Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
File:                     qV9jiGJSm22v1EDhcqIvASCwmuo.mft (raw, json)
Hash identifier:          0ICLhU/6FyhayaDfaG2wyZvwfkuGx/gLsXVKbmxbFyw=
Subject key identifier:   77:8C:0A:E0:EB:E9:D0:6D:04:4C:9A:AA:25:69:DD:82:4D:D2:E2:96
Authority key identifier: A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
Certificate issuer:       /CN=a95f638862529b6dafd440e172a22f0120b09aea
Certificate serial:       019F9436A8640EE584E1F9CBABE47F15DB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 13:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:37 +0000
Files and hashes:         1: qV9jiGJSm22v1EDhcqIvASCwmuo.crl (hash: A72NpTLHzxFkZDpPeO+ME4sl1aM87VY7UNxisk8Yqyo=)
                          2: vXqWSpoy-vUfdRhBjmIqtuILrrA.roa (hash: AP1nnsDukGUHxQL7JsdOeOGXem9GHtDYUmgA7WKjN3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:a8:64:0e:e5:84:e1:f9:cb:ab:e4:7f:15:db:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95f638862529b6dafd440e172a22f0120b09aea
        Validity
            Not Before: Jul 24 13:00:37 2026 GMT
            Not After : Jul 25 13:00:37 2026 GMT
        Subject: CN=778c0ae0ebe9d06d044c9aaa2569dd824dd2e296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:ed:09:05:d5:e9:79:d1:c2:a8:a5:ba:75:
                    4e:ba:da:ec:3b:45:f5:6d:47:e7:f8:c4:05:81:2a:
                    97:93:de:48:18:40:fe:0a:81:9b:00:95:87:ce:cc:
                    60:8d:71:43:a7:c5:f8:f9:31:26:77:dc:f9:56:3e:
                    93:ba:15:e2:e5:34:fb:1a:d2:47:7a:84:b5:b0:48:
                    cd:2a:0c:38:25:f0:1e:cf:8e:9c:f8:ea:f5:ed:73:
                    a5:e6:59:a7:c2:00:28:75:07:bb:13:ec:f2:57:80:
                    34:39:76:fe:d0:79:ee:03:98:04:96:8d:b2:9e:48:
                    f4:31:82:72:95:bf:26:8f:f0:f9:49:e2:26:53:ad:
                    b7:b3:8e:2c:e4:38:fc:5d:df:0a:51:df:cf:54:14:
                    df:b6:99:84:1f:e1:b6:e9:76:cc:6b:8c:f7:27:8c:
                    c5:e3:94:2d:6e:18:d4:05:53:09:8b:5c:5e:28:89:
                    99:0a:e5:53:6e:aa:06:d8:49:5b:a6:64:6c:df:2d:
                    ed:15:f1:0f:08:6a:30:de:ac:a3:99:7a:9a:c1:c9:
                    0f:94:4d:fa:e3:74:b9:4d:4e:6e:2e:b1:a6:cd:a9:
                    5b:66:37:eb:0d:6f:a9:cc:31:f6:1f:76:65:7e:d9:
                    94:a2:9d:81:69:5b:f0:55:2d:a3:28:94:07:25:15:
                    7e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8C:0A:E0:EB:E9:D0:6D:04:4C:9A:AA:25:69:DD:82:4D:D2:E2:96
            X509v3 Authority Key Identifier:
                keyid:A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0d:e6:62:6f:d3:da:63:e7:c9:09:e0:1f:1e:08:a4:69:11:
         8d:20:88:a7:07:cc:8a:5c:c7:24:4c:3b:3b:db:a5:07:eb:18:
         ec:a8:b9:a2:c0:e7:d2:dd:71:64:34:30:d0:82:87:41:f4:16:
         6e:5a:18:4e:e2:d5:68:9b:74:eb:16:c3:c4:44:2a:4d:d9:b4:
         af:99:f7:07:3b:ae:b7:41:22:b5:cc:e4:5c:5a:0e:6d:2d:d7:
         e0:43:b4:32:6c:34:38:7a:c5:20:05:57:66:43:12:d7:07:0d:
         87:f0:a7:d9:fd:24:aa:c9:fb:c7:7c:56:7a:55:62:05:b0:1f:
         da:48:9b:25:06:33:8e:4a:7a:20:70:16:67:be:5f:11:07:03:
         02:4e:38:99:8a:b2:35:0d:37:e6:b9:e2:eb:b0:77:e0:da:88:
         16:bd:8f:12:6e:09:25:4f:07:04:c6:e9:8a:94:4f:1d:d2:fb:
         17:9b:3d:c6:b8:5d:e9:33:92:7c:3b:01:7c:5e:fc:8e:b2:00:
         83:20:a0:74:b1:db:36:47:56:84:9e:86:f7:02:91:de:74:79:
         43:f6:a5:ce:c7:12:d4:31:45:31:0a:fc:dc:9b:9e:e2:8c:19:
         dd:b5:f6:46:cc:b3:9c:4a:4b:5a:f0:61:6b:a7:37:19:af:35:
         12:e0:14:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:27 2026 by rpki-client