Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File:                     KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier:          dJpgF9d8zl1e+GBsx2DYFNZg8pj7d/Ep50OyjUFNWyI=
Subject key identifier:   EF:8D:75:62:C0:95:16:22:C9:D5:10:BC:C6:BF:95:88:BE:58:2E:37
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer:       /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial:       019F90C7B4CBD68A6292BC7DDA19B9A6BEF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 21:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:34 +0000
Files and hashes:         1: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: FEFZcZT0KlmYrfNMeBTxReUGR5w2BUcqInXrn/pP4bs=)
                          2: Q2sWoej5DPGl5wIw-CeODcRVXlM.roa (hash: wQMcbtBLdOGU6mgU9d/xsDpXItDoVCXCwiC3i9zeKw8=)
                          3: m25_c1bwCRR27TwA0PikcbJqUsY.roa (hash: lmfRRJbGEXu9SMbs8RoEu8bImS24RY0gDFc2/wiVBQo=)
                          4: ojqh31F-z_PVmb3H-ysSta1HlSw.roa (hash: pXqwdQA/pZAOmvAosw/Ac3zfBMN1XJgVHOWfLUuvoMs=)
                          5: wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa (hash: aqTWkdbUh2lUmpGqUaJazitQHO++p5bcYZRKvviqQCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:b4:cb:d6:8a:62:92:bc:7d:da:19:b9:a6:be:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
        Validity
            Not Before: Jul 23 21:00:34 2026 GMT
            Not After : Jul 24 21:00:34 2026 GMT
        Subject: CN=ef8d7562c0951622c9d510bcc6bf9588be582e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:1d:93:00:bf:71:46:c4:c3:90:e6:1a:17:
                    e0:17:9d:7b:c9:f0:46:3c:90:57:f8:22:ff:ab:25:
                    48:b3:a0:3c:27:cd:e3:6e:9f:c5:1d:02:94:0e:47:
                    01:9f:a4:dc:38:cf:fd:6a:57:5b:82:48:af:0d:bb:
                    bd:c6:c9:d9:db:2f:ea:50:94:44:96:16:a2:52:3d:
                    2c:2b:fd:0f:bb:c5:5d:a9:f3:71:b8:1c:a0:5a:4c:
                    47:89:05:c7:b3:cd:fe:b8:1d:05:0d:88:10:fb:5a:
                    14:ab:80:43:d3:99:3c:d2:77:68:83:01:32:b3:ed:
                    5f:11:0d:e5:4a:31:89:33:0c:12:0a:a4:42:46:a3:
                    22:c8:10:c2:07:51:4d:15:bc:18:dd:5f:cb:9e:c3:
                    b9:24:a8:79:46:d1:ab:70:6e:19:cd:02:35:92:26:
                    9f:03:f7:27:01:34:a2:c1:c8:12:59:d5:f8:9b:d4:
                    95:71:74:2e:88:89:80:5a:40:07:45:f8:30:74:61:
                    d0:88:b2:db:cf:2e:18:04:6b:a8:bf:8a:12:2d:87:
                    5e:bc:73:bc:39:0a:3c:02:72:1c:f8:28:0a:2a:ae:
                    44:a3:49:c7:05:3b:90:20:49:b6:aa:8f:dc:b5:fe:
                    27:94:72:c7:7f:8e:af:cd:9b:ba:bf:8c:15:e9:fd:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8D:75:62:C0:95:16:22:C9:D5:10:BC:C6:BF:95:88:BE:58:2E:37
            X509v3 Authority Key Identifier:
                keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:1c:72:a7:3c:5e:12:1f:58:5a:49:96:ec:5b:40:ca:15:
         95:57:4d:86:4f:f7:4f:0f:0b:6a:f0:0d:28:c3:a9:8a:dd:a1:
         3d:aa:50:96:d2:67:23:c0:ae:39:55:2f:9f:a9:f9:00:f0:1f:
         a3:20:f5:3b:68:b8:38:39:b8:dd:e3:4e:ac:3f:c0:31:d4:84:
         57:ca:d2:7a:69:4f:86:72:80:45:c6:bd:79:02:31:5c:47:57:
         82:47:89:7a:b9:a1:26:16:d7:5d:d7:4c:14:07:98:4f:56:6f:
         66:02:42:38:ac:55:6b:6d:55:c4:09:13:51:cb:cf:6e:f5:e7:
         fe:b7:f8:7d:fe:6a:ab:ab:7f:38:9e:46:36:93:95:49:5d:e8:
         40:3d:83:a4:79:f1:f9:2a:4d:13:f2:b4:0d:40:5a:8b:2a:f8:
         6f:de:9b:ef:dd:12:05:3e:a0:57:f2:5a:5e:df:80:8f:5c:d1:
         86:15:f1:45:67:2c:55:24:12:2e:ad:80:20:74:25:4c:93:3f:
         62:16:6e:41:b6:fb:0e:7e:d5:3b:18:0d:b6:b1:24:ef:a1:4b:
         33:a9:b6:23:44:30:1a:92:8d:2d:f5:a0:44:66:ee:37:19:9e:
         16:81:81:19:63:c8:82:c0:cc:63:13:f4:dc:2e:3e:34:7f:42:
         f6:55:0a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx7TL1opikrx92hm5pr71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDZmMDI2YjFmZTYzNmM5YTVkYTAxMWRjN2ZkNjljNTgx
ZDAyYjgwHhcNMjYwNzIzMjEwMDM0WhcNMjYwNzI0MjEwMDM0WjAzMTEwLwYDVQQD
EyhlZjhkNzU2MmMwOTUxNjIyYzlkNTEwYmNjNmJmOTU4OGJlNTgyZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozsdkwC/cUbEw5DmGhfgF517yfBG
PJBX+CL/qyVIs6A8J83jbp/FHQKUDkcBn6TcOM/9aldbgkivDbu9xsnZ2y/qUJRE
lhaiUj0sK/0Pu8VdqfNxuBygWkxHiQXHs83+uB0FDYgQ+1oUq4BD05k80ndogwEy
s+1fEQ3lSjGJMwwSCqRCRqMiyBDCB1FNFbwY3V/LnsO5JKh5RtGrcG4ZzQI1kiaf
A/cnATSiwcgSWdX4m9SVcXQuiImAWkAHRfgwdGHQiLLbzy4YBGuov4oSLYdevHO8
OQo8AnIc+CgKKq5Eo0nHBTuQIEm2qo/ctf4nlHLHf46vzZu6v4wV6f12BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+NdWLAlRYiydUQvMa/lYi+WC43MB8GA1UdIwQY
MBaAFCkG8Cax/mNsml2gEdx/1pxYHQK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUt
ODBhOTFiZTgzZTRiLzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUtODBhOTFiZTgzZTRi
LzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2Eccqc8
XhIfWFpJluxbQMoVlVdNhk/3Tw8LavANKMOpit2hPapQltJnI8CuOVUvn6n5APAf
oyD1O2i4ODm43eNOrD/AMdSEV8rSemlPhnKARca9eQIxXEdXgkeJermhJhbXXddM
FAeYT1ZvZgJCOKxVa21VxAkTUcvPbvXn/rf4ff5qq6t/OJ5GNpOVSV3oQD2DpHnx
+SpNE/K0DUBaiyr4b96b790SBT6gV/JaXt+Aj1zRhhXxRWcsVSQSLq2AIHQlTJM/
YhZuQbb7Dn7VOxgNtrEk76FLM6m2I0QwGpKNLfWgRGbuNxmeFoGBGWPIgsDMYxP0
3C4+NH9C9lUKMg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:59 2026 by rpki-client