Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File:                     QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier:          fxALlZ5yTVAnwOZFP7qPicrErlmnKIzvE/nBEST2EDs=
Subject key identifier:   C8:67:9A:86:AC:29:D7:CF:06:3F:B2:59:89:04:94:F1:30:FA:65:41
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer:       /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial:       019F9323E48E945F247CDF3D13068158C979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number:          19D2
Signing time:             Fri 24 Jul 2026 08:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:30 +0000
Files and hashes:         1: AwpzkVc0oTDl0sjoa6-QEqDiUec.roa (hash: x7d6UyA4Hucc8K4+EGGBB/UoxNRtjZ72KYH63IunwOE=)
                          2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: nDnqmHn5ZA+GI9DnHiLRYVvIyZ2yX1/kpuu4pJaydwI=)
                          3: VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (hash: oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=)
                          4: dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa (hash: YawdemXrdjGI6Mt73jp819mShD2ngjs7tuw/5rjzQBM=)
                          5: mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa (hash: EsNOl7YE7/jiv9Lddbv0Cg6u3OhdzH3IL5pGXlsPUKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:e4:8e:94:5f:24:7c:df:3d:13:06:81:58:c9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
        Validity
            Not Before: Jul 24 08:00:30 2026 GMT
            Not After : Jul 25 08:00:30 2026 GMT
        Subject: CN=c8679a86ac29d7cf063fb259890494f130fa6541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:57:f6:03:ef:b3:f1:98:11:b0:7f:fe:b5:
                    91:a9:4f:00:47:2f:cf:92:4c:56:26:d3:06:9d:4e:
                    42:78:32:51:64:42:d8:ae:53:e9:d4:33:4e:83:26:
                    e9:43:41:98:9a:e2:fb:ff:7f:d5:53:7c:cc:32:4f:
                    8f:8b:93:e7:3b:ee:81:0f:41:2f:2b:e9:fc:69:6a:
                    08:4e:46:25:20:69:79:38:ef:37:da:af:77:ae:36:
                    31:38:ce:a4:85:fb:95:55:b8:e9:af:49:3b:a2:21:
                    73:12:6e:1d:3d:a7:dd:eb:2f:eb:3f:04:47:f9:ed:
                    3a:22:35:f3:03:31:b9:07:59:9d:25:37:91:17:47:
                    a0:8c:c6:d8:fa:63:c9:fd:cd:2e:a8:d9:71:b2:1a:
                    5a:84:ce:49:00:a2:22:89:6e:73:2d:3f:51:3d:50:
                    0e:71:ef:a8:c7:9f:85:97:9b:f7:90:8f:c7:24:0c:
                    39:af:37:d7:b3:8a:89:01:f2:65:cb:80:aa:2f:21:
                    2a:53:aa:8f:4b:34:dd:83:57:5d:50:d0:28:4b:95:
                    5a:3c:40:4b:43:bd:49:fd:42:4c:b5:3e:7f:68:0d:
                    e7:b6:ba:3f:97:8d:48:fc:8e:a5:8a:49:4d:13:de:
                    46:1d:4e:25:85:37:83:f3:d8:1d:09:4c:d3:5e:93:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:67:9A:86:AC:29:D7:CF:06:3F:B2:59:89:04:94:F1:30:FA:65:41
            X509v3 Authority Key Identifier:
                keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:df:46:ef:42:99:ce:96:d1:37:f6:d8:99:d1:dd:79:e7:c1:
         3c:d2:75:c6:35:d8:fb:6d:5f:72:65:f7:db:6b:40:e1:21:d0:
         34:55:d0:e6:df:98:d4:7d:5c:d7:a4:e6:05:f0:b2:d2:c4:78:
         57:43:79:58:64:b2:6f:d8:a0:69:19:08:bd:fe:94:56:f7:81:
         d7:17:68:f5:49:bf:13:56:d7:5d:f7:06:d0:5e:50:71:2c:4a:
         e8:e7:be:00:5e:66:ca:9b:10:71:e5:1d:76:0e:dc:b9:78:2c:
         8b:b4:bf:6b:31:3f:63:af:4e:58:fd:42:db:8a:74:d0:bf:e5:
         f4:24:63:64:71:04:2c:fb:67:ca:fb:74:f6:44:15:15:6b:8f:
         ce:62:44:e2:1e:82:24:34:90:95:0f:42:eb:a2:74:d5:79:e9:
         f2:33:04:eb:35:6b:95:79:94:7d:4c:0d:85:3b:b7:11:f3:cb:
         ce:50:33:8d:fd:21:4c:59:c2:a4:bb:3d:73:36:fc:76:3d:00:
         3d:16:15:c9:4b:b9:c4:c7:d6:6f:d9:48:70:68:98:e1:ea:c4:
         fa:a0:67:b3:c5:7e:db:79:13:35:b4:a7:67:d5:7d:b8:e1:22:
         81:bd:b2:b6:24:5b:b7:28:43:43:c1:c4:84:10:37:85:63:f6:
         1c:67:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:26:18 2026 by rpki-client