Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File:                     qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier:          Y+XERTnaBXVyTaQhIyx12zScLOZ84W0NPokprP5xwFM=
Subject key identifier:   5B:91:E4:01:27:6D:37:B7:E2:26:5D:36:FC:2F:68:68:36:29:71:9F
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer:       /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial:       019F93FF7DEB48A2285C0EEB97A4AAD2FE99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 12:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:22 +0000
Files and hashes:         1: fG6maQIYPuiZbXuoPZY5KDKmziI.roa (hash: 86O5JcN57k2/HbjQtBdb8xSuus/b5Khba3p8Ebd34wc=)
                          2: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: 8NP7AaIHkLxNKSHOCuGZF0FZ4ahUimEi+gayi8sy7ec=)
                          3: upo56Z93ZuxfUzsBXT8Mop0ljfI.roa (hash: YhDFF8pQFZdnO5Ubp8t393cVmTF+JmT/Dc4jBewkDSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:7d:eb:48:a2:28:5c:0e:eb:97:a4:aa:d2:fe:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
        Validity
            Not Before: Jul 24 12:00:22 2026 GMT
            Not After : Jul 25 12:00:22 2026 GMT
        Subject: CN=5b91e401276d37b7e2265d36fc2f68683629719f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:64:82:7d:da:97:d6:a2:f5:26:55:e9:45:
                    2b:34:52:14:2d:af:93:25:60:3f:b4:50:f4:cf:a1:
                    41:dc:ad:03:40:3c:49:84:e1:1c:85:e4:bc:e4:bd:
                    3a:ca:d4:40:6d:47:ed:10:e9:af:16:07:c8:4a:97:
                    d4:f4:8e:0a:16:6f:ed:2c:53:0a:d1:ec:55:58:c5:
                    f6:e9:f1:5b:8f:a5:fb:9e:f5:23:d1:55:c4:90:37:
                    0c:63:55:da:8f:79:fe:f9:60:f6:38:6b:26:87:93:
                    7e:80:2a:54:c6:c3:2e:ae:bb:c0:f3:e0:8d:eb:cb:
                    59:18:d3:1a:80:25:a2:46:f7:b4:59:21:af:12:1e:
                    2c:71:49:88:2d:34:bb:fa:41:66:79:87:1f:cb:0e:
                    26:f4:e1:dd:76:be:58:5e:21:a2:6e:70:83:2a:9b:
                    d5:38:c1:1a:6e:26:f0:fc:dd:0f:e5:96:57:f6:bc:
                    a4:11:1f:5a:e3:66:c8:4e:c4:7e:23:cb:85:71:96:
                    12:b5:a7:f6:6f:c4:ce:57:57:92:cb:78:a0:7e:4f:
                    2c:f0:df:f3:35:d6:5a:88:25:60:0b:f7:24:4c:e7:
                    4a:e1:84:df:cb:a5:e8:a0:21:28:0c:08:f0:87:71:
                    29:e6:15:09:a3:99:db:4a:e2:0b:d9:ae:dd:2b:f2:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:91:E4:01:27:6D:37:B7:E2:26:5D:36:FC:2F:68:68:36:29:71:9F
            X509v3 Authority Key Identifier:
                keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:55:98:84:90:a1:5e:0b:6f:bf:81:bf:b6:0f:5e:ed:e4:7a:
         10:c6:03:4a:83:c6:14:9d:05:d3:16:29:7b:0d:73:f2:5c:77:
         1f:16:c0:d1:b2:c9:00:45:4f:55:f6:cb:e8:c2:ed:f3:92:8a:
         9b:05:fb:76:3a:61:49:69:1b:7a:f1:a6:dc:95:fe:5b:62:e0:
         a7:54:bd:ce:bb:9a:8a:5e:2e:02:91:30:5f:a9:8a:a5:96:9a:
         d4:00:e2:3e:e9:23:3f:fb:6e:9e:58:0d:8f:b5:96:eb:4d:22:
         a5:a7:df:3b:90:f5:3e:e1:95:c2:01:e6:17:80:95:b3:50:96:
         fa:67:90:7e:b2:ae:67:fd:7e:aa:b6:82:60:dc:40:5e:6d:0d:
         ed:b7:0c:22:33:8d:74:d2:e9:c3:dd:37:21:9f:84:79:c7:b4:
         e5:d2:27:5d:d0:d8:73:04:9e:82:79:d4:d1:32:05:d2:22:43:
         7d:26:2d:43:bf:df:d2:62:24:68:01:12:58:7e:9d:14:d3:c8:
         70:30:66:16:8a:8e:d9:fa:b2:ba:35:a8:7f:70:eb:5f:83:88:
         16:21:78:9c:13:d2:38:13:37:1a:92:e8:9e:cd:19:56:f0:c2:
         f7:a8:1b:f3:35:cd:49:2c:9f:22:6c:8f:1f:c8:6d:76:72:9f:
         e0:7f:b9:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/33rSKIoXA7rl6Sq0v6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NDgwY2YxOGZkNzg1OWRmOWFkOTk3OTQwMDEzYTk5Yjhk
ZWUzNzQwHhcNMjYwNzI0MTIwMDIyWhcNMjYwNzI1MTIwMDIyWjAzMTEwLwYDVQQD
Eyg1YjkxZTQwMTI3NmQzN2I3ZTIyNjVkMzZmYzJmNjg2ODM2Mjk3MTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WJkgn3al9ai9SZV6UUrNFIULa+T
JWA/tFD0z6FB3K0DQDxJhOEcheS85L06ytRAbUftEOmvFgfISpfU9I4KFm/tLFMK
0exVWMX26fFbj6X7nvUj0VXEkDcMY1Xaj3n++WD2OGsmh5N+gCpUxsMurrvA8+CN
68tZGNMagCWiRve0WSGvEh4scUmILTS7+kFmeYcfyw4m9OHddr5YXiGibnCDKpvV
OMEabibw/N0P5ZZX9rykER9a42bITsR+I8uFcZYStaf2b8TOV1eSy3igfk8s8N/z
NdZaiCVgC/ckTOdK4YTfy6XooCEoDAjwh3Ep5hUJo5nbSuIL2a7dK/KE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuR5AEnbTe34iZdNvwvaGg2KXGfMB8GA1UdIwQY
MBaAFKlIDPGP14Wd+a2ZeUABOpm43uN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0Yjkt
YWNkODdjNTQ2MDQ4LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0YjktYWNkODdjNTQ2MDQ4
LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlWYhJCh
Xgtvv4G/tg9e7eR6EMYDSoPGFJ0F0xYpew1z8lx3HxbA0bLJAEVPVfbL6MLt85KK
mwX7djphSWkbevGm3JX+W2Lgp1S9zruail4uApEwX6mKpZaa1ADiPukjP/tunlgN
j7WW600ipaffO5D1PuGVwgHmF4CVs1CW+meQfrKuZ/1+qraCYNxAXm0N7bcMIjON
dNLpw903IZ+Eece05dInXdDYcwSegnnU0TIF0iJDfSYtQ7/f0mIkaAESWH6dFNPI
cDBmFoqO2fqyujWof3DrX4OIFiF4nBPSOBM3GpLons0ZVvDC96gb8zXNSSyfImyP
H8htdnKf4H+5fw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:45:20 2026 by rpki-client