Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
File:                     QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft (raw, json)
Hash identifier:          2ipbGburgtSB1F2Wf+aME+gJLgnMw0lKcr9aQg1MuaM=
Subject key identifier:   11:DA:7F:6F:EF:F4:CE:5D:92:78:60:2F:2D:92:96:2D:FB:2D:D4:0C
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Certificate issuer:       /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial:       019F90FEB9DDA0A7D0D669C59606193B3545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
Manifest number:          44
Signing time:             Thu 23 Jul 2026 22:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:40 +0000
Files and hashes:         1: 6hHyJvgfZ7hI-rvTQg30OP8uZOk.roa (hash: tb5yoL6DHfMFy0H1u/TLI8OpyyFIEJ1vLTzwk81h5qY=)
                          2: 9z84m-kebT8cdB-4tut3KLWmbhQ.roa (hash: tJspMU+tMRDYHrt52hzcYgBJTQsCCMP09cWPHPzuZFA=)
                          3: QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl (hash: LzW1CA6OD37UALhlbH41GB5P6+HALJbBdfs5dzDpuSk=)
                          4: UyuDpsThd0HTxIHLtl_AcLRLcgU.roa (hash: cR9/I8Oh8wt0pXLSLn6pWKFwtuW+7P/mjqHujGnIbq8=)
                          5: tgvXIki0g-pfbDcyTN4Jty571wU.roa (hash: aBHUTes6NUct+J0pVH5+kLoc6/IlFtoI9S3mihoYFaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:b9:dd:a0:a7:d0:d6:69:c5:96:06:19:3b:35:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
        Validity
            Not Before: Jul 23 22:00:40 2026 GMT
            Not After : Jul 24 22:00:40 2026 GMT
        Subject: CN=11da7f6feff4ce5d9278602f2d92962dfb2dd40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:bf:bd:da:08:12:74:5a:e6:f0:42:79:8d:
                    b4:b3:31:c2:95:fe:5b:93:92:60:88:bb:9d:66:db:
                    81:e7:5d:f3:6d:89:4b:ec:2a:5d:8d:a6:9c:46:1a:
                    39:aa:60:7a:84:be:ee:7f:0b:0a:da:95:78:77:2a:
                    d3:02:bd:b6:61:71:32:95:47:2b:44:97:71:4c:e5:
                    07:12:b5:da:da:6e:48:08:a3:36:d7:f8:25:18:08:
                    d4:4f:15:d1:27:ef:6e:db:a3:13:1b:81:a4:63:de:
                    12:42:a4:c0:ce:30:06:bf:a1:9e:06:e7:21:96:9a:
                    1b:44:13:a9:9f:56:61:d3:dd:83:a4:85:43:0c:6b:
                    77:80:8f:d9:24:13:94:39:a2:7c:db:27:7c:dc:6f:
                    ce:1a:5e:8b:ef:2a:80:c8:dc:aa:27:fb:2c:34:c4:
                    49:7d:45:2d:f8:f0:e3:d7:5e:6c:75:8d:81:1e:fb:
                    f9:39:ef:c0:84:28:fe:bb:ca:6e:4b:9a:ce:44:a0:
                    63:c0:c0:25:59:00:34:f4:b8:64:4b:31:ab:6d:5e:
                    5a:a4:0d:48:7e:32:ff:c2:06:d0:26:09:35:2e:c9:
                    08:5c:a8:4c:a7:ba:ca:e0:c9:fb:aa:69:f9:49:78:
                    79:8a:45:af:bb:97:93:59:47:f5:6f:5a:ec:00:7e:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DA:7F:6F:EF:F4:CE:5D:92:78:60:2F:2D:92:96:2D:FB:2D:D4:0C
            X509v3 Authority Key Identifier:
                keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:09:ac:73:6d:8b:8d:45:6d:19:02:9d:73:37:9a:d1:40:91:
         63:c0:56:6f:43:03:ed:4b:3c:74:23:5b:b4:3a:04:10:d1:6a:
         c7:06:ac:90:de:5a:fb:21:24:bf:44:9c:5e:65:10:8c:32:99:
         dd:3b:5d:7a:ce:09:91:b5:46:1c:45:9c:16:ca:bb:08:5e:ee:
         69:6e:89:f2:ba:89:37:74:a7:61:b0:43:3e:d9:e7:f7:33:bb:
         af:fb:a4:86:11:78:45:86:72:06:cc:65:89:62:3b:7a:04:1f:
         10:47:3b:f2:a0:9a:77:25:6a:ac:b3:c0:de:32:29:f6:fc:4e:
         4a:1e:9a:a0:27:42:f7:47:e8:51:1c:8d:a5:f0:26:24:44:7a:
         56:98:1d:a5:aa:66:44:83:ed:65:54:0f:8f:49:26:0e:a0:fd:
         55:b0:a3:09:49:bc:e7:39:93:85:45:61:89:4a:76:9c:42:03:
         45:86:28:67:fa:54:4a:22:a7:b4:45:9e:be:7b:f3:b3:75:09:
         63:d6:93:c1:14:5d:c6:bf:65:47:70:3c:4e:e4:fe:68:26:64:
         fd:2d:5b:e8:41:9d:c2:32:c3:3c:d0:c2:03:72:6c:4c:8f:a4:
         cb:01:ab:89:04:db:75:a0:75:b3:9a:09:2e:e3:64:98:a1:d9:
         20:49:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:30 2026 by rpki-client