Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File:                     4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier:          pCR3VTiKyugye5x7r0hDuuy8lHKxNQFVNSyOrjg64Rk=
Subject key identifier:   37:F3:75:24:DA:66:A8:CF:23:6B:E8:BD:39:A3:81:DC:4D:16:98:ED
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer:       /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial:       019F946DD91209D92D60002822C90C2EAD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number:          0A29
Signing time:             Fri 24 Jul 2026 14:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:54 +0000
Files and hashes:         1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: IcEw7wRPT8fgxA37Z2tzOshEgwHySWdL1ppFQt6sRNY=)
                          2: VBelpQwcAQaQvThvEwysdwbgrak.roa (hash: UGGt4tB1S8FTbx+5vNuFXFdkEAnx40jxbwqWiMzAMAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:d9:12:09:d9:2d:60:00:28:22:c9:0c:2e:ad:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
        Validity
            Not Before: Jul 24 14:00:54 2026 GMT
            Not After : Jul 25 14:00:54 2026 GMT
        Subject: CN=37f37524da66a8cf236be8bd39a381dc4d1698ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:b8:48:df:8f:83:79:fb:c0:c5:99:c2:b3:
                    f9:cf:99:e6:38:68:fd:7f:1d:ee:68:45:14:9b:4a:
                    43:91:51:01:aa:ce:d2:54:a6:58:35:c6:f1:78:dc:
                    9d:a4:c1:80:b2:88:fe:51:4c:14:7f:e3:a6:6b:f9:
                    4b:8c:4e:54:be:aa:3a:a3:f6:72:1c:8e:3b:ff:55:
                    62:0a:d4:0d:d3:be:28:69:b2:bb:d9:9a:b1:e0:8b:
                    37:61:61:9b:f6:6f:de:a1:55:87:b9:fe:63:fd:01:
                    a9:70:6f:79:ce:98:e6:8b:79:d9:ed:b1:f3:52:d4:
                    a2:04:a9:9b:c0:5a:3f:a5:1c:9c:15:c0:4e:82:c7:
                    bd:5e:32:6a:60:c1:61:a0:11:28:df:83:99:16:bc:
                    96:2c:88:84:5f:8c:b4:31:f0:cd:30:8f:da:11:db:
                    3d:1d:a0:8e:30:ee:ad:6a:fe:a0:be:f1:be:46:00:
                    67:9e:64:7f:38:d6:7e:7b:7b:ce:ad:7d:32:54:3e:
                    2e:5c:92:67:71:22:0a:15:24:56:dd:cb:a2:72:02:
                    b8:80:89:89:95:79:39:b1:19:9d:62:70:9d:f2:19:
                    f5:2c:23:1a:ef:fd:1f:a4:0c:5c:90:a0:a1:3a:40:
                    b9:2e:e8:2e:65:43:8a:d9:9e:85:bb:39:2d:46:8c:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F3:75:24:DA:66:A8:CF:23:6B:E8:BD:39:A3:81:DC:4D:16:98:ED
            X509v3 Authority Key Identifier:
                keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:4d:14:cf:c1:c7:bd:18:73:5f:21:08:29:f7:3e:5a:4a:
         bd:43:13:9c:69:20:57:ea:f5:b8:a6:5f:e0:8c:3a:e9:2e:03:
         80:f6:d2:12:4e:94:d7:00:31:8a:2a:34:f0:9b:d1:86:37:d8:
         c3:db:b0:26:eb:4c:69:6e:41:d0:2d:e5:4e:4c:0f:c0:66:64:
         5e:1e:a4:73:e7:53:a8:79:d9:ef:a0:b5:40:0c:4d:32:b4:fd:
         4b:28:06:21:a3:30:de:f9:01:5d:6b:19:cc:3a:f8:27:4b:6a:
         5e:37:b9:51:f6:97:94:7e:e7:8b:74:56:a4:76:87:60:e3:6e:
         57:5b:c0:c6:31:51:2b:1b:c5:a1:1f:95:45:7e:54:19:09:37:
         9d:f0:32:45:a7:07:42:4a:8d:6b:5d:aa:b3:67:41:23:b1:22:
         a2:8d:9e:de:8b:8f:ec:bc:fc:53:1e:51:e7:52:26:a2:27:e2:
         2c:e8:75:8d:e9:a4:13:1c:90:23:aa:80:e4:04:aa:5c:41:ce:
         df:bb:52:8b:2f:dc:a6:81:4b:5c:4a:e2:0a:44:85:28:1b:97:
         85:3e:0b:ca:06:26:b5:d7:97:72:19:2b:8c:ef:58:4b:7c:c1:
         2f:24:f1:e6:23:31:b0:9f:6d:39:02:6a:0f:c6:27:f6:a2:47:
         a7:5c:22:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbdkSCdktYAAoIskMLq1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTc1ZWY5MDM2ZjVjMTQzZTU3ZGZhZmJjOTJjMDI1NWMz
MTU5YmEwHhcNMjYwNzI0MTQwMDU0WhcNMjYwNzI1MTQwMDU0WjAzMTEwLwYDVQQD
EygzN2YzNzUyNGRhNjZhOGNmMjM2YmU4YmQzOWEzODFkYzRkMTY5OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnq4SN+Pg3n7wMWZwrP5z5nmOGj9
fx3uaEUUm0pDkVEBqs7SVKZYNcbxeNydpMGAsoj+UUwUf+Oma/lLjE5Uvqo6o/Zy
HI47/1ViCtQN074oabK72Zqx4Is3YWGb9m/eoVWHuf5j/QGpcG95zpjmi3nZ7bHz
UtSiBKmbwFo/pRycFcBOgse9XjJqYMFhoBEo34OZFryWLIiEX4y0MfDNMI/aEds9
HaCOMO6tav6gvvG+RgBnnmR/ONZ+e3vOrX0yVD4uXJJncSIKFSRW3cuicgK4gImJ
lXk5sRmdYnCd8hn1LCMa7/0fpAxckKChOkC5LuguZUOK2Z6FuzktRozL7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfzdSTaZqjPI2vovTmjgdxNFpjtMB8GA1UdIwQY
MBaAFOKnXvkDb1wUPlffr7ySwCVcMVm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTkt
ZjkwODUwZTc0Mjk2LzEvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTktZjkwODUwZTc0Mjk2
LzEvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNRNFM/B
x70Yc18hCCn3PlpKvUMTnGkgV+r1uKZf4Iw66S4DgPbSEk6U1wAxiio08JvRhjfY
w9uwJutMaW5B0C3lTkwPwGZkXh6kc+dTqHnZ76C1QAxNMrT9SygGIaMw3vkBXWsZ
zDr4J0tqXje5UfaXlH7ni3RWpHaHYONuV1vAxjFRKxvFoR+VRX5UGQk3nfAyRacH
QkqNa12qs2dBI7Eioo2e3ouP7Lz8Ux5R51ImoifiLOh1jemkExyQI6qA5ASqXEHO
37tSiy/cpoFLXEriCkSFKBuXhT4LygYmtdeXchkrjO9YS3zBLyTx5iMxsJ9tOQJq
D8Yn9qJHp1wiqA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:40:03 2026 by rpki-client