Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File:                     qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier:          PQwd72JdnRewnVAuMEKkR+7Nlnc0MbiAdLyPzLRDaV0=
Subject key identifier:   5F:92:FB:A3:9C:F4:75:7C:99:4E:7C:AD:E0:E6:18:F1:45:BD:BB:EC
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer:       /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial:       019F94DB3AEF70695575BE4F261DA91CA719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number:          056B
Signing time:             Fri 24 Jul 2026 16:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 16:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 16:00:23 +0000
Files and hashes:         1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
                          2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: ey6ifN82/SmfJkJxNi7bqHaREnn57BHl1lgg4Ifs8ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:3a:ef:70:69:55:75:be:4f:26:1d:a9:1c:a7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
        Validity
            Not Before: Jul 24 16:00:23 2026 GMT
            Not After : Jul 25 16:00:23 2026 GMT
        Subject: CN=5f92fba39cf4757c994e7cade0e618f145bdbbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:5a:34:21:2a:db:12:55:b3:cc:b9:5d:8b:
                    f3:05:33:d1:a1:7c:90:16:31:03:68:3b:20:cd:07:
                    85:3c:e4:1b:1e:7b:2a:bd:8e:89:20:b2:68:2f:49:
                    96:e0:c1:27:c2:c3:d9:0f:8f:f0:ac:41:96:d0:80:
                    8c:12:7a:dd:dd:52:d4:95:a7:b5:05:1a:a4:16:3f:
                    15:c9:f9:04:5f:3c:96:3d:44:c8:fe:64:21:ca:fe:
                    ed:ae:e4:5a:9b:17:f9:78:65:dd:ae:b9:bb:9c:65:
                    a0:42:f0:d4:94:39:c7:29:8a:47:d6:54:89:e7:07:
                    33:bd:1b:6d:96:bb:94:05:a0:e5:d2:09:11:49:bd:
                    60:5c:10:d4:d7:19:f7:b1:e2:23:1f:76:18:39:cd:
                    1a:3f:51:f9:2e:a1:c2:0c:ed:1c:5c:34:13:73:3b:
                    49:1d:9e:23:c7:f8:ea:b7:a0:6a:ce:8c:6f:1c:3a:
                    08:3b:20:ca:97:0e:e3:10:d6:3e:7e:e1:8e:8a:32:
                    c6:a4:52:77:ce:58:73:8e:49:24:d8:87:95:44:14:
                    3c:a2:a2:1d:8b:cf:b3:e4:e1:20:9a:05:33:c9:4d:
                    6a:94:16:4d:a0:9d:80:95:a7:27:64:40:a0:ac:10:
                    0a:78:01:6d:31:e6:24:ed:b6:0a:07:35:33:0a:3d:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:92:FB:A3:9C:F4:75:7C:99:4E:7C:AD:E0:E6:18:F1:45:BD:BB:EC
            X509v3 Authority Key Identifier:
                keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:f8:f6:54:8b:50:3c:9b:6a:b0:92:e7:ba:2e:45:69:5d:
         a8:d6:0d:36:ab:e0:99:9e:66:80:79:c1:42:33:e6:b5:4d:9a:
         a5:b9:32:1a:a7:ef:6a:8d:b4:2c:6b:a3:86:b3:15:49:2a:d8:
         03:6c:3e:02:39:73:1a:2f:d1:61:c9:9b:a3:84:f8:eb:ae:dd:
         e2:ca:38:46:73:6f:d8:56:96:3a:0d:ac:aa:12:90:6e:f9:81:
         81:eb:4c:09:7e:53:57:ca:cd:d1:ea:fb:39:c5:c1:75:24:b4:
         7e:17:0c:90:f7:17:92:70:1d:55:f0:8f:3f:6d:3c:d3:dc:b7:
         40:f8:f2:05:a0:41:0b:a1:e5:94:df:8f:bc:36:46:c4:d6:33:
         33:c9:07:27:01:75:8b:db:0f:6d:35:95:fb:c2:0d:bf:b6:40:
         49:1c:c0:b8:84:b1:6c:dc:8b:bb:96:55:de:7e:ca:20:d3:2c:
         01:2b:de:d6:fd:37:af:74:e5:07:60:8d:82:65:9b:68:cd:af:
         61:1b:53:ed:51:3a:10:50:4a:f6:3f:0c:10:bb:a7:e6:ec:9b:
         ac:32:7d:3a:51:90:5e:40:f6:7f:70:b9:02:af:0f:48:eb:27:
         62:10:e6:87:61:76:86:0b:18:93:2e:e0:15:5e:f9:3c:2e:c6:
         97:14:0e:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U2zrvcGlVdb5PJh2pHKcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhY2E4ZGMwYzBiOTIxYjA4OWYxNjAyNjE4ZTQ1NTM3OTdh
NzQ3NDIwHhcNMjYwNzI0MTYwMDIzWhcNMjYwNzI1MTYwMDIzWjAzMTEwLwYDVQQD
Eyg1ZjkyZmJhMzljZjQ3NTdjOTk0ZTdjYWRlMGU2MThmMTQ1YmRiYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucNaNCEq2xJVs8y5XYvzBTPRoXyQ
FjEDaDsgzQeFPOQbHnsqvY6JILJoL0mW4MEnwsPZD4/wrEGW0ICMEnrd3VLUlae1
BRqkFj8VyfkEXzyWPUTI/mQhyv7truRamxf5eGXdrrm7nGWgQvDUlDnHKYpH1lSJ
5wczvRttlruUBaDl0gkRSb1gXBDU1xn3seIjH3YYOc0aP1H5LqHCDO0cXDQTcztJ
HZ4jx/jqt6BqzoxvHDoIOyDKlw7jENY+fuGOijLGpFJ3zlhzjkkk2IeVRBQ8oqId
i8+z5OEgmgUzyU1qlBZNoJ2AlacnZECgrBAKeAFtMeYk7bYKBzUzCj1BXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+S+6Oc9HV8mU58reDmGPFFvbvsMB8GA1UdIwQY
MBaAFKrKjcDAuSGwifFgJhjkVTeXp0dCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEt
OTFkNTA3MzhkMWU4LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEtOTFkNTA3MzhkMWU4
LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9749lSL
UDybarCS57ouRWldqNYNNqvgmZ5mgHnBQjPmtU2apbkyGqfvao20LGujhrMVSSrY
A2w+AjlzGi/RYcmbo4T4667d4so4RnNv2FaWOg2sqhKQbvmBgetMCX5TV8rN0er7
OcXBdSS0fhcMkPcXknAdVfCPP20809y3QPjyBaBBC6HllN+PvDZGxNYzM8kHJwF1
i9sPbTWV+8INv7ZASRzAuISxbNyLu5ZV3n7KINMsASve1v03r3TlB2CNgmWbaM2v
YRtT7VE6EFBK9j8MELun5uybrDJ9OlGQXkD2f3C5Aq8PSOsnYhDmh2F2hgsYky7g
FV75PC7GlxQO2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:00 2026 by rpki-client