Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File:                     QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier:          yO51iVW4awsynMDwcyJsQ2DTxktadaxY9a9H9aAK+/Q=
Subject key identifier:   00:04:45:3E:1D:2E:19:8C:BF:BA:17:AA:8C:B7:48:3D:02:8F:FB:7A
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       019F935BBB9E6DBD1CC13780412041369AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number:          16C1
Signing time:             Fri 24 Jul 2026 09:01:30 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:30 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:30 +0000
Files and hashes:         1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
                          2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
                          3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
                          4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
                          5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: uuKTQnWI8MreRIM4X5KV/UdMkiixZU/srU6fz9X2W/g=)
                          6: _zP73NXlOD_8EgcbXNN-hPdzSQo.roa (hash: XVZFe/ZBZLQR/k8FwFmC9dpWix1IncPAmzb2M0KXlGk=)
                          7: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
                          8: h5uK1sxm-LA7F7RnXnRUsWfGsFc.roa (hash: kiAKvXhdtX2kzyGIv4FUOZn9GRgVG3rv957GsPh/b7w=)
                          9: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
                          10: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
                          11: tVRKIzEi3C5oivV0NSF6cpvQXxw.roa (hash: DCE8qPP2+ixczk2thpFiZupianuMg94BL32mNt6WYVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:bb:9e:6d:bd:1c:c1:37:80:41:20:41:36:9a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: Jul 24 09:01:30 2026 GMT
            Not After : Jul 25 09:01:30 2026 GMT
        Subject: CN=0004453e1d2e198cbfba17aa8cb7483d028ffb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:b7:77:ff:15:05:31:de:cd:54:99:5c:f3:
                    72:9a:ab:40:c5:f1:c0:36:06:c5:91:23:a7:00:80:
                    30:a4:21:6a:c2:0b:ec:69:30:7e:84:92:be:9c:93:
                    08:1f:46:9c:35:6b:15:3d:da:0c:04:38:26:3b:37:
                    17:15:22:90:42:f1:3c:a1:96:48:10:48:83:53:3b:
                    9b:7e:f0:20:51:85:4d:0f:38:c9:59:d6:39:63:1f:
                    d8:4d:73:a6:d8:e8:57:0b:23:50:75:38:32:2d:b8:
                    be:5a:05:38:0c:c2:53:a5:45:50:59:56:5f:e5:47:
                    74:35:d5:52:2d:30:5e:3f:59:2f:d8:17:4b:ff:bf:
                    84:64:0c:ca:0d:f2:7d:00:f9:38:cd:9b:8e:e9:1d:
                    0a:c3:8b:3c:a5:28:40:11:5b:bc:fb:7f:c1:9c:b8:
                    33:9b:57:35:b6:62:b6:33:e7:4c:8f:7b:f9:62:e6:
                    ae:f6:48:69:46:e4:16:38:b9:21:da:38:22:7e:f8:
                    1b:04:ca:14:28:25:a7:ed:4b:b1:81:ea:44:37:19:
                    64:ea:3d:79:18:b2:1f:9a:b2:26:92:d1:54:06:64:
                    a3:2c:98:4b:09:9c:94:61:56:d1:3c:81:de:c7:28:
                    d2:10:f2:8b:1f:90:b1:49:3c:6c:bf:b7:2b:36:b8:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:04:45:3E:1D:2E:19:8C:BF:BA:17:AA:8C:B7:48:3D:02:8F:FB:7A
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:25:8f:77:11:e4:50:b0:58:b4:bf:82:82:82:67:94:10:
         80:f8:f2:d7:0d:3f:57:fc:18:2a:d4:59:b6:95:8b:a6:81:84:
         72:59:06:b0:f6:06:47:8a:57:40:7f:c8:61:a5:6a:7b:cf:a8:
         30:a0:4b:6b:e2:b7:f1:96:1d:95:85:25:17:68:f5:20:8f:c9:
         61:8e:f6:d3:d8:95:e4:d1:1b:e8:1b:a0:e5:5e:c8:86:5a:48:
         02:ef:31:1c:a6:1c:54:ec:f5:c2:12:fc:88:6a:41:06:21:6b:
         49:f0:2a:73:d5:a9:20:98:8a:5e:42:0c:6c:9f:df:ea:40:59:
         87:1d:e6:1c:c3:c4:18:5e:09:a1:8e:cd:1b:d5:17:95:1b:fc:
         12:67:24:ea:ae:2f:06:5d:74:ba:01:c5:f3:43:98:ac:fa:d1:
         e6:05:76:3b:e4:3a:81:14:58:21:b7:4c:64:d3:01:29:22:5c:
         cc:df:c9:a6:69:e3:62:c3:0b:2e:96:7b:67:e4:68:59:84:45:
         6c:ef:98:d6:1d:2e:e4:e2:21:c5:75:0b:7a:36:db:ec:f8:9c:
         30:c0:0b:fa:4a:e2:ff:bc:1e:c1:23:6f:dc:7c:d3:04:5d:97:
         35:43:86:70:66:45:fa:f2:50:97:7a:ff:46:51:7d:49:b0:11:
         14:54:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:56:56 2026 by rpki-client