Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File:                     qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier:          u5y89zI7EVjUkEFBFJNaokxOt8meqo4itTCJUbT2/Q0=
Subject key identifier:   55:8E:F2:10:02:43:88:A5:4E:05:7A:56:61:00:84:DE:67:39:75:BC
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer:       /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial:       019F8EA2EF3CF72C9178E2CBD15E93BFAEDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number:          09DA
Signing time:             Thu 23 Jul 2026 11:01:10 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:10 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:10 +0000
Files and hashes:         1: 3scUzKZeF4z3nI5NHfgc8ogxBZA.asa (hash: 6//1xMH4gYFEwHquDYyHEbb7FDjXpA+Z/mNM6gFG3q8=)
                          2: WbPNn7HgAhOI-xcSV59jqV7XkIk.asa (hash: q10EmKCO+2aYQLSKZlFHbu0pSN1E6ixFHJPzyXaJy+I=)
                          3: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: z95xor3IRpUmWw0Kj6kKONa03xX9T+Qxexv2NeypNLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:ef:3c:f7:2c:91:78:e2:cb:d1:5e:93:bf:ae:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
        Validity
            Not Before: Jul 23 11:01:10 2026 GMT
            Not After : Jul 24 11:01:10 2026 GMT
        Subject: CN=558ef210024388a54e057a56610084de673975bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:73:bc:97:85:df:60:69:d3:d7:9e:d3:0e:
                    aa:57:4f:57:6c:4c:74:39:92:df:c7:2a:41:11:52:
                    ea:0c:17:29:a9:9a:d0:3f:74:c4:bd:ac:fb:cc:c7:
                    b6:f8:69:d3:f3:94:22:84:6d:b6:35:51:68:8e:0d:
                    74:be:c4:60:33:5d:9f:26:01:c9:8b:de:d6:ca:c9:
                    19:93:ef:a4:97:f9:76:da:28:4e:ec:01:b7:0f:45:
                    9e:8f:f0:b3:4a:62:9d:87:64:98:63:cd:34:16:45:
                    70:a9:35:cd:53:ea:46:de:43:48:97:7f:49:89:6e:
                    1c:72:db:e1:5b:e2:33:17:1a:d8:53:97:1c:1e:2a:
                    d0:75:d4:70:ad:91:82:5a:37:13:53:91:4b:40:4c:
                    93:ab:1f:b9:87:d6:85:8a:ba:8f:a5:4b:76:5e:9f:
                    b4:66:f5:55:50:3c:29:e5:11:31:3f:94:d1:fc:e1:
                    02:d2:69:cc:51:2b:ad:d3:9b:0e:44:33:8f:c9:1d:
                    00:a1:e2:34:12:c2:30:05:1d:c0:a8:2c:b9:98:c7:
                    20:e5:ab:01:9b:a4:eb:fd:27:4c:7d:7e:3d:64:df:
                    02:3d:f4:74:87:3a:64:16:e5:91:f8:3c:99:de:32:
                    87:0e:66:a7:fe:60:99:b2:e9:70:1c:dc:58:3f:76:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8E:F2:10:02:43:88:A5:4E:05:7A:56:61:00:84:DE:67:39:75:BC
            X509v3 Authority Key Identifier:
                keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:ce:51:71:89:84:1f:ab:79:eb:d9:ef:f6:ac:25:10:9b:
         b7:9e:75:6b:83:a5:3e:b3:57:34:99:9e:9a:ab:1c:81:da:e7:
         a2:a7:6b:b6:6c:14:35:3d:32:2d:f7:24:37:30:3f:35:34:bc:
         00:a6:1d:ac:66:a8:e2:a2:c4:63:96:fc:92:f7:98:81:f4:3f:
         61:35:62:3c:5c:62:cc:be:4b:85:c8:58:d7:5e:13:93:13:c4:
         c3:f9:e9:f0:4f:65:31:79:12:23:1e:be:88:f3:11:4e:6b:9d:
         21:ee:ac:f5:fc:aa:fd:44:16:d0:01:f7:2d:c9:91:90:42:8a:
         0b:cd:22:b9:f4:c7:8f:32:58:46:b6:f3:49:13:04:3c:9a:5c:
         97:03:20:8e:20:c3:47:14:44:ec:3a:a1:02:47:62:b1:6b:7e:
         19:3b:89:3c:33:5d:08:da:b9:a8:49:bd:dc:e2:9c:21:25:e1:
         dd:c4:5d:61:14:dc:cd:cb:15:95:b8:01:d5:ef:9e:15:f0:f4:
         9f:de:88:04:b4:9d:43:96:60:01:09:27:de:ab:6b:46:91:a1:
         38:d4:23:f9:25:b6:62:1b:e1:42:77:09:7a:91:c1:8b:ab:96:
         e3:65:81:88:7a:2d:10:e3:c3:ad:74:8d:8c:8f:b9:32:7e:cd:
         2e:14:55:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:49 2026 by rpki-client