Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File:                     qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier:          pKRfIyOw72sDlJysFntaEmNH34VCRBdWTVcgjEDQY7Y=
Subject key identifier:   6B:EF:60:97:25:0F:0C:D2:B5:CC:F1:1B:B1:6A:5E:96:75:7D:E1:5D
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer:       /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial:       019F92B5F33ECC60128C6D47D53B345E18C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number:          0B74
Signing time:             Fri 24 Jul 2026 06:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:25 +0000
Files and hashes:         1: QRd4aPFV9jlBuWiqVWId4f78nwU.roa (hash: z76kR0ZXpWXElfaEyx2j2tbap+nSUCRwRkiT2NmSfmM=)
                          2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: WMw74qSMZxGBx5McppmQVhcB3M1e6zSXSgD2vJ8l6E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:f3:3e:cc:60:12:8c:6d:47:d5:3b:34:5e:18:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
        Validity
            Not Before: Jul 24 06:00:25 2026 GMT
            Not After : Jul 25 06:00:25 2026 GMT
        Subject: CN=6bef6097250f0cd2b5ccf11bb16a5e96757de15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:cf:4d:cf:81:15:ad:22:43:1b:ac:63:df:
                    2f:4b:63:f2:d2:f0:cf:93:2e:f8:b2:72:02:e5:43:
                    55:7d:bd:7f:ce:81:69:ab:1c:1a:0a:35:1a:eb:4f:
                    16:e3:b2:3b:97:0f:82:22:85:25:4b:0c:63:c2:0a:
                    1a:e0:3a:6f:2e:56:07:19:b7:64:56:67:16:4f:11:
                    34:ba:15:a6:07:97:d5:d1:43:9e:f1:a1:27:0c:5c:
                    c4:37:3a:93:c9:6a:2f:89:85:32:4d:c4:49:04:a7:
                    8e:0b:fb:41:0d:60:3a:ae:e0:25:1b:a2:a2:34:4a:
                    aa:8b:44:a5:2b:e6:d8:d0:dd:88:60:68:e3:7a:69:
                    74:ad:b7:9e:a5:e0:98:09:b4:87:a0:8f:2f:88:24:
                    85:94:a6:b0:ee:21:53:bd:88:ff:f2:12:c8:43:9c:
                    f8:b7:83:9d:d8:cb:23:aa:a2:d4:ad:80:9a:2e:a7:
                    1c:2b:1d:b2:2e:c3:5b:df:75:72:d4:58:2e:a2:dc:
                    22:c3:ab:19:b0:c6:eb:bf:34:53:02:a8:e5:a1:32:
                    ac:e8:5c:77:9f:09:d5:18:50:45:7d:32:4d:fa:8f:
                    26:35:93:cd:f0:b5:25:1f:77:02:08:11:07:50:15:
                    64:8c:84:db:10:8a:e3:72:1b:8b:de:19:38:dd:10:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EF:60:97:25:0F:0C:D2:B5:CC:F1:1B:B1:6A:5E:96:75:7D:E1:5D
            X509v3 Authority Key Identifier:
                keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:40:7b:58:21:3d:7b:a7:6b:7e:9f:f3:bf:4a:8f:02:e3:70:
         76:81:e5:a7:47:38:71:90:d2:69:ec:b9:1c:54:24:87:f5:83:
         a8:79:da:2e:68:ad:67:92:39:a9:7e:18:6e:98:28:3a:be:a8:
         4e:79:e5:12:47:6f:3b:5f:0f:c8:80:de:b4:7b:a8:18:6d:5a:
         ba:0b:91:f4:ff:2b:49:df:51:7e:3c:7d:e0:e0:f0:9d:fc:0c:
         45:ee:e6:cf:5d:3e:c8:b7:bd:12:9e:a4:60:6c:d4:75:a3:0f:
         1d:e2:f8:83:c1:cc:3d:92:92:50:63:72:31:82:89:6f:c0:da:
         c3:52:79:0b:ee:bd:e7:19:43:42:20:91:81:ce:fa:3a:2c:e4:
         02:ae:28:b2:46:99:92:05:c3:d6:71:ee:ce:7a:30:0a:6c:1e:
         ae:3f:73:a1:cc:8c:0e:44:6e:cc:e5:44:23:d5:68:38:11:a7:
         4c:ed:28:7c:5e:df:4f:06:fd:1b:aa:3d:cc:7e:e0:d4:1c:86:
         2f:32:79:3e:b1:ea:ea:bb:a2:9f:25:4c:9b:0f:20:b8:a3:ba:
         be:36:0f:18:50:6e:83:28:f3:2a:30:9b:19:9b:77:99:93:ce:
         fe:f2:29:51:e3:f3:e6:8f:a7:7d:aa:ba:b6:c9:9b:f1:97:7c:
         15:49:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:16 2026 by rpki-client