Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File:                     MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier:          kppGErBQpkuzTR4M1jVgh82ORNuZtK3R78AsvSLpl5A=
Subject key identifier:   A1:95:30:70:26:5E:F2:67:10:73:DC:8C:04:BD:D5:09:20:72:7F:AE
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer:       /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial:       019F8FB573A2285F5B45FE554F836C2BD156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number:          19CF
Signing time:             Thu 23 Jul 2026 16:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:01 +0000
Files and hashes:         1: Jc2vRE_HX7eFzf72LPyYWmiO4iU.asa (hash: oAhorlsfuV9RkmKRh10nup3swm+6J7HID4r3l33ussY=)
                          2: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: j9DFFAr5x2UGuoVCaLkqFgiuf45vrWe+dmRphrFIB3M=)
                          3: ZTjWvW3_UDwWz5igtbbCJdukgBg.roa (hash: yrRO/z/hbGoHDtMqzYpJp8RqBS++UjuABdQAeDOiMoA=)
                          4: osvG5e1YigFoLoa__yzX-J5l27E.roa (hash: SlrGXFD11o+sZzla3/g1JmWekd8M1LFWjbdkdCRUg50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:73:a2:28:5f:5b:45:fe:55:4f:83:6c:2b:d1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
        Validity
            Not Before: Jul 23 16:01:01 2026 GMT
            Not After : Jul 24 16:01:01 2026 GMT
        Subject: CN=a1953070265ef2671073dc8c04bdd50920727fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:87:ae:1b:a1:f3:97:f3:ae:2c:f4:48:42:
                    92:f7:14:3b:80:4e:26:ea:ee:54:b7:11:bc:95:10:
                    94:a8:b8:e3:78:36:c2:17:b7:52:51:5b:37:db:b8:
                    ce:99:2e:18:2b:7a:e2:31:7d:29:63:ab:0a:e5:48:
                    13:8b:2f:8a:34:a2:1a:57:dd:ed:8a:4e:f6:98:e8:
                    8e:3c:6a:92:fc:c4:6c:cb:c1:36:b8:fb:35:70:a3:
                    a2:14:35:f1:4c:e7:f1:34:78:21:b3:a4:91:f1:36:
                    cb:3c:1f:63:c3:4e:54:80:cd:4d:3b:fa:4f:8e:05:
                    d7:aa:1e:20:3a:fa:25:da:31:32:23:a6:52:c9:ca:
                    39:ce:e5:40:b2:b8:0d:5a:8c:fd:a6:fa:e6:a5:a4:
                    8f:57:32:88:0a:63:7c:02:af:14:42:e2:dd:7e:ca:
                    33:f3:ae:05:4e:70:c4:6f:a9:00:a1:00:3f:50:ec:
                    74:a7:a9:ff:03:a0:ea:b9:c2:1e:c2:ac:63:18:3a:
                    26:ee:ec:a7:95:4a:b4:27:06:8c:f6:67:b7:da:dd:
                    e5:8b:af:af:92:4b:1a:68:d0:07:71:7f:6e:ed:a0:
                    62:14:78:1b:69:89:97:a3:7c:2e:db:17:50:d9:e5:
                    57:e0:e1:81:ac:8d:09:5c:ba:26:bc:40:98:d1:0b:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:95:30:70:26:5E:F2:67:10:73:DC:8C:04:BD:D5:09:20:72:7F:AE
            X509v3 Authority Key Identifier:
                keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:91:5a:f7:63:e2:80:f0:6a:56:5b:a9:df:a9:14:f6:34:88:
         48:36:4c:75:72:f6:2b:7f:60:3a:be:9f:08:60:80:bc:7f:aa:
         da:b5:16:30:83:87:53:b2:31:53:e4:f1:bb:73:7e:ee:ba:8c:
         ef:16:0c:36:cd:47:b5:cc:85:31:d7:1f:8a:2b:70:3d:9f:90:
         2d:cc:c8:20:4f:52:e5:c3:96:80:dd:92:ac:23:59:fe:d1:d7:
         e8:a6:fd:33:68:6e:06:ec:55:61:bd:4d:1e:7e:d3:0d:67:70:
         63:16:2b:0d:86:ca:ce:f6:a9:d7:10:97:ba:02:89:09:c0:7f:
         2d:e0:18:94:27:49:d4:cb:bb:e7:17:d6:88:6f:6c:94:6f:9a:
         55:90:82:14:9d:fe:c2:07:14:7e:89:a2:77:76:7f:fe:d3:8c:
         f6:2b:7a:3f:23:8c:56:8f:aa:1e:f0:5c:2a:34:08:db:de:ae:
         f5:2f:da:06:f7:a9:8a:45:a2:28:e5:aa:5c:70:44:40:30:d9:
         44:b3:11:d4:2e:3d:97:6c:81:59:a5:f2:6a:32:fb:fd:0a:28:
         a3:b7:42:7b:40:ea:ec:df:68:de:ac:e6:7c:2c:fd:46:6a:06:
         ff:c9:86:4d:4a:16:7f:c9:e4:30:55:d3:27:43:92:07:f7:b4:
         6f:d2:5f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:09 2026 by rpki-client