Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File:                     Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier:          FKnilIfe4wy28AWE81Pn69Vm9lUxN4Z04DOnHpVgryI=
Subject key identifier:   F8:F6:BA:F3:77:D5:04:00:37:23:59:F3:C7:96:F3:41:85:44:28:AA
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer:       /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial:       019EB620C2EAF26AF3993BEDC9A5DB48F5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number:          0540
Signing time:             Thu 11 Jun 2026 10:01:00 +0000
Manifest this update:     Thu 11 Jun 2026 10:01:00 +0000
Manifest next update:     Fri 12 Jun 2026 10:01:00 +0000
Files and hashes:         1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: CD2/rZv8GcLeHBzuSNbRtx1P8Tyg3FDePfE1l0NfM0c=)
                          2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:20:c2:ea:f2:6a:f3:99:3b:ed:c9:a5:db:48:f5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
        Validity
            Not Before: Jun 11 10:01:00 2026 GMT
            Not After : Jun 12 10:01:00 2026 GMT
        Subject: CN=f8f6baf377d50400372359f3c796f341854428aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:9a:f2:68:81:05:a7:c0:2c:33:e2:b8:ca:
                    cf:69:6e:5f:8c:8b:56:21:28:83:be:a1:6b:ee:47:
                    28:e2:62:27:e9:95:36:75:1b:98:69:95:ce:fd:07:
                    ae:c4:49:34:43:b3:a9:9c:c3:7d:a0:8c:81:0b:c6:
                    83:1c:17:55:3b:c4:e5:58:11:0a:b9:84:bb:49:67:
                    77:08:0b:40:44:c4:6b:4b:aa:52:85:10:c4:f0:c5:
                    74:ae:e1:17:98:b8:2f:10:3c:58:bb:a2:aa:d2:36:
                    62:76:41:19:9c:b0:52:f5:8d:03:91:5b:00:9b:06:
                    c8:78:cc:36:01:a8:e9:38:05:76:6f:f6:97:d0:ec:
                    18:ec:76:24:99:03:77:8a:1c:f2:48:2f:30:d7:8d:
                    e4:c6:a8:dd:59:18:17:2b:82:83:6f:fa:0d:cc:44:
                    ee:c4:ed:68:cc:97:a9:ef:01:77:1b:a8:e7:a3:78:
                    2e:0c:4b:f2:c8:39:9b:62:86:59:cb:8f:12:e1:22:
                    63:04:85:2e:ed:d3:91:07:bf:04:ac:aa:14:90:ba:
                    d6:e4:82:3c:f2:63:61:9d:28:9f:73:fe:13:47:f1:
                    77:86:e3:b7:6c:de:3c:14:e2:24:60:1c:1d:54:ef:
                    42:1e:47:cd:9c:f2:88:f9:47:24:0d:a0:90:16:9c:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:BA:F3:77:D5:04:00:37:23:59:F3:C7:96:F3:41:85:44:28:AA
            X509v3 Authority Key Identifier:
                keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b3:5c:20:94:eb:b5:d1:e6:19:1d:59:ea:4b:73:c9:7e:e1:
         15:77:79:51:67:c0:63:3c:d5:df:f1:a6:4b:56:f1:ca:8b:03:
         09:ab:16:7c:da:9c:4f:ff:2b:16:5e:22:67:4b:07:51:a8:67:
         2f:4c:89:3f:a0:b3:00:db:c7:6e:24:d6:1b:ae:d0:3a:b4:94:
         2d:31:64:d9:08:c3:ba:4a:00:36:49:a6:f8:34:7d:d4:b8:c3:
         47:cc:47:6e:5c:db:db:4c:13:49:a2:eb:5c:6b:4c:c4:88:79:
         8d:8a:04:bd:28:83:b5:6f:b4:9f:82:65:a0:20:29:2a:f4:1b:
         dc:e9:0e:ac:c2:e6:4a:5d:0b:4d:57:75:ea:f4:e6:2a:8e:e3:
         26:39:98:92:98:98:91:57:db:06:69:54:bb:df:dd:fe:e0:e4:
         26:89:dc:f5:54:f7:46:2c:27:ee:37:7f:c3:0a:44:17:11:bc:
         64:46:91:38:c4:f2:4d:45:08:a0:64:a8:81:3e:74:ac:50:fc:
         4b:ef:42:0b:a6:f7:23:f5:6c:19:0f:04:cd:a3:86:4e:90:75:
         c2:a5:13:82:51:67:bd:5e:a4:fa:89:f2:df:ac:44:ea:eb:ec:
         33:35:ee:b4:c3:62:b8:43:ee:67:1f:25:a7:c6:73:27:75:ca:
         3b:55:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:02:56 2026 by rpki-client