Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
File:                     RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft (raw, json)
Hash identifier:          TFPuzGsiboB2dBJK5+WIcrGy0Vt3ediabIIHy+wVRzo=
Subject key identifier:   E5:FC:B2:A7:F6:9D:94:28:A1:05:0E:88:A1:29:E9:66:AD:28:E3:B9
Authority key identifier: 46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26
Certificate issuer:       /CN=46ab1605a60fa89cc199cfd8cfeb7cc85cab3726
Certificate serial:       019F1A8CAFB55C8565BBCA098276385A0DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
Manifest number:          01C1
Signing time:             Tue 30 Jun 2026 22:00:55 +0000
Manifest this update:     Tue 30 Jun 2026 22:00:55 +0000
Manifest next update:     Wed 01 Jul 2026 22:00:55 +0000
Files and hashes:         1: BHHGcSt-xcyqmuqZZJUvi7Il74E.roa (hash: 1xQtvXwKdGqA3UbB0BtNu6enZHNYo0wQaicN5K3pYMc=)
                          2: RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl (hash: 43bpFMjtAmuuiH0B88Re1eRlBK6W+/lxzW8M8jBhq0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:8c:af:b5:5c:85:65:bb:ca:09:82:76:38:5a:0d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ab1605a60fa89cc199cfd8cfeb7cc85cab3726
        Validity
            Not Before: Jun 30 22:00:55 2026 GMT
            Not After : Jul  1 22:00:55 2026 GMT
        Subject: CN=e5fcb2a7f69d9428a1050e88a129e966ad28e3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:92:e1:47:f8:c8:73:ad:9b:fb:16:ee:99:8a:
                    d9:9a:3f:b5:2b:4e:85:7b:f9:06:c1:49:86:51:4e:
                    e0:3e:34:de:33:2d:ac:ad:0a:2e:66:fd:2f:ab:b6:
                    0e:03:22:b2:b2:27:a9:e9:8d:1d:4b:df:ad:0e:e6:
                    ee:99:b0:d9:7b:26:06:76:31:97:6b:91:6a:2d:4b:
                    ba:43:5b:65:fd:56:52:08:81:dd:61:7b:a6:9c:02:
                    b9:39:72:eb:74:54:80:43:c7:7f:4a:2c:75:ce:85:
                    e5:6f:aa:13:a1:5c:21:db:92:75:4d:8e:c6:1b:a5:
                    d0:ec:ad:69:fa:3f:bc:33:bf:8b:e3:1b:75:84:a5:
                    ac:d6:53:af:1d:b5:37:4b:4c:a0:e9:2e:93:59:e4:
                    60:0d:eb:cf:33:f2:e9:59:2b:3c:d6:e4:24:d1:97:
                    f2:86:34:05:53:38:76:91:89:aa:d8:1a:7e:db:20:
                    81:5b:ed:ab:07:ff:15:f9:a9:29:95:d1:7f:60:9f:
                    08:db:47:b8:ca:53:f2:1e:01:0a:0c:46:a7:79:3b:
                    2f:29:ce:0a:60:31:5a:2f:aa:e2:ba:ce:1f:05:2e:
                    9f:c8:40:90:72:f0:4c:b1:5e:88:72:0a:f8:78:66:
                    66:0f:0b:ce:0c:2c:fe:31:64:7c:02:b6:17:0f:5f:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:B2:A7:F6:9D:94:28:A1:05:0E:88:A1:29:E9:66:AD:28:E3:B9
            X509v3 Authority Key Identifier:
                keyid:46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:00:bd:90:e3:a3:41:eb:6e:8a:38:49:1c:fa:ef:c5:5a:
         ee:86:8a:52:f2:6b:2a:10:2b:23:a3:35:7d:3d:7d:51:24:5d:
         72:f1:4d:eb:6d:fc:ef:90:e2:85:dc:da:11:5a:9c:97:e0:48:
         75:da:20:c8:c5:a6:ce:23:18:ba:35:40:25:72:00:39:3d:f0:
         9c:00:61:c7:f1:f0:09:28:52:50:f5:62:5f:79:c1:51:de:40:
         65:74:0d:9c:7c:40:a3:64:43:26:db:1b:07:5e:d4:61:e6:cb:
         74:bf:5a:f7:36:47:3c:53:87:69:3b:78:55:70:f7:e5:6d:2d:
         1f:0e:9d:41:48:fb:62:11:a3:fc:82:0b:57:98:fc:59:94:db:
         3f:68:50:ed:ff:11:5f:e3:3f:2b:ef:6b:55:bf:37:93:0a:98:
         66:33:fe:f4:58:37:c0:fe:0c:1c:86:8e:0c:66:42:57:bf:3f:
         02:e9:8d:32:9c:af:99:d4:bf:4b:aa:d6:74:ba:06:ba:30:6e:
         a5:2b:d2:ea:88:59:99:b0:90:54:ba:ef:42:92:a8:55:ca:46:
         5a:1f:e4:a4:7a:a1:57:9c:a8:ce:3c:35:cb:fc:84:95:b2:56:
         68:74:d2:f4:89:9f:49:4e:f7:e5:e3:02:04:95:e6:30:3e:1a:
         9a:3c:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:17:36 2026 by rpki-client