Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File:                     QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier:          Bu6KxKiMkQMjBkFYffgYPdoJXtPqisHmwp7nGCIPvIM=
Subject key identifier:   89:C2:F6:4C:83:34:E5:36:CF:DC:49:05:A4:98:6D:1A:36:9A:77:2E
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer:       /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial:       019F927EFCAFC168969797022AD8F78786F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number:          19D2
Signing time:             Fri 24 Jul 2026 05:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:23 +0000
Files and hashes:         1: 5Bwd_XnCpBq4Cag2pu6bO5I9VIA.roa (hash: eytyjkZwAv73scTtka+wDpj6hepaCfnJjuIuqglSirA=)
                          2: 9wbcMUG4q75E7YjhGVXHnPYT7YM.roa (hash: nEsfQpZm0sg/MSPEMCxg0Fs6SfpSZuGJLTA7MHD7Ovo=)
                          3: GyN2brNi0SyVzTIfSD630KlULEk.roa (hash: WuqJqU2d7Re2MFRsMAJ/7CUNdgg3R6YAy0ZwMSitoI0=)
                          4: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: U/1tUqJ8B5UdyschUE67b95z2KyPckOpVNELEf0gSlA=)
                          5: iOH1McI9iTFIop-UJ1HA_U9if9E.roa (hash: jGsjtR/lt4692ZMHqph22xA5pSDg/jMmydFaGhjVUKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:fc:af:c1:68:96:97:97:02:2a:d8:f7:87:86:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
        Validity
            Not Before: Jul 24 05:00:23 2026 GMT
            Not After : Jul 25 05:00:23 2026 GMT
        Subject: CN=89c2f64c8334e536cfdc4905a4986d1a369a772e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d0:fb:7b:d2:5d:3b:9d:18:3f:17:7d:be:f5:
                    0d:e0:bc:b5:19:6a:46:85:70:96:0a:92:39:a9:9f:
                    ee:90:5b:45:3f:be:69:dc:b4:e3:9f:a7:70:91:51:
                    ce:7f:ae:df:3b:6b:d1:55:27:0c:57:de:9f:1b:ab:
                    ed:5e:44:2d:6b:e6:1d:01:e7:11:74:86:5e:af:c9:
                    3e:ce:43:1d:9b:b6:01:77:a6:33:7a:b7:ff:96:e9:
                    23:73:4e:3a:10:8c:5b:45:0c:de:6c:e5:c9:36:61:
                    fe:09:85:a4:f4:f2:a6:fa:8b:23:67:22:8c:e4:78:
                    df:2e:8c:85:ab:a1:f3:1a:44:23:9c:72:1e:6a:85:
                    66:89:e2:6e:4e:d1:e1:a3:22:65:1e:3b:dd:c5:64:
                    f3:be:8a:9a:28:f1:b4:62:66:94:c0:ea:95:d8:93:
                    bb:6d:e9:1a:7b:75:1c:19:c1:8b:f4:48:1e:15:bf:
                    ec:ba:41:45:6b:13:41:28:e8:4d:12:b5:c8:51:f6:
                    d8:c2:4f:41:1b:2d:88:8b:9d:37:de:9e:4a:d6:91:
                    aa:c8:79:b9:81:a0:56:ef:24:25:b0:92:ac:e4:f9:
                    35:4a:a8:73:3d:a3:1b:e5:ea:02:7c:46:61:64:78:
                    6d:d7:b4:96:bc:e6:22:9d:64:e5:0e:4c:53:48:78:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C2:F6:4C:83:34:E5:36:CF:DC:49:05:A4:98:6D:1A:36:9A:77:2E
            X509v3 Authority Key Identifier:
                keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c2:da:cb:a0:be:70:21:4a:28:49:c2:10:c4:91:fb:7f:eb:
         74:61:0d:d7:ac:eb:d0:73:64:76:db:5a:0b:07:f2:77:79:ee:
         aa:20:68:21:2c:0c:80:27:d8:ee:d2:67:33:be:90:67:cc:21:
         ba:01:64:a3:3f:68:27:4f:6c:c4:b6:79:d8:87:31:7d:a0:d8:
         e8:21:b5:ed:f1:e0:58:6f:bf:8b:86:06:5d:e6:e7:88:f6:e6:
         58:8b:14:ae:7d:60:85:21:c0:fd:dc:db:71:be:95:62:ea:37:
         8a:7b:f8:1e:5d:da:ff:f3:cb:4b:ec:87:c4:7d:ea:42:56:b3:
         b9:89:de:03:a9:05:8d:b3:a8:9f:d6:a7:39:ee:dd:c8:85:6c:
         63:6d:e0:00:d4:6f:ff:36:01:ce:20:76:13:d4:45:02:fa:66:
         29:79:1d:63:90:0a:f5:4a:0c:b7:46:46:df:56:9a:09:57:2e:
         c5:57:45:1c:41:e7:c6:47:5e:ac:3e:37:39:4d:96:34:4a:42:
         9b:6e:1c:49:22:83:d6:a5:1c:10:41:50:8b:61:2d:71:40:17:
         e3:e7:ce:5e:1c:c3:c1:16:0e:c6:a3:63:39:b2:f6:1e:69:87:
         fd:a0:0f:73:17:84:d8:94:52:db:7e:dc:5d:c9:da:54:51:a6:
         fb:dd:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:09 2026 by rpki-client