Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File:                     RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier:          JBltD0IjKu6ct2RVwm1AAhoksL0MSNmTdPoCZMOlKl8=
Subject key identifier:   D6:D6:8A:52:42:FC:01:1B:9D:F9:7B:E8:F7:E8:90:88:5D:2F:01:2D
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer:       /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial:       019E9AA94D641D72F26C33502A3C2D2854F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number:          087D
Signing time:             Sat 06 Jun 2026 02:00:47 +0000
Manifest this update:     Sat 06 Jun 2026 02:00:47 +0000
Manifest next update:     Sun 07 Jun 2026 02:00:47 +0000
Files and hashes:         1: 0mENkr9R3Eaz0bgbzTHZ_lmoh-k.roa (hash: awpYUvwutpxyVAYPBKGZqnzY4J1Y2wVFIsJg6l5sbpw=)
                          2: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: f+owjLVA1xP6h1nzbYkZLNEIyriOJjWIVW6HiLI784s=)
                          3: o3zLYzfT2580u-9CLddXhuyulyE.roa (hash: mwi/4c6LgdDRlLk19tfzSF9ChskElpBtCMQAXkoaQJk=)
                          4: uU9WSNDEX66vzzhhXOoe21fcdxo.roa (hash: 6MvyTg+A5MSPoBXPWElfN6DEbE9gMvp/ra0DMu41c84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:a9:4d:64:1d:72:f2:6c:33:50:2a:3c:2d:28:54:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
        Validity
            Not Before: Jun  6 02:00:47 2026 GMT
            Not After : Jun  7 02:00:47 2026 GMT
        Subject: CN=d6d68a5242fc011b9df97be8f7e890885d2f012d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:77:8c:5a:78:a8:cb:c2:7b:53:3a:57:18:
                    15:3a:64:71:49:dd:d3:4b:17:ef:e2:26:40:43:82:
                    db:43:09:92:81:15:8e:4a:84:bd:59:ba:f3:b0:19:
                    3b:20:d3:73:9c:f5:62:7a:8f:5e:1d:fc:31:a0:45:
                    d0:cb:21:48:1f:34:d9:49:a4:32:60:b1:c1:54:bc:
                    7c:62:9b:03:1d:f3:ef:2c:59:90:00:b0:c9:27:ce:
                    b8:c9:86:09:50:34:9b:a8:c0:22:cf:b5:67:71:4f:
                    a9:61:84:d9:84:7b:97:61:0d:d6:f0:5c:52:f4:72:
                    93:50:54:ca:75:e2:79:f1:11:d9:aa:80:b1:b4:f2:
                    87:bc:d9:d1:7d:1c:33:f9:6b:36:1f:79:e2:05:e0:
                    63:4d:4f:bd:97:17:8f:0c:cc:24:9d:67:55:08:55:
                    41:58:34:e6:7b:86:05:fb:35:88:37:ca:1b:0e:96:
                    35:90:18:a0:66:56:79:fc:00:56:c0:19:95:66:a4:
                    c7:42:a5:b1:ac:22:9d:31:63:9c:43:bc:5f:2d:ef:
                    2b:44:56:8f:9e:9f:fe:55:18:01:d0:6a:dc:e0:a1:
                    62:d3:79:1c:52:1b:70:0e:52:d1:0f:26:ee:c7:e5:
                    40:74:39:d8:0e:5e:0f:8c:d5:4a:0e:01:e9:1d:e6:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D6:8A:52:42:FC:01:1B:9D:F9:7B:E8:F7:E8:90:88:5D:2F:01:2D
            X509v3 Authority Key Identifier:
                keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ca:44:8d:cc:6c:28:84:66:01:5e:8e:39:a5:f4:06:35:d8:
         4d:4e:1b:2d:37:68:52:68:d3:f0:94:bf:c4:14:f6:87:f6:94:
         96:da:d2:b3:d8:04:e6:45:50:e0:41:86:22:eb:99:20:42:78:
         71:5e:d0:7e:78:c6:10:ec:e5:48:e7:b3:24:66:62:8c:50:ef:
         d8:72:00:de:22:77:4d:a0:c7:59:3b:b7:cf:ef:af:ba:4e:40:
         4f:e0:1c:02:86:c7:ec:60:e0:42:ac:d9:98:e1:4b:62:11:f8:
         5d:48:80:c6:15:51:64:49:28:15:34:00:bb:b2:c1:91:5a:b9:
         a0:b8:2e:25:3d:76:45:d3:a7:02:db:e1:05:da:8b:82:9f:8e:
         01:62:a5:3b:6a:9f:b1:0c:48:04:da:9f:2a:21:4b:73:62:87:
         3e:5b:ef:3c:d1:ac:83:a1:66:9e:5b:10:c0:dd:ce:f6:ca:19:
         62:3c:22:a8:72:56:c0:d4:2f:bc:85:42:fe:ed:09:a2:5d:24:
         f2:f9:54:f8:d7:a3:95:cd:a7:0e:44:8b:3a:f6:56:56:1f:22:
         f1:43:bb:2a:48:d0:97:67:36:99:54:fc:e1:5f:ce:43:30:2f:
         90:61:75:f6:46:0b:ce:25:50:0a:c6:6a:33:57:a4:74:65:9c:
         95:f2:85:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6aqU1kHXLybDNQKjwtKFT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1
ZTcyYTgwHhcNMjYwNjA2MDIwMDQ3WhcNMjYwNjA3MDIwMDQ3WjAzMTEwLwYDVQQD
EyhkNmQ2OGE1MjQyZmMwMTFiOWRmOTdiZThmN2U4OTA4ODVkMmYwMTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpN3jFp4qMvCe1M6VxgVOmRxSd3T
Sxfv4iZAQ4LbQwmSgRWOSoS9WbrzsBk7INNznPVieo9eHfwxoEXQyyFIHzTZSaQy
YLHBVLx8YpsDHfPvLFmQALDJJ864yYYJUDSbqMAiz7VncU+pYYTZhHuXYQ3W8FxS
9HKTUFTKdeJ58RHZqoCxtPKHvNnRfRwz+Ws2H3niBeBjTU+9lxePDMwknWdVCFVB
WDTme4YF+zWIN8obDpY1kBigZlZ5/ABWwBmVZqTHQqWxrCKdMWOcQ7xfLe8rRFaP
np/+VRgB0Grc4KFi03kcUhtwDlLRDybux+VAdDnYDl4PjNVKDgHpHeZD/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbWilJC/AEbnfl76PfokIhdLwEtMB8GA1UdIwQY
MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt
NzQ5OWE4MjMxZjU2LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2
LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWspEjcxs
KIRmAV6OOaX0BjXYTU4bLTdoUmjT8JS/xBT2h/aUltrSs9gE5kVQ4EGGIuuZIEJ4
cV7QfnjGEOzlSOezJGZijFDv2HIA3iJ3TaDHWTu3z++vuk5AT+AcAobH7GDgQqzZ
mOFLYhH4XUiAxhVRZEkoFTQAu7LBkVq5oLguJT12RdOnAtvhBdqLgp+OAWKlO2qf
sQxIBNqfKiFLc2KHPlvvPNGsg6FmnlsQwN3O9soZYjwiqHJWwNQvvIVC/u0Jol0k
8vlU+Nejlc2nDkSLOvZWVh8i8UO7KkjQl2c2mVT84V/OQzAvkGF19kYLziVQCsZq
M1ekdGWclfKFVw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:42 2026 by rpki-client