Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File:                     rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier:          rNUi/DNBrUHQs17ci986gjP33iq5sMow3GDBuGW43lw=
Subject key identifier:   E3:22:65:DC:EB:5D:96:12:38:04:20:62:D7:25:90:B1:97:E0:48:7B
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer:       /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial:       019F92B5FBE5EA0E777460A7936CC07B9CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number:          048C
Signing time:             Fri 24 Jul 2026 06:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:27 +0000
Files and hashes:         1: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (hash: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4=)
                          2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: VSlPq+xQpHAl9Yrf2a2Drmh3QG0NYep8nqt8qL2fvx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:fb:e5:ea:0e:77:74:60:a7:93:6c:c0:7b:9c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
        Validity
            Not Before: Jul 24 06:00:27 2026 GMT
            Not After : Jul 25 06:00:27 2026 GMT
        Subject: CN=e32265dceb5d961238042062d72590b197e0487b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:82:29:8d:5b:5f:f6:b7:0e:5d:12:04:e5:
                    dc:c0:1d:54:32:a5:0e:e7:d6:d9:77:30:aa:33:a6:
                    c4:4c:8d:dc:43:1f:f6:5f:a0:20:83:b9:92:8a:c9:
                    2a:dc:10:fb:10:49:35:0c:7c:4a:2c:f6:9f:2d:d5:
                    5a:2b:64:ef:2f:10:57:8e:ce:ee:b9:09:8f:1e:c5:
                    45:a8:17:f4:59:c1:f4:e6:91:7b:58:04:03:50:23:
                    70:3e:0a:a1:fd:28:7a:be:76:99:54:fe:4a:74:96:
                    4c:62:94:34:9d:14:21:14:95:7f:2a:6a:77:13:75:
                    83:d1:ea:96:4b:62:89:62:7f:7c:56:28:2e:65:44:
                    9c:74:24:82:4f:44:18:92:ba:60:55:83:cb:56:a9:
                    5f:09:2f:40:d6:56:e7:68:ca:fb:d7:bd:ef:45:7f:
                    72:5d:47:a7:83:2a:8c:3d:fa:68:c4:26:4c:23:ed:
                    3d:10:12:a9:0d:47:39:e4:b5:72:35:fb:96:b7:b1:
                    3e:d3:89:a5:58:89:71:f3:80:63:4c:46:c5:7e:86:
                    e7:83:9c:63:28:7e:d2:fd:d4:0a:3d:37:db:62:01:
                    a1:d9:31:8f:53:b1:6f:38:b4:45:8b:50:a9:0f:c5:
                    c5:c9:ae:bc:fe:4f:f1:76:59:dc:80:1b:44:c6:a4:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:65:DC:EB:5D:96:12:38:04:20:62:D7:25:90:B1:97:E0:48:7B
            X509v3 Authority Key Identifier:
                keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:60:f6:4c:8a:a7:be:22:e7:79:56:3b:ee:06:ec:ea:7e:25:
         fb:c2:62:44:15:8c:30:96:98:83:89:e5:f8:44:1b:74:e4:43:
         f7:71:3e:dd:7e:c0:3e:d9:33:41:8b:80:85:86:36:79:ce:95:
         69:a5:c8:89:8f:63:b1:01:f1:72:f4:79:62:aa:68:17:bf:d8:
         23:63:79:66:84:52:c3:a9:0c:f4:87:71:ba:58:15:be:54:dc:
         16:40:86:0e:c6:91:f0:94:6a:37:88:dc:2a:a0:97:bf:a4:45:
         a6:30:4c:ff:10:06:55:5e:7c:57:88:3d:d1:a0:88:a0:30:bb:
         b8:c2:e3:3f:32:c8:c3:69:b7:40:cf:1a:d6:b4:aa:01:e9:c5:
         98:57:b9:01:3a:8c:2c:9d:ce:b2:5a:dc:cf:c4:d7:f8:f6:e5:
         31:37:d7:ad:03:b9:d7:47:97:22:04:48:c6:1a:77:36:6e:db:
         e4:4b:2e:53:6f:69:d3:f5:47:9b:21:a7:90:98:aa:b6:2c:fe:
         ca:c2:ed:37:0b:68:fc:ac:17:c5:12:78:48:ca:d6:c3:3e:2d:
         ed:09:e4:df:89:db:e2:83:e3:64:5f:fd:94:d4:63:e1:c5:2c:
         58:ea:d2:da:77:14:c3:a8:d3:48:7a:18:09:09:32:82:89:ab:
         6c:e7:24:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Stfvl6g53dGCnk2zAe5z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYTUwYTRlY2Y0NTgxMGNmNmY2OWM5N2MzYzY4NWNmYzI0
OTc2YzIwHhcNMjYwNzI0MDYwMDI3WhcNMjYwNzI1MDYwMDI3WjAzMTEwLwYDVQQD
EyhlMzIyNjVkY2ViNWQ5NjEyMzgwNDIwNjJkNzI1OTBiMTk3ZTA0ODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00OCKY1bX/a3Dl0SBOXcwB1UMqUO
59bZdzCqM6bETI3cQx/2X6Agg7mSiskq3BD7EEk1DHxKLPafLdVaK2TvLxBXjs7u
uQmPHsVFqBf0WcH05pF7WAQDUCNwPgqh/Sh6vnaZVP5KdJZMYpQ0nRQhFJV/Kmp3
E3WD0eqWS2KJYn98ViguZUScdCSCT0QYkrpgVYPLVqlfCS9A1lbnaMr7173vRX9y
XUengyqMPfpoxCZMI+09EBKpDUc55LVyNfuWt7E+04mlWIlx84BjTEbFfobng5xj
KH7S/dQKPTfbYgGh2TGPU7FvOLRFi1CpD8XFya68/k/xdlncgBtExqQlnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMiZdzrXZYSOAQgYtclkLGX4Eh7MB8GA1UdIwQY
MBaAFK6lCk7PRYEM9vacl8PGhc/CSXbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYt
YzcyYTljNmZiOGYyLzEvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYtYzcyYTljNmZiOGYy
LzEvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmD2TIqn
viLneVY77gbs6n4l+8JiRBWMMJaYg4nl+EQbdORD93E+3X7APtkzQYuAhYY2ec6V
aaXIiY9jsQHxcvR5YqpoF7/YI2N5ZoRSw6kM9IdxulgVvlTcFkCGDsaR8JRqN4jc
KqCXv6RFpjBM/xAGVV58V4g90aCIoDC7uMLjPzLIw2m3QM8a1rSqAenFmFe5ATqM
LJ3Oslrcz8TX+PblMTfXrQO510eXIgRIxhp3Nm7b5EsuU29p0/VHmyGnkJiqtiz+
ysLtNwto/KwXxRJ4SMrWwz4t7Qnk34nb4oPjZF/9lNRj4cUsWOrS2ncUw6jTSHoY
CQkygomrbOckPA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:38 2026 by rpki-client