B:48:1C:B8:30:70:D8:08:CE:F2:53:E4:33:1C:0E:44:48:2F:DB
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       019EB7D8229F0167A087BBEBB44D8D03387C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          1535
Signing time:             Thu 11 Jun 2026 18:00:55 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:55 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:55 +0000
Files and hashes:         1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
                          2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
                          3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
                          4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 6spgjz4Mp7mUmifOx6EWFfDzXQfX9JPqIcP+XaCngiI=)
                          5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
                          6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
                          7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
                          8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
                          9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
                          10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d8:22:9f:01:67:a0:87:bb:eb:b4:4d:8d:03:38:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Jun 11 18:00:55 2026 GMT
            Not After : Jun 12 18:00:55 2026 GMT
        Subject: CN=511b481cb83070d808cef253e4331c0e44482fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:7d:19:8a:d9:56:6d:40:f9:3c:21:fe:09:
                    83:8b:36:13:fe:41:81:43:fc:6b:dd:09:09:58:36:
                    ac:d2:50:a8:86:c4:45:16:b8:64:78:f3:84:ec:f3:
                    16:9c:04:ea:27:bb:6e:d7:5e:f9:c4:f0:ee:0a:20:
                    02:59:64:db:9b:36:fa:eb:58:30:c3:e1:e5:d7:8f:
                    90:72:04:5b:24:5c:d1:85:a1:e2:4d:bc:b6:7b:89:
                    9d:9c:94:86:93:37:10:c9:32:dd:14:bd:6a:b5:7a:
                    82:21:9f:df:d3:30:67:84:28:38:7e:e1:17:e5:d9:
                    09:f8:41:32:9d:2a:2a:e4:d0:21:6e:18:03:07:c5:
                    e3:39:b1:11:1c:ee:7e:02:06:75:fe:38:72:66:48:
                    d5:3c:1a:25:01:56:f4:d6:a3:fb:34:71:b2:4e:55:
                    7b:c7:78:43:bc:3e:14:a8:54:61:0b:58:c7:36:60:
                    b6:21:20:bd:09:e7:62:d5:66:98:c8:45:24:9d:f7:
                    0e:3b:3e:8d:16:83:55:e1:dc:2b:3a:73:c5:41:e7:
                    9a:fb:2c:84:36:66:e6:05:df:2f:26:07:00:9e:b9:
                    b7:90:10:e1:d5:f7:a9:f1:f0:bd:99:d6:55:0f:83:
                    1f:6f:05:13:1f:55:1b:a8:bc:3e:0c:61:75:dc:82:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1B:48:1C:B8:30:70:D8:08:CE:F2:53:E4:33:1C:0E:44:48:2F:DB
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:74:78:50:71:1b:64:32:bc:5a:51:e9:b8:e0:78:56:21:a2:
         74:36:54:4f:07:07:33:23:d4:e7:11:28:1b:29:ee:97:7f:e3:
         56:cb:15:56:3f:89:e4:24:03:3a:a3:9a:67:61:13:d2:72:be:
         29:1f:10:31:bf:c4:39:57:4d:7c:3b:9f:d4:74:a4:e6:b8:7f:
         4f:ef:84:b0:ae:83:82:be:0d:1f:3c:cc:7e:de:c5:92:51:31:
         fa:11:58:c6:5b:f5:da:da:2a:f1:6c:4f:68:a6:10:97:c0:00:
         92:6d:4f:ae:e4:29:87:27:0f:5d:a5:38:6e:0d:f8:6a:84:bf:
         71:98:98:5d:f8:61:bc:d4:30:08:e3:d5:b3:c0:55:e4:c4:29:
         3c:ba:55:ce:f7:9c:72:89:6a:52:35:65:88:68:1c:cd:d0:f1:
         34:c6:88:5b:51:50:bb:20:b1:e9:87:4b:0f:b7:a6:45:43:44:
         0d:05:fc:4d:a8:da:02:06:b3:91:c2:66:87:3e:e3:08:01:27:
         bd:78:f8:55:eb:2d:27:5f:3d:b0:2b:a3:93:b7:09:b0:14:68:
         20:09:71:a9:21:59:b2:a7:1b:27:9d:7d:03:84:01:89:d3:79:
         b9:f6:c2:4b:d1:17:91:8b:cb:80:21:f2:4c:e0:d4:02:60:83:
         3b:38:fc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:49:00 2026 by rpki-client