Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File:                     qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier:          5vmw6egieOmQ+FynUK4E30ioqHmoAoFd4Y8pLufpy4U=
Subject key identifier:   4D:86:64:52:69:EE:47:84:2B:6B:ED:EC:44:5D:6B:AF:1C:69:71:BD
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer:       /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial:       019F93920604843B815DC8B86E6514D3FBE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number:          1715
Signing time:             Fri 24 Jul 2026 10:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:48 +0000
Files and hashes:         1: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (hash: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ=)
                          2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: f0z0Q0KcjRUaoK8ww5yGf8UNJyRvGpADbSmt125VJKA=)
                          3: y1xvK7lHBhE4mJfORtJta3k7QLw.roa (hash: ifW/r0S+8T3HM1pq3eDXlZA/lxPnTJhYCS5bj7w7VBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:06:04:84:3b:81:5d:c8:b8:6e:65:14:d3:fb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
        Validity
            Not Before: Jul 24 10:00:48 2026 GMT
            Not After : Jul 25 10:00:48 2026 GMT
        Subject: CN=4d86645269ee47842b6bedec445d6baf1c6971bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:14:f6:e2:ad:87:18:c5:f1:8a:d1:6d:fd:
                    ab:65:f0:d9:91:21:c5:74:fb:48:6e:cd:76:76:24:
                    f0:81:fa:0b:10:cf:8a:92:38:f8:fe:26:a1:96:83:
                    0d:6c:49:2d:36:41:85:97:98:70:0f:db:ea:83:ee:
                    e5:da:74:31:0c:a7:61:4e:9d:a4:f7:95:9a:61:a9:
                    0a:44:55:a0:7e:17:d1:d8:05:42:62:63:1b:6c:07:
                    80:e2:fb:98:20:c8:7d:3e:97:e8:2f:66:b6:fb:e5:
                    be:d9:36:cc:41:18:e4:43:ef:99:67:4c:1e:10:e4:
                    c2:17:6d:f2:c2:a1:ed:a4:96:ed:17:ef:fb:c5:48:
                    a9:63:ad:09:0a:cb:e9:5e:cb:63:bf:7a:ae:c5:80:
                    a7:44:f2:ef:e2:2b:59:92:c9:42:b1:fb:fb:a6:70:
                    6b:0d:a0:7f:79:0c:94:b7:a9:44:8c:78:1f:64:60:
                    d3:c0:d7:f3:37:02:2e:4c:54:fd:00:50:99:40:93:
                    45:3c:92:67:a0:51:4d:77:26:a8:d3:2b:10:be:9f:
                    41:d5:b4:47:87:72:da:7c:d8:11:30:7e:46:1d:7b:
                    25:ab:c0:01:0d:83:57:b5:cf:5a:c1:99:84:15:90:
                    dd:76:56:e5:73:8d:f5:5a:b9:7e:b3:d8:78:96:08:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:86:64:52:69:EE:47:84:2B:6B:ED:EC:44:5D:6B:AF:1C:69:71:BD
            X509v3 Authority Key Identifier:
                keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:8f:ac:16:b9:1e:d1:e3:01:02:28:18:4d:6f:17:cd:d6:
         eb:98:40:80:cf:ae:aa:22:f6:cd:79:0e:07:5b:1d:bc:3d:15:
         33:c0:b8:92:3b:63:cc:09:a1:e0:44:de:90:f8:e2:83:ed:53:
         8a:93:10:37:57:18:2d:a5:76:fb:2d:3a:d8:78:8b:b6:39:55:
         f0:56:be:55:86:b2:04:01:0e:9e:b5:2e:4f:84:e1:04:fc:c6:
         59:66:18:03:d7:5a:96:82:3c:f6:23:57:64:82:17:5b:f4:62:
         95:b7:0b:0a:82:9c:16:99:e8:91:c8:f8:28:81:77:86:85:e8:
         9d:75:0b:74:da:82:a5:2e:e7:96:18:7d:8a:7a:d5:aa:23:17:
         9d:95:ff:63:6d:d1:1c:92:59:60:2b:82:cf:c7:f2:c7:76:b6:
         5d:b5:1b:70:b4:a2:5a:b4:eb:8f:f0:e9:aa:67:0f:ce:6d:6d:
         ec:65:d7:f3:ba:7c:0a:89:eb:3c:bd:76:e4:56:5f:70:7b:3d:
         e4:0a:5b:63:e6:68:93:9e:d7:7b:c8:2c:49:2a:4f:78:db:48:
         43:a5:1d:71:cb:85:9d:7b:3f:e5:49:bb:19:8f:ea:b2:43:71:
         8e:94:65:99:96:3b:fd:9c:c1:97:ef:d0:e4:e5:6a:6b:57:1d:
         01:21:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:10 2026 by rpki-client