Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
File:                     qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft (raw, json)
Hash identifier:          oZetB22jkEEcbsUtCkhHhV+RZJ7YFV4gMJbbBwhXipI=
Subject key identifier:   C7:C9:1C:67:4D:7B:78:B0:28:9C:77:EC:85:2D:72:2E:6F:4A:A1:6F
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Certificate issuer:       /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial:       019F9090F7ADDB97DEAD7266A8BF2D906484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 20:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:47 +0000
Files and hashes:         1: fsorRjNLpV567Bfhzvrah76aFJM.roa (hash: j4qP9CY0ItXZav1pWfPGEd7YIBpId1LZ5wWL7A5xDlc=)
                          2: hMWRlyBu_98qhrvASUIfs50ilt4.roa (hash: IGWE5HJqvsWQ/JQ2ivM4pc0kcFg9yZY3dxE1FGpgh1g=)
                          3: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl (hash: 9D/7BII4Cw0ZIRiVf5TCvvBY2VvGqLPmgPdsDlSs/sY=)
                          4: yeLJIzyENF-xSwUvcw-83vXbHV0.roa (hash: /maHsTe7P80FB56mfWTMzRdcMrW1yJ3jN8SeCvnlqtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:f7:ad:db:97:de:ad:72:66:a8:bf:2d:90:64:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
        Validity
            Not Before: Jul 23 20:00:47 2026 GMT
            Not After : Jul 24 20:00:47 2026 GMT
        Subject: CN=c7c91c674d7b78b0289c77ec852d722e6f4aa16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:f2:e2:93:5d:6c:69:7d:56:e7:65:4d:52:
                    49:e9:67:27:72:8d:83:12:0d:e8:ff:93:d6:15:dc:
                    1c:67:1c:9d:04:4e:31:c2:b0:0f:15:75:62:95:4d:
                    65:40:77:06:3a:30:de:95:7a:9b:6e:7a:c1:cf:a3:
                    56:42:ac:48:2c:bd:5f:8e:41:d7:0f:60:b5:e1:61:
                    3e:01:2e:36:01:98:d8:fb:1c:01:09:a9:60:c6:a3:
                    33:16:30:a4:26:1c:83:72:b9:24:7b:ff:26:26:99:
                    cf:d0:d9:ac:33:19:d7:ca:10:89:4a:96:ba:d8:26:
                    9f:dd:28:f6:ec:30:08:da:37:4a:b0:c9:21:f5:fb:
                    d1:34:bc:8f:5e:79:71:73:e3:59:c9:90:72:4f:13:
                    2e:1d:41:11:f3:38:cc:64:03:15:25:10:1f:df:a7:
                    1a:38:69:81:f8:03:d6:b0:48:71:75:f5:5f:43:96:
                    3f:4b:4c:ee:ba:ee:43:94:95:ba:47:b6:44:5b:87:
                    fe:18:8a:a1:9c:f6:a3:d0:6d:08:81:d4:7e:65:6f:
                    67:5b:6a:d9:48:71:69:0f:45:3d:71:3d:14:5a:e1:
                    b4:48:b4:80:84:b3:6c:53:16:6c:62:75:31:dd:2c:
                    4d:53:11:dd:75:74:91:c5:25:4a:0f:a8:c9:a3:40:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C9:1C:67:4D:7B:78:B0:28:9C:77:EC:85:2D:72:2E:6F:4A:A1:6F
            X509v3 Authority Key Identifier:
                keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:68:f4:9a:be:2c:ac:f9:31:91:33:98:15:d8:4e:98:41:60:
         6a:aa:30:2e:0d:4d:d7:75:19:ac:9b:a3:95:44:25:cb:20:f9:
         03:df:2a:df:35:98:d1:53:87:3f:e3:dd:f7:be:4b:71:da:29:
         ba:f2:af:4e:03:84:a9:1d:b6:3c:22:19:63:44:a7:88:01:df:
         12:6e:37:23:80:f2:1c:c9:c3:80:63:d0:28:9b:3d:f8:07:61:
         0e:e2:e2:25:7a:ce:8b:6f:a0:b8:a1:14:d1:33:3f:97:e8:c8:
         c7:86:9c:5e:88:68:40:ec:ed:1a:ec:c9:20:14:5b:89:bf:2e:
         7e:54:2b:bc:71:17:f0:1b:38:a1:c5:b5:5e:72:99:be:5b:70:
         ff:5f:68:6d:39:79:f4:c8:ee:8a:cf:1f:a2:96:42:5a:cb:92:
         39:de:73:b7:a0:c6:bf:ec:a4:c5:20:50:d3:90:ce:3a:50:d7:
         4a:fe:da:e8:74:e8:9c:20:40:9a:8f:63:77:4f:8d:23:85:e5:
         5a:15:d3:92:3b:6d:23:20:4b:a0:42:4b:7e:20:2f:e7:63:78:
         ea:4e:cc:10:e3:38:5d:3c:26:18:e6:4d:4c:77:d2:4b:76:e9:
         15:84:e6:7f:f5:a8:0d:f2:27:7b:a4:e5:b7:e8:9b:45:e1:ed:
         b0:9c:05:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:32 2026 by rpki-client