Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          rrHBaKaQQtYi849tgtaeXUCYtb42U1x9LEyvb8Hv8pU=
Subject key identifier:   F9:85:D1:39:C5:29:31:6E:BC:D2:AD:4E:3D:81:A9:DA:13:65:5B:72
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       019F93C8828AF8B8475254E181903E6DD9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          0904
Signing time:             Fri 24 Jul 2026 11:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:19 +0000
Files and hashes:         1: NE-Gskahv4yhz4NSW0eOQznOBbc.roa (hash: 2cjZe+aPFDte9rIu8wJCuhBoVs4OYpmJVxKR+K10wPw=)
                          2: QBVvQVEZlQ_FtBHlQ6LkxII5X7Y.roa (hash: is6gKcJbbow/p4d83+z8Fk6rRj/Sh2SQuegCzSpgZjg=)
                          3: RH3gRlxhVGrL9P1FAsxvNcZGcKg.roa (hash: BUrryx952cBQrnyyvdxiH2Hn6rJcg6+93M8bhY0hK8s=)
                          4: Rl7efdhYeXftFwvFAmfRH2As_rs.roa (hash: Fkewx2otKYj7NOwHTF8pWpF8lfCLVjfeAiN9uWh62QU=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: N0kfGa+KRdcFqqpB7wKJEp9UqEf6R6+MHxS16NajDpQ=)
                          6: ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa (hash: /O4pxVo1nhy254bmusK8i5RqU2c/+1dTlDhCRL7gqs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:82:8a:f8:b8:47:52:54:e1:81:90:3e:6d:d9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Jul 24 11:00:19 2026 GMT
            Not After : Jul 25 11:00:19 2026 GMT
        Subject: CN=f985d139c529316ebcd2ad4e3d81a9da13655b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:a5:8f:da:91:1b:c7:c3:2f:5f:cf:ba:09:
                    39:95:64:db:45:d4:c8:6f:39:36:7c:fe:d4:09:99:
                    24:c3:f7:00:4f:ef:77:f1:2a:9c:ca:20:92:bb:81:
                    2f:8d:83:28:22:c5:37:54:a8:70:c8:3f:71:27:9b:
                    65:9b:87:11:67:ba:ec:d9:70:77:f3:58:37:e0:be:
                    a9:c7:f2:0f:b4:ec:1b:82:f1:e8:2b:aa:7d:7d:5d:
                    d7:a3:ff:35:00:4c:ff:cc:75:6b:a9:07:79:c7:d0:
                    3e:87:0e:ab:c2:1d:30:b9:82:1c:b4:58:0f:a6:9b:
                    dd:5d:5a:13:bb:80:3c:02:e9:9c:8f:98:81:1f:cc:
                    f1:e9:cd:da:b3:1e:5a:ae:e0:fa:d4:ab:38:e8:cf:
                    58:c9:39:e2:e3:6f:53:3b:cf:9b:38:3d:fd:23:a8:
                    46:f0:19:32:2d:fa:e5:ba:57:26:74:8a:7f:f4:86:
                    81:b2:7b:ef:69:91:13:e5:60:4a:f0:22:da:2c:e9:
                    b7:a5:8f:12:dd:06:6d:59:bd:41:a7:6a:d6:c8:a8:
                    45:cd:76:30:34:45:72:94:fb:a9:af:5a:3d:e6:27:
                    58:1b:1e:92:c8:87:24:97:9e:77:0b:a9:7f:df:65:
                    b7:cc:ae:43:6d:17:69:36:c6:5a:60:b0:d4:a2:01:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:85:D1:39:C5:29:31:6E:BC:D2:AD:4E:3D:81:A9:DA:13:65:5B:72
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:56:cb:16:1f:ea:35:66:21:ef:59:5c:6b:b8:c4:1e:a7:e7:
         e1:30:08:5d:1c:3c:77:fd:c7:80:68:4e:bf:79:fc:33:c7:4c:
         ad:44:f5:0c:6f:76:ab:f6:dc:cf:99:af:8a:98:7b:32:ff:5f:
         0e:9b:bc:f3:f7:48:25:43:08:ac:e0:5c:26:d5:40:6f:5c:fe:
         21:e0:51:64:f8:60:c8:81:d1:e1:2d:52:1e:48:1f:3b:13:2d:
         9d:de:40:39:40:99:e9:b2:dc:7d:14:f4:d8:28:f3:e7:ae:dc:
         e1:27:83:a5:83:fb:66:75:6d:f2:0d:cf:f6:46:99:a0:47:6c:
         eb:82:ed:30:6d:75:1b:3b:c4:60:4d:da:42:13:b9:7f:92:5c:
         31:c9:ee:cb:4e:23:19:e2:44:7f:d5:c2:9f:be:26:f6:49:39:
         b8:0e:85:c1:2a:7c:b1:e1:ca:0f:3e:4d:c1:75:30:c6:c4:01:
         c8:05:29:ed:7d:6a:d2:24:d7:10:3e:6a:55:29:4d:dc:f4:78:
         7d:64:d8:c9:13:ab:3e:04:48:98:66:09:e5:86:78:e9:8b:37:
         27:6e:66:7a:a2:4d:72:4a:e2:d0:4f:94:71:3b:f8:59:fa:e2:
         40:22:c1:2b:5e:54:dd:e4:40:f9:e5:99:60:34:ee:3e:d8:37:
         8b:9f:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:28 2026 by rpki-client