Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File:                     1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier:          MfA+l/hwQMmra7zyAtmP7NbjWi7n+lqWr5W6+Yi9wDY=
Subject key identifier:   A7:99:00:8F:74:6D:FE:3D:20:63:49:E5:C5:79:4C:FB:62:94:98:B8
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer:       /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial:       019F8F4795071F6388855D49635AA409103C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number:          137A
Signing time:             Thu 23 Jul 2026 14:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 14:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 14:01:00 +0000
Files and hashes:         1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: QHXzNSe6QoRADswlMK2sIu8Q50MZ1JmC0ZnKH5DqJfs=)
                          2: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
                          3: G8ok4WnRssMF_kSU0fMKahJetsU.roa (hash: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=)
                          4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
                          5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
                          6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
                          7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
                          8: nU05wjCCjQdvD0N5GwShQguLcMg.roa (hash: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=)
                          9: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:95:07:1f:63:88:85:5d:49:63:5a:a4:09:10:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
        Validity
            Not Before: Jul 23 14:01:00 2026 GMT
            Not After : Jul 24 14:01:00 2026 GMT
        Subject: CN=a799008f746dfe3d206349e5c5794cfb629498b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ae:7e:eb:c1:27:fc:72:47:86:e4:03:a1:33:
                    c5:6c:b6:4b:2b:de:88:97:34:4e:69:1b:34:2e:27:
                    11:56:a5:4b:96:36:4d:2d:07:54:e2:c3:a4:04:00:
                    33:fe:22:d4:fe:bb:23:96:73:e6:fa:30:bb:a4:c9:
                    cc:ab:43:fd:d0:f1:e4:f7:d1:27:aa:58:14:3d:c3:
                    24:b1:1e:37:3d:ee:ca:df:56:1c:a3:3a:b0:b9:33:
                    b3:68:23:a0:97:5b:55:28:67:c5:43:43:6a:57:52:
                    53:af:19:59:d1:85:3c:a6:39:57:54:3a:8b:d9:b9:
                    02:cf:a8:f1:c8:1f:b8:f8:70:fa:d3:ec:eb:69:4d:
                    c8:1c:90:c3:16:b2:e4:8e:bf:d6:90:c6:f9:02:43:
                    94:de:02:a0:e6:ac:31:62:74:7d:4a:99:8c:7e:fd:
                    01:57:98:f7:45:47:54:d7:9c:df:d0:ee:9e:db:8a:
                    10:03:b0:eb:7f:cf:8c:6f:a9:8d:47:79:45:28:a9:
                    70:ad:8a:e3:63:f6:fe:2b:f9:db:74:86:87:e4:d0:
                    24:d8:9c:c5:5b:58:d3:33:6c:79:dd:76:08:d4:17:
                    9b:dc:b6:5c:ed:49:7b:23:52:85:c7:be:3c:f8:63:
                    d3:9b:1b:8a:26:12:13:90:33:8f:38:a5:bb:d2:89:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:99:00:8F:74:6D:FE:3D:20:63:49:E5:C5:79:4C:FB:62:94:98:B8
            X509v3 Authority Key Identifier:
                keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:65:a7:70:f9:30:a0:f9:ca:6f:77:75:89:f7:39:5a:27:89:
         fe:18:63:56:d2:e4:b8:9a:6f:25:92:79:35:05:80:80:bc:28:
         6f:dc:83:a3:d0:5d:a8:d6:32:87:e5:ef:cd:27:2f:00:8c:84:
         a5:22:ad:de:ce:86:9b:e8:62:e7:b5:42:3e:26:08:f5:a7:10:
         7d:76:0a:22:08:c1:16:d4:8b:29:e0:c1:20:07:53:af:f5:7e:
         1c:eb:14:13:92:c7:93:e3:75:45:18:9f:00:e1:f0:6d:b8:91:
         ac:47:28:7d:d8:58:7e:06:cf:ac:c0:66:21:f7:f4:38:90:d4:
         d9:e0:82:19:50:f0:92:0e:b0:51:a0:51:0a:c5:fe:47:0b:74:
         83:c0:8d:b0:6a:80:1d:98:c8:61:d9:50:a0:62:22:d5:b5:80:
         95:c2:fb:41:f1:c2:3a:cf:47:b1:ea:bb:34:7d:3c:70:8c:7e:
         17:3e:dc:2b:7b:d2:5e:81:e5:8c:59:a2:ea:7d:ea:54:30:b1:
         63:d4:89:13:f2:03:bb:e2:f7:9f:ab:f8:ee:85:4d:40:0d:29:
         97:f0:46:a9:dd:7e:24:fd:22:dc:44:02:d5:19:66:32:d9:79:
         d7:56:00:ce:6c:1b:69:0c:e3:f4:e6:1c:24:df:9c:94:44:5c:
         cd:a3:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:04 2026 by rpki-client