Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File:                     Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier:          8h2bB0wf/efusAP8cMENT7uWGeft0/wFKS5S57MBOzk=
Subject key identifier:   EF:C8:FA:C4:D9:EE:7D:16:4E:2B:C5:96:6B:BA:D9:A5:5A:17:0C:A5
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer:       /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial:       019F8FEBDFBD45EB953846AE862096F9FEA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number:          064E
Signing time:             Thu 23 Jul 2026 17:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:27 +0000
Files and hashes:         1: 5sjVZOffDC3SdMXl3xj-LISTTRA.roa (hash: NgYO+E9uip8I6LBuV26/SjtRZiAA/mIEsqO23fxRKZo=)
                          2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: xyy+WP2bEVvtLb/BklhLjgl4mCzoSSv1/oWQeBirZqc=)
                          3: UZ8MoagtWKlsIsRGsjso-iozLGw.roa (hash: dnetz1uWniSUYV1OlTPjy0Ix9dXrnsa95CDJdNzqlUI=)
                          4: _PN_oCivSa6SCwOfHRvwn1IYBgQ.asa (hash: 2M4AXv8yl0hWjN/wepg6vu4DidwOliFRGd1ExPxEg/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:df:bd:45:eb:95:38:46:ae:86:20:96:f9:fe:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
        Validity
            Not Before: Jul 23 17:00:27 2026 GMT
            Not After : Jul 24 17:00:27 2026 GMT
        Subject: CN=efc8fac4d9ee7d164e2bc5966bbad9a55a170ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:43:bd:b4:c3:2b:0b:5d:0d:63:a2:b1:cd:
                    c1:b7:b8:9a:49:91:bb:99:90:70:99:91:fa:80:2a:
                    f2:de:d5:43:9a:47:4b:a4:8a:fd:81:d1:ba:8e:b4:
                    df:d5:17:00:d0:f4:c0:e4:4f:ba:98:d4:11:2c:24:
                    c1:6b:47:87:19:d7:85:d1:e0:5b:a4:54:8d:17:d3:
                    ab:bd:cb:ac:a8:12:dd:41:fc:f1:a0:59:39:92:b1:
                    45:da:6e:b4:9d:87:e9:15:09:4a:3d:72:09:1e:65:
                    66:95:86:d8:b2:19:f6:bb:87:58:d4:06:08:47:37:
                    de:3f:b0:d6:c7:f8:46:9e:fc:88:ca:4b:4d:08:fa:
                    e9:56:de:98:6b:d3:30:f3:a4:4f:2c:98:b2:0f:ea:
                    17:cd:01:6a:3f:a9:11:15:6e:36:3e:db:5b:76:93:
                    5b:b0:5e:dd:c3:6f:b8:ba:53:bd:86:7a:9d:b0:8f:
                    1f:cf:9d:71:1e:69:68:45:18:ff:5a:78:8e:47:c2:
                    c2:0c:9b:c9:6d:5f:ac:02:5a:d2:d2:93:07:47:60:
                    df:d3:1e:38:ef:54:ef:ad:7a:17:4b:81:3d:cf:42:
                    33:61:b9:a0:fb:fd:1d:fc:3e:cd:15:c9:5d:89:b3:
                    3f:fb:0b:8c:81:49:65:0d:ac:ba:3e:13:a1:4e:c7:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C8:FA:C4:D9:EE:7D:16:4E:2B:C5:96:6B:BA:D9:A5:5A:17:0C:A5
            X509v3 Authority Key Identifier:
                keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0b:54:dd:17:78:c0:20:e3:b0:a5:2f:8f:b7:1c:50:34:f8:
         d9:06:75:30:81:8a:f2:19:9b:07:d6:5c:1d:e0:b1:43:9a:0e:
         e2:c7:64:d5:b5:f6:df:18:b6:6f:97:42:74:7e:0d:f7:ad:be:
         50:91:94:dd:5d:2f:72:9c:1c:9b:31:d3:e5:d6:b4:70:4f:db:
         cd:e4:d0:8a:b3:df:13:7d:1e:3b:9c:fc:70:f7:78:83:58:33:
         0b:0a:51:66:6c:35:39:6c:4a:39:bd:c5:52:2c:8d:f0:73:59:
         12:6e:a2:2d:45:90:fc:e9:25:aa:1e:94:2f:11:ed:e0:0a:38:
         98:18:22:52:c4:92:e3:76:64:9c:5d:55:4c:93:af:65:27:da:
         8b:e7:cc:48:2f:9b:2a:20:8c:ac:63:3c:1b:ba:fa:db:54:3d:
         21:76:e4:0e:be:eb:75:35:9f:e3:ca:a4:67:f5:8c:30:dd:72:
         f3:40:ca:0e:ef:ce:97:c6:b2:5e:43:ec:45:d2:c1:b2:8b:e3:
         67:32:0b:75:6a:74:25:68:a3:b2:b0:3b:99:72:c0:13:3d:99:
         f6:c2:d7:c4:96:70:23:c9:7e:f7:0f:fb:66:db:03:4b:90:31:
         c0:a5:b0:5e:4c:67:2e:51:6f:fc:be:e9:d5:0f:6a:34:f0:61:
         64:df:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:14 2026 by rpki-client