Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File:                     qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier:          8AfAXSPdlVqW8LxHGhbr4P8haf+4BsyJclpae7/WTaw=
Subject key identifier:   E2:BD:18:EA:8D:10:90:2B:A9:1F:10:0E:13:04:17:8E:1A:19:E1:1C
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer:       /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial:       019F94373DC6E712CA575526DC69E2F396B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 13:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:15 +0000
Files and hashes:         1: IDJxz5Lf-bhA1wZBvX00WPWc418.roa (hash: jtojvMTm31S/WThDl0+VIPwens+k95gEp5w6ddEUhik=)
                          2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: lZwE56DDfM68vfBFJIpaLqWL4h2mLAOlWoOVmOBnISE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:3d:c6:e7:12:ca:57:55:26:dc:69:e2:f3:96:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
        Validity
            Not Before: Jul 24 13:01:15 2026 GMT
            Not After : Jul 25 13:01:15 2026 GMT
        Subject: CN=e2bd18ea8d10902ba91f100e1304178e1a19e11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:a6:d2:a7:7c:c2:37:73:b7:07:91:0b:5d:
                    c2:d4:c8:77:af:77:79:00:eb:56:50:ba:f0:e1:c5:
                    4d:f7:77:65:c5:a5:f5:37:a6:8e:65:0b:fb:fb:b4:
                    49:6f:94:c5:3b:3a:86:4d:c3:91:4a:95:2d:90:01:
                    ef:d9:47:89:d7:b7:7e:87:ce:a0:34:36:0e:57:9e:
                    f5:99:43:bb:00:3e:cd:67:87:fd:f3:e4:54:a2:b0:
                    a4:9a:97:87:cc:33:37:8e:80:f0:07:72:38:ce:80:
                    32:b8:33:3d:f2:89:8e:80:dd:03:ad:ae:e1:25:f0:
                    02:d1:f7:04:a1:e6:27:61:e6:ec:20:b1:db:16:25:
                    51:0d:76:70:7d:51:ae:67:73:bb:20:48:67:a2:6d:
                    0b:41:89:5c:1a:f0:23:f3:7f:1e:a2:be:6e:85:ee:
                    6d:8b:12:b2:04:1b:24:ca:dc:2c:d9:d6:34:c7:2b:
                    8d:26:0e:86:d2:f8:9f:cd:08:c7:5e:fb:ff:c9:77:
                    98:30:c2:0f:4b:45:95:4c:56:55:af:ff:3a:3f:1d:
                    64:d1:66:18:c9:62:c8:5b:a7:d7:eb:c5:29:61:ab:
                    d4:b8:e3:5f:6a:3b:fe:75:21:a6:3a:a6:ec:e8:10:
                    17:e4:9c:29:3b:c4:49:0f:1b:33:da:83:0b:ec:b9:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BD:18:EA:8D:10:90:2B:A9:1F:10:0E:13:04:17:8E:1A:19:E1:1C
            X509v3 Authority Key Identifier:
                keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:e8:21:5a:a9:2f:59:68:5e:34:22:d9:31:79:41:e6:9d:91:
         82:40:a7:6d:2a:95:d3:92:85:c3:90:a1:71:b8:ff:db:3b:28:
         86:b6:e0:83:8d:a9:b8:be:7f:c7:eb:ad:90:c8:b7:d6:29:4a:
         74:d0:21:ba:d5:ec:ae:fa:71:1d:48:fd:7d:46:80:6c:e4:ba:
         4a:fa:2d:d6:e1:26:02:4f:53:c4:b1:c3:ff:43:1f:42:4b:58:
         d9:db:a2:12:67:35:82:82:22:7b:4c:cf:f3:ce:df:c0:64:2b:
         56:1b:5f:c1:4b:ad:1e:58:89:38:8b:8e:c9:3c:ac:6d:5e:28:
         8d:d1:12:d0:60:f1:b9:cb:f4:c5:7b:0f:16:b6:b1:89:3e:c8:
         d2:c1:b0:cd:34:e5:fb:2a:54:34:14:13:fc:8e:56:b9:da:d7:
         e4:02:b2:d0:f5:f3:09:ea:19:a3:f8:b5:cd:ad:2e:36:21:58:
         86:82:d8:26:92:a3:e3:53:a8:28:ea:ee:a3:87:f7:da:68:7e:
         05:81:14:d5:b3:34:09:93:3d:a8:d1:ee:35:1d:e7:03:8b:4c:
         0e:b7:e9:d9:76:a0:44:41:27:8a:52:ad:d6:aa:44:62:0c:5e:
         98:c3:8c:5e:5b:4f:cb:4c:07:73:4f:14:ac:7f:62:f7:8d:aa:
         7a:94:b2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:45 2026 by rpki-client