Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File:                     QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier:          NTY5nRtfDEovdZQgyYQ+109zBpTco8RJWdH5dYS4+d8=
Subject key identifier:   C1:9A:A2:27:68:26:B1:9C:2D:F8:D3:1F:90:84:4F:1A:70:B5:65:9D
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer:       /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial:       019F935AD752889C8C58C3F9F13F3FF340AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number:          195B
Signing time:             Fri 24 Jul 2026 09:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:31 +0000
Files and hashes:         1: GzdfLu-BksDJwE9pfcgaIEcBTJs.roa (hash: 0uOTjDCwE9CC6NlLuvwra/kx1v02mWMFwmjFQbmGkMM=)
                          2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: HFcBFB//le/5aGXYZsDfKTX4oGu0Xa83ABrypqDaQeA=)
                          3: ZRhUKW2L993xH1vo8_JfQDNvL-4.roa (hash: dqDDWP+wPoSkNiw6G5+CgUtA2olvFu/u/K+P7q4Sxgc=)
                          4: u1MF5XqndvG5UGN3sAIiEMCwAmM.roa (hash: 09WdJsC0RyyomkwiBQQyeEsIZCuoxjnDogc7nlWYUzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:d7:52:88:9c:8c:58:c3:f9:f1:3f:3f:f3:40:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
        Validity
            Not Before: Jul 24 09:00:31 2026 GMT
            Not After : Jul 25 09:00:31 2026 GMT
        Subject: CN=c19aa2276826b19c2df8d31f90844f1a70b5659d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:f0:91:c7:61:7e:2a:9c:03:c4:c3:53:8e:
                    c7:82:4d:ed:04:99:48:c0:5c:9e:ec:7f:0a:7a:8f:
                    8e:5a:b0:9b:a5:89:be:48:6b:82:a7:78:8f:6c:5e:
                    80:fd:97:17:fc:96:14:d2:be:0b:5d:f4:3f:63:43:
                    af:ab:f2:d7:c1:bc:a3:f1:e8:de:37:58:64:d4:86:
                    59:9f:fc:cf:b7:45:28:18:c4:ea:7b:7a:a7:fe:87:
                    e7:72:1f:f3:a0:1e:e9:b8:3e:9a:b7:5a:87:8e:b5:
                    a0:39:9b:80:22:84:ca:8e:4d:ff:03:ba:7f:83:6d:
                    54:ba:a1:64:02:2e:82:88:96:e8:2b:14:4e:d7:a2:
                    d7:29:b3:c1:06:a5:a4:36:b4:01:31:50:39:2e:ea:
                    c6:5e:2e:33:8e:64:21:a2:70:5f:1a:78:97:5a:bf:
                    48:53:e4:b1:f6:a2:97:d8:cf:21:a3:db:90:88:98:
                    e2:d5:de:35:6c:b2:6d:56:6b:79:f3:73:49:8f:fd:
                    ae:94:d6:a9:cf:fa:6c:31:7e:d8:9a:14:6b:17:b7:
                    76:b0:bb:a8:17:52:20:ff:23:ce:65:0e:86:58:9c:
                    cd:cf:f5:12:3e:7f:ab:5c:3d:58:76:20:02:71:e3:
                    a9:71:a8:1f:f4:7c:fb:8d:f3:24:fc:83:c3:cf:49:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9A:A2:27:68:26:B1:9C:2D:F8:D3:1F:90:84:4F:1A:70:B5:65:9D
            X509v3 Authority Key Identifier:
                keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:10:bb:c5:29:7b:ee:5f:52:b0:69:21:08:b6:5a:df:37:a2:
         17:b9:d1:3c:44:58:4f:35:59:40:5b:31:4b:b6:1b:c0:3e:8a:
         88:88:46:43:db:b7:80:ae:2d:43:dd:d2:aa:8a:85:74:ca:3b:
         09:f2:37:8b:53:2c:98:d2:49:ee:63:7f:24:52:93:88:f9:ea:
         c5:3f:da:20:24:69:98:69:9b:76:b1:69:14:b0:d0:44:08:11:
         fe:7f:8a:17:c2:9b:10:8b:12:5f:8c:d7:c2:ff:4a:e0:49:8d:
         14:68:d8:6e:c6:4e:e2:7e:89:13:7e:e2:87:37:2e:2a:04:2d:
         c9:d9:f0:9b:30:7b:17:80:db:1a:35:61:f6:0a:4e:bb:4b:ac:
         f4:dc:3a:14:23:ea:38:7e:96:8b:2a:c2:6d:95:06:0a:08:11:
         4d:d3:1e:24:2a:c3:59:f7:de:5e:80:36:4d:b4:aa:54:b3:e5:
         d8:99:b1:25:cf:7a:38:c3:9b:4a:e2:32:5e:87:4a:d1:3c:53:
         75:dc:77:86:9a:25:fb:1f:9c:4e:12:ed:87:df:28:f9:de:af:
         54:56:43:c3:61:e3:95:50:39:c1:67:09:fe:d7:13:61:26:01:
         29:4b:b3:ef:d6:f9:8e:24:dc:81:3f:40:b6:a3:37:00:1b:46:
         f7:bf:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:57 2026 by rpki-client