Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File:                     1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier:          MmqXlViv24fpKLWRMYeYAiEOz1c0OqHKOUeinzDZHT8=
Subject key identifier:   6F:A3:2A:3C:0D:93:80:36:AB:2C:2F:54:51:48:99:22:B7:4E:5B:D8
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer:       /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial:       019E8D5BCA1F2233106C380AA39290279F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number:          1434
Signing time:             Wed 03 Jun 2026 12:01:03 +0000
Manifest this update:     Wed 03 Jun 2026 12:01:03 +0000
Manifest next update:     Thu 04 Jun 2026 12:01:03 +0000
Files and hashes:         1: 1j1sIxN7dokPMeqtWpa2O79IJ2E.roa (hash: curzmuQMCpShAx5Xjvb+jxSDTma4OGIGe6t1amKgW4Y=)
                          2: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: cpsoQFYsKWdWV4iVMWKlbjEJSTijzjaYeOVEWQ2wzjM=)
                          3: H41pXcA8VjDWzAOdUw8kJkHTePo.roa (hash: vd9X0KNO4KjRnGRSxo8WoFeqcJXdexnSKn3TUknAjFQ=)
                          4: og4k5qVFbhVmLtxHVp2XKWNx-Vw.roa (hash: t6ZkyRFXAOHZOC93uE5FiUdcUyb51CT48WJCdjiZU/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8d:5b:ca:1f:22:33:10:6c:38:0a:a3:92:90:27:9f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
        Validity
            Not Before: Jun  3 12:01:03 2026 GMT
            Not After : Jun  4 12:01:03 2026 GMT
        Subject: CN=6fa32a3c0d938036ab2c2f5451489922b74e5bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:db:83:0c:3b:80:c7:9b:c5:75:6e:be:29:
                    39:2c:ce:27:c6:05:52:bc:78:3b:06:39:ed:28:fa:
                    64:b1:3a:75:54:40:b0:d4:f2:df:50:92:18:8f:ba:
                    d7:1e:8a:03:b0:e4:98:43:48:84:05:5c:15:db:9d:
                    c1:9d:c5:9c:6b:9d:6b:a0:61:8c:92:ba:99:0b:e5:
                    05:96:07:f7:86:70:14:04:75:9b:de:99:48:0a:28:
                    eb:47:68:ea:44:bb:14:a8:a2:e5:bf:0b:63:b1:c4:
                    db:3c:15:4d:5d:fd:d7:85:3b:17:90:6c:15:ec:c1:
                    11:f4:ff:36:d3:7b:6e:30:d3:c4:a0:e5:7a:95:9c:
                    0c:e2:3e:3a:40:e3:1e:9f:84:15:71:32:00:10:54:
                    0f:ab:40:b6:82:62:d5:32:a4:31:eb:f7:94:c2:a8:
                    68:5c:c9:dd:96:07:fb:af:2e:98:38:2e:11:55:32:
                    a9:d8:7c:c1:3e:61:fe:f6:0d:5b:f1:56:a3:6a:6b:
                    5a:f1:7d:36:4c:41:93:be:83:aa:67:fb:a7:89:31:
                    b3:f6:09:49:f7:bd:70:90:ee:94:fd:8f:ef:2f:26:
                    bd:d2:0e:ee:e5:7f:a1:7f:39:0c:fd:ed:79:b9:8a:
                    fc:8f:dc:5a:45:28:35:5b:57:71:ec:e7:75:c4:25:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A3:2A:3C:0D:93:80:36:AB:2C:2F:54:51:48:99:22:B7:4E:5B:D8
            X509v3 Authority Key Identifier:
                keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:82:10:70:3b:ec:dc:96:f7:bc:fb:00:0e:7a:4e:35:72:47:
         aa:64:45:b3:9c:30:05:e9:81:3d:cc:4a:5a:0b:4d:a7:02:03:
         d9:bf:be:9f:4e:ee:3f:94:81:86:a9:69:cc:b9:a2:25:d5:38:
         a6:a7:5d:7e:b6:a8:92:87:bd:03:8f:92:5d:a5:65:2a:fb:25:
         b5:9d:14:86:25:7e:91:5e:e0:92:41:4e:7d:8f:f7:0b:1d:fd:
         43:19:2a:be:3f:39:aa:0e:76:ca:41:72:17:b8:52:34:b9:e0:
         94:83:5c:5e:2b:15:ed:43:ef:29:cc:89:c5:10:0e:5d:10:34:
         d3:a3:60:27:d4:2d:97:f9:3e:a5:3c:03:d8:22:c8:16:9d:0f:
         1b:7e:4f:4c:fa:5c:ce:df:98:cb:f4:29:91:06:d6:43:d0:02:
         9f:64:c9:d1:dd:88:22:4e:30:94:1a:6a:2d:7d:dd:d4:0d:db:
         3f:8f:9e:ed:52:d8:9b:ff:63:8d:21:ed:92:d5:5e:09:bd:7f:
         f1:40:3a:a9:01:b2:2c:88:00:74:1d:6d:98:07:70:cc:68:1c:
         c4:54:ec:19:be:a0:03:ba:67:6a:8b:09:9b:48:d3:24:64:d3:
         29:a8:0c:9c:a5:3a:7f:3f:a9:0c:21:ed:66:8f:72:ac:c2:7d:
         9f:7d:46:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:46 2026 by rpki-client