Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File:                     qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier:          E4JpgsvE9hThJE3bVismI+SLf5Deyy7UBRcFgq9aq5U=
Subject key identifier:   D4:EC:32:FB:DF:62:4F:CF:2F:75:CC:48:B3:EA:EC:AB:9F:9F:63:DB
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer:       /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial:       019F95128888E228000166C360F4A1FA2821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number:          0F39
Signing time:             Fri 24 Jul 2026 17:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:47 +0000
Files and hashes:         1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
                          2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: N3ojU6mF5ZcO2d9IVtgLLcw5HwK5qSlU3lPOyQEcQds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:88:88:e2:28:00:01:66:c3:60:f4:a1:fa:28:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
        Validity
            Not Before: Jul 24 17:00:47 2026 GMT
            Not After : Jul 25 17:00:47 2026 GMT
        Subject: CN=d4ec32fbdf624fcf2f75cc48b3eaecab9f9f63db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:2a:5e:44:8f:2c:d7:d4:a5:53:63:f0:1e:
                    80:73:17:84:0b:be:af:f9:0e:27:7f:c3:3a:03:5a:
                    ae:80:a6:1a:18:f4:0b:36:3a:f8:cb:90:88:02:97:
                    7c:7f:fa:6b:ef:14:1f:08:0c:97:34:72:36:bc:98:
                    dc:bb:55:d3:a0:d4:0f:bf:d4:1d:05:62:2d:75:e2:
                    e5:ff:95:5b:0b:1a:55:9d:cb:7a:d1:10:ce:ef:62:
                    31:e5:67:4a:da:ff:4d:9d:64:bb:9b:0e:86:f0:53:
                    39:b3:e8:39:8d:df:43:d6:9c:3e:2e:8e:30:d3:92:
                    86:51:8c:61:ff:7f:a6:ea:6b:5c:d9:3f:fd:8e:f5:
                    00:30:1d:f9:10:95:cd:2c:e5:96:8d:04:84:03:ce:
                    9a:18:91:8d:d9:8a:68:4c:30:7d:8c:34:ee:f7:78:
                    e5:ef:5b:a0:14:04:33:87:9c:55:86:3f:ee:ea:0b:
                    f5:fc:ba:b1:ac:e7:24:b9:aa:d4:b5:a0:98:13:35:
                    a1:03:57:76:f0:85:25:f2:84:d3:2d:ce:8a:c1:03:
                    11:ab:db:7a:f3:0b:64:7b:19:62:58:bf:e6:02:70:
                    6e:d5:58:82:00:8e:45:6a:2a:d7:d4:86:0a:43:2a:
                    f6:14:75:ef:b3:94:03:c6:0b:d7:9b:3e:64:d3:40:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EC:32:FB:DF:62:4F:CF:2F:75:CC:48:B3:EA:EC:AB:9F:9F:63:DB
            X509v3 Authority Key Identifier:
                keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:35:03:5c:d9:53:5b:f4:19:67:97:f1:7a:06:39:c5:0a:b5:
         43:75:37:39:a0:52:9f:ba:9b:73:25:51:b9:87:a2:f8:1b:4d:
         f3:c3:52:a0:81:63:41:8f:7d:02:3a:97:f2:a4:92:f3:5c:97:
         c8:56:34:d3:e3:f5:98:71:fb:77:7d:78:2e:ab:83:6d:14:ac:
         29:4c:7a:a0:10:39:2a:de:0f:f2:6a:98:9d:c0:7b:f1:82:ff:
         a9:99:33:f2:2a:2d:e6:93:8f:ab:75:97:a1:30:ac:17:14:45:
         5b:52:2a:f8:d7:d4:b8:64:ac:af:5d:8b:8c:19:dc:78:c4:a0:
         0d:65:f4:4e:a8:e7:b2:7b:da:26:b3:c0:1f:d2:8c:ab:68:d1:
         a2:bb:c6:f3:b0:e3:40:b1:6a:af:88:50:b4:e4:22:38:e1:94:
         db:d9:b0:43:30:ae:8f:cd:05:8d:02:04:70:22:c7:22:7d:6d:
         8e:43:c4:3a:15:3e:03:12:34:0b:3d:cd:41:9f:89:68:b4:3b:
         56:77:aa:44:c9:fb:be:04:93:15:5c:84:7d:ed:a9:05:5a:91:
         f1:fc:04:ec:5d:b5:09:25:fa:3e:80:ee:fc:58:98:48:a1:af:
         f6:c6:88:77:bd:a4:dc:95:d4:11:1f:09:02:69:e3:2b:02:1c:
         d3:f6:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:22:45 2026 by rpki-client