Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
File:                     QXF5yEiCEh630SJJWnrH6joAcMg.mft (raw, json)
Hash identifier:          hLFw4ljIAQplKxKXrABCSeM4/eki1Kaqe5MvyqvqTB4=
Subject key identifier:   EE:D8:0C:6B:F4:7F:61:8A:06:87:9F:16:66:D5:D7:71:6C:1D:3A:3F
Authority key identifier: 41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8
Certificate issuer:       /CN=417179c84882121eb7d122495a7ac7ea3a0070c8
Certificate serial:       019F93247D1784C7AC32D05043ADD8629829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
Manifest number:          019B
Signing time:             Fri 24 Jul 2026 08:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 08:01:09 +0000
Files and hashes:         1: QXF5yEiCEh630SJJWnrH6joAcMg.crl (hash: JnKP5g+LYt7UbLruZqexLk7zTXhd3wJ/f5GgVWsBVx4=)
                          2: gFG9Wl84d8X9xFisW6jM5nOXCEU.roa (hash: PgnlQFmyF6NB2/hGt3DIQB9LhPjYBLOyS8GHZ24ktDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:7d:17:84:c7:ac:32:d0:50:43:ad:d8:62:98:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417179c84882121eb7d122495a7ac7ea3a0070c8
        Validity
            Not Before: Jul 24 08:01:09 2026 GMT
            Not After : Jul 25 08:01:09 2026 GMT
        Subject: CN=eed80c6bf47f618a06879f1666d5d7716c1d3a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:dd:6b:31:77:9a:92:64:84:81:a5:dc:23:
                    23:80:1a:54:fc:13:72:be:b0:b5:ec:59:33:bf:93:
                    22:26:17:38:41:eb:68:f8:e4:ff:29:a2:39:d7:f9:
                    02:d0:38:85:a0:cf:f4:0c:02:96:d7:02:1d:63:d5:
                    89:6b:f0:a5:c0:4e:7a:03:53:6b:4e:10:ec:83:2a:
                    c3:91:99:07:24:3c:5b:71:18:58:9f:5d:6c:8c:36:
                    af:3d:14:a3:a1:5e:36:75:cc:45:d0:d2:23:a3:1e:
                    29:3b:90:0b:32:55:bf:c1:2b:cd:a8:67:3d:8a:3d:
                    e9:ca:15:d0:17:ac:9c:8e:db:ee:c9:e9:81:14:6f:
                    a7:bc:d2:77:0c:ff:d9:ef:ce:4b:05:f3:d9:cf:2b:
                    2e:d9:90:c1:0f:47:09:f5:74:67:d7:a4:27:9f:a2:
                    cc:d4:4b:a4:c1:e6:9d:35:33:11:ef:1c:15:54:46:
                    9d:c3:a5:a4:8e:b8:67:55:65:ea:67:37:f4:fc:88:
                    2e:7e:47:0d:ee:c6:80:4a:da:11:70:f4:c6:f3:35:
                    0a:1d:05:5b:8d:9c:c7:da:ec:44:bd:0e:4f:34:55:
                    78:97:b8:2b:0b:f9:5d:b3:27:d1:af:af:80:2a:27:
                    93:75:cb:14:b4:18:62:11:32:93:ef:e5:6b:35:14:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:0C:6B:F4:7F:61:8A:06:87:9F:16:66:D5:D7:71:6C:1D:3A:3F
            X509v3 Authority Key Identifier:
                keyid:41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:be:12:01:b1:50:3b:27:0c:84:15:84:d7:fd:f6:f8:c3:e9:
         26:ab:b2:66:d4:e5:23:1b:af:e5:0e:5d:cd:cc:81:75:87:90:
         6e:fb:55:55:2b:f6:9d:9b:55:10:5d:96:f7:9e:ee:67:3c:3f:
         65:b7:d0:52:35:88:56:6e:e6:13:bf:15:a0:14:0c:15:29:5d:
         51:f9:5c:00:34:3e:08:e7:02:8e:a5:2b:49:2a:4f:d4:5c:5c:
         78:d7:ca:73:de:e9:ee:9e:c9:2b:44:d1:bb:2a:ac:b7:48:10:
         63:ff:f1:f7:f0:3a:c6:e9:0b:7e:5a:e6:b1:c5:2f:8b:e4:d0:
         f8:2a:16:17:7c:35:78:0c:9d:d6:4b:77:f6:be:66:0a:68:9c:
         87:a0:de:c0:65:2e:18:0c:f0:c6:b6:09:52:fb:e5:c7:68:15:
         a2:70:9b:84:99:64:75:29:f6:ee:0a:62:5d:d1:ea:a2:d4:68:
         17:ee:54:ae:63:3c:bc:1e:12:4f:4d:2f:98:07:ba:b9:20:95:
         50:0e:96:4f:e7:2e:fe:df:b2:77:7a:91:b8:6e:63:7e:a8:9d:
         65:4e:ff:75:36:58:eb:82:1f:ee:fb:6f:fc:a0:7d:8a:43:30:
         dd:51:3b:50:5f:cb:62:b6:95:fc:2b:aa:09:bf:76:a5:4b:30:
         0c:64:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:54 2026 by rpki-client