Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          KZZrXCuOh5W1C6O7pHJK82SiRY2t1W3LVLb7w6XpK6s=
Subject key identifier:   D1:56:45:C2:17:60:E0:CB:51:B1:6B:0D:F1:0C:86:CE:22:1A:D5:AE
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       019F9248F3D87F651568240C05AC2CFE4B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 04:01:22 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:22 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:22 +0000
Files and hashes:         1: 4zqOo2SM12tzCSyJyEiRJDqyLeE.roa (hash: xhzylJcPJUd2ec6iCX/8IUuxbVDyJDMhXg/eaPmydQk=)
                          2: CpR7zdaWFgeP_a3JunXPR9g-kLM.roa (hash: +G+gW4DG9/VXzfDnCfnSWW4i5dWFOrWQai2m9hvQ4Jo=)
                          3: NcgEquPk4dqA6kZfv1d9WtImU1g.roa (hash: dJAF+c5UKrR5ihGU6h+RnFVtoMxdremp4iO/MCSr3CI=)
                          4: OghForkImI0Jo0zBq3XHOESQXuc.roa (hash: jMJmmzeuAO8dk90vNQKpGRRQiIdwuWD8TX9EqhW2Bbc=)
                          5: _W2M19fEeYWYsJYF-LdRGnP5HT4.roa (hash: Pmvi6OlA3CER/RWwL2L21FShj4gRY6R+MGZg5vLD+/o=)
                          6: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: MgDX7rIXpk4Uj1pyno6du93q94iRvmEjEDLC9U238Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:f3:d8:7f:65:15:68:24:0c:05:ac:2c:fe:4b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Jul 24 04:01:22 2026 GMT
            Not After : Jul 25 04:01:22 2026 GMT
        Subject: CN=d15645c21760e0cb51b16b0df10c86ce221ad5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:45:41:4b:e1:bf:9c:d7:65:b9:4e:ea:3a:
                    58:5d:aa:52:7f:bb:fc:98:de:9a:3d:d3:c4:d0:d8:
                    11:4f:1d:1f:45:b2:56:b1:1d:78:67:0e:e9:a1:87:
                    5e:a5:b8:06:49:85:a1:81:30:a9:e8:74:45:ab:15:
                    d3:ac:bc:1d:95:53:3c:49:00:dd:24:75:78:7f:c3:
                    41:9b:1e:a6:12:83:c3:7b:ab:67:83:df:f4:87:4f:
                    68:c3:90:49:95:bc:5f:76:8b:31:2a:27:54:24:00:
                    54:03:6f:1c:e6:e7:b5:0e:53:3a:fe:dc:6e:e0:20:
                    c7:25:99:5f:a9:8d:8a:2a:16:3d:0e:ae:4a:75:bd:
                    d2:42:e5:fe:39:ae:05:66:1e:99:3a:43:4a:59:5c:
                    58:6f:e2:38:5a:74:ec:f2:00:e2:4e:d6:5d:62:ea:
                    17:51:e8:ed:8e:e8:8f:aa:e7:42:90:99:44:06:0b:
                    4f:30:4d:4e:fd:18:e4:0e:9a:dd:86:27:19:74:62:
                    c4:c8:02:47:7b:7a:12:55:51:49:01:8a:a2:f4:70:
                    8a:bc:cd:b9:f5:db:d1:2e:3e:48:4f:b2:05:99:5d:
                    21:c9:76:61:27:52:f8:23:ea:67:9c:ef:e7:dc:e0:
                    5d:be:de:03:dc:da:41:67:8c:3f:6f:b1:06:a5:77:
                    3f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:56:45:C2:17:60:E0:CB:51:B1:6B:0D:F1:0C:86:CE:22:1A:D5:AE
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:1d:b7:3c:a7:6b:34:bf:db:0d:b1:be:37:83:95:8d:96:
         9a:02:28:48:1c:61:3b:47:22:45:9b:7a:a8:d7:95:61:0a:7c:
         3b:27:3f:fc:c7:2e:42:02:c4:c4:c5:bc:91:bb:fe:b7:6e:3c:
         89:97:18:5b:4e:74:26:63:4d:59:bf:f1:c5:c2:dc:fc:d5:d7:
         e4:26:0d:7f:19:4a:5f:a3:7b:d0:9e:98:5e:a7:f5:68:53:b3:
         ea:f8:39:23:08:0e:4c:95:0a:52:98:3e:5b:8a:c3:ae:6d:9f:
         d8:1a:c9:62:2f:a3:fc:f6:96:88:84:76:7b:0a:c6:5a:bf:73:
         95:26:99:b5:69:74:2e:89:79:90:e8:03:ad:ab:ca:10:0d:40:
         ba:38:06:86:e4:cc:96:c2:2a:f6:36:fd:ae:93:e1:aa:69:28:
         24:13:ce:cc:ed:b3:35:50:f0:e0:de:7e:e9:4c:2d:bc:30:14:
         a4:30:0d:6f:08:60:c8:f6:5f:2b:08:91:86:e4:96:af:45:28:
         44:9f:83:db:a9:84:5f:72:2e:54:19:36:e6:ef:93:12:19:be:
         64:61:3d:01:b6:7f:61:06:90:7e:dc:28:64:b9:fa:4f:6c:a2:
         50:78:a6:aa:dc:e8:41:88:82:d9:f0:5e:bc:1a:ac:18:9c:ee:
         75:aa:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:00 2026 by rpki-client