Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File:                     QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier:          PjoPNdmKrMcvJLgxnS1mD3QXtmRuQw97lvg9qppXgHI=
Subject key identifier:   24:AF:DA:3F:3A:CD:59:F5:31:1F:55:2D:20:7D:E2:A4:AF:46:DA:0A
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer:       /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial:       019F91A35BE2F6E5508BD91F32F45D0ED2F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number:          1289
Signing time:             Fri 24 Jul 2026 01:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:29 +0000
Files and hashes:         1: 6RTIAwrwJbLJ1fPq_cac7ZJtAcY.roa (hash: 2ERzYxNpNYyjAlD2AAScZj0ODsBHs3ahvyC6T+s+AbM=)
                          2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: s054KOxhYJyJn74o8EpBpMy4gAetLL9PPJgzl3eKi5Y=)
                          3: oTRGw6Zs-d6bpDvQ-kL6ClRG4Ik.roa (hash: bLoXf9n41kaDI/ipYk9F3/X8uzxUQT3nnCgm1AJq7NE=)
                          4: oztBXyy3buPJ87mv28gbdNDGLjw.roa (hash: j94QmNmrVHRGHpcXkadwtbn926rIcrEUhkEOlIuoY3M=)
                          5: tGVxaOXkW7EuQqW9cKlE7ec1aac.roa (hash: muPN8zI+Nf3MgaQWzHsyyy2GZnIQWau/zxiVhyiqVlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:5b:e2:f6:e5:50:8b:d9:1f:32:f4:5d:0e:d2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
        Validity
            Not Before: Jul 24 01:00:29 2026 GMT
            Not After : Jul 25 01:00:29 2026 GMT
        Subject: CN=24afda3f3acd59f5311f552d207de2a4af46da0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:c8:d1:0f:ed:00:35:db:8c:7f:e3:84:fb:
                    a2:c8:f6:12:a9:b9:bc:5d:e4:90:0c:b9:ec:99:dd:
                    c2:e1:0b:2d:61:67:45:c9:dd:4d:28:2b:55:2d:e2:
                    33:02:2d:4e:31:75:61:ca:41:1e:d4:e0:f3:02:01:
                    98:e7:5b:5f:7e:25:15:84:7b:5f:62:c8:a3:a7:dc:
                    48:af:f6:29:d8:8e:8e:4e:55:e3:91:b1:46:f6:bd:
                    f7:57:d7:7a:61:1e:be:0b:9c:89:54:f7:0e:01:88:
                    ee:b0:04:cf:22:40:b9:47:6b:00:2e:95:51:9d:a2:
                    e5:35:ee:52:ae:cc:15:7c:30:1a:55:8d:cc:1d:4f:
                    09:48:9c:4c:f5:72:f2:86:a3:ec:25:ca:54:c9:3c:
                    66:7b:6f:43:45:fa:db:4b:4c:9f:1b:aa:5a:4d:94:
                    c9:25:6a:f3:08:0f:18:30:31:12:53:db:04:11:88:
                    23:69:92:0f:c9:55:5f:c9:1e:06:7a:d6:1f:5e:13:
                    8d:54:ff:24:00:fd:d1:bb:0e:cb:fe:c3:8b:5d:5a:
                    8c:b2:ca:7c:cc:9d:a9:9c:fa:5a:71:ce:5a:77:77:
                    7f:76:d4:dc:5f:cd:24:d2:a6:bd:03:2b:f6:c0:47:
                    a7:c4:35:82:11:d3:78:0a:90:74:ad:3b:33:e5:64:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AF:DA:3F:3A:CD:59:F5:31:1F:55:2D:20:7D:E2:A4:AF:46:DA:0A
            X509v3 Authority Key Identifier:
                keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:62:75:69:c5:d2:04:0d:43:5b:7b:80:5e:65:ce:5c:ba:22:
         e1:9c:f2:d7:4f:ef:8f:b9:1d:cb:3e:50:8a:ac:2e:71:3f:f3:
         e5:78:ce:7d:9e:36:3d:33:2a:4c:a5:12:00:2b:1f:20:86:0a:
         d9:68:21:4a:04:99:58:49:04:58:38:ae:8f:d0:98:21:67:fe:
         09:04:5a:b0:cd:4c:f1:84:9c:c7:66:b7:3f:92:8f:5a:55:fe:
         fd:28:38:44:79:2f:42:92:d1:3d:fe:66:16:8b:8d:bf:fc:3b:
         68:1f:f1:e5:7f:e1:b9:9a:e4:b4:0a:ac:23:fe:12:31:3e:82:
         20:80:d1:f5:9a:98:58:41:d0:65:71:fd:8e:e3:1e:a6:09:27:
         35:de:e6:f7:b5:f1:39:c0:c2:cc:cb:a3:64:58:8b:65:6a:c9:
         38:ab:8f:0f:9b:75:c8:bb:3c:9d:13:99:c9:92:8f:c9:f7:78:
         68:d3:1d:b3:ce:d7:ba:e8:50:5c:11:a5:1b:7e:e6:07:0e:d7:
         9d:ff:c5:16:41:4c:43:47:2a:a9:45:29:fc:69:a7:57:91:d8:
         c4:18:92:fb:10:13:47:2c:0b:42:ab:99:53:75:fe:cd:d3:76:
         fc:c9:b6:27:95:58:6e:34:0e:26:e9:64:fc:03:96:03:2a:9f:
         e4:74:01:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:25 2026 by rpki-client