Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          cb+G2JR3e2a5g0R4OXeWcs/2qMlti3/PHdVR+KmQgJc=
Subject key identifier:   8B:74:79:2A:36:AB:EE:75:1F:32:F1:22:01:8F:8A:00:49:A1:89:AF
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       019F95B6F29DC83C380221468273501333E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          19FA
Signing time:             Fri 24 Jul 2026 20:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:22 +0000
Files and hashes:         1: A7_y22PIg0hPAMpCsH_sCKGtyg8.roa (hash: jYk6V/JIFZujPYouL6dTCjVEwQr4OkGYQk0D5ScRZVo=)
                          2: Ksd3OiB_AIxcmUtGOKUPQuXbBbs.roa (hash: mbt2rFbow8jwUY5FOtfvQrtCibBO+H5M+VNJrWE5hUY=)
                          3: bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa (hash: BubMw86WqvaBOSfoNUBrIVcL+fL5Ns64cLxY/APuJ7E=)
                          4: f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa (hash: PDGWp7iUzyz4cXF2Z4OAk/knVLv4u1kvbR76Ezmz3vs=)
                          5: j4Ert-J3RYXgEKpLcLx5_T9dxS8.roa (hash: keE/Qns0D+PUwgQtZ9LOIqamoxuah8ZLWQxn+5RiOWw=)
                          6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: Q6dXtqyVBpHgrhUY4jpECARS13YktjrePrVnjq4FVG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b6:f2:9d:c8:3c:38:02:21:46:82:73:50:13:33:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Jul 24 20:00:22 2026 GMT
            Not After : Jul 25 20:00:22 2026 GMT
        Subject: CN=8b74792a36abee751f32f122018f8a0049a189af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:30:82:05:72:e6:a4:c7:ad:70:07:09:23:
                    33:fe:68:6d:cd:cd:0e:1e:ea:92:80:9c:c5:b7:75:
                    d1:fb:cb:40:f5:29:fe:82:3c:ce:e6:ef:f3:0f:06:
                    be:cf:f8:f2:44:be:5e:ff:1d:19:a6:e9:8a:94:df:
                    19:aa:4f:8b:9e:0b:64:7a:6e:55:fd:11:ba:b4:7d:
                    7d:08:ae:c3:e0:ae:54:3b:38:78:07:0c:2d:77:09:
                    3e:d7:d1:ff:79:3d:97:91:50:b2:a7:4b:de:58:a8:
                    2e:48:fd:cc:37:e4:e5:21:5f:93:11:0d:99:7f:00:
                    a9:9a:4f:26:83:aa:d7:5a:ff:41:6a:60:00:2a:a6:
                    05:9f:74:19:94:0f:af:bd:0e:6f:d2:2c:d2:4d:b2:
                    38:77:fd:9b:88:5b:0e:d2:33:41:83:65:bd:bc:26:
                    7a:8c:de:50:66:ac:1f:c1:01:8a:25:9e:14:20:35:
                    c9:3b:3a:cd:71:c2:21:9a:1a:50:4e:0c:22:88:5e:
                    9a:0f:2b:37:48:8a:24:2e:0e:8b:3e:35:d2:f3:04:
                    22:2c:7c:59:c6:49:32:79:a0:81:0d:86:4d:59:dc:
                    74:a4:79:65:c6:1b:8c:d4:4b:6d:91:c4:09:a9:4d:
                    b7:44:27:f9:86:20:27:cd:2c:8b:22:5b:f9:ce:f9:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:74:79:2A:36:AB:EE:75:1F:32:F1:22:01:8F:8A:00:49:A1:89:AF
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5e:b9:73:4f:5d:48:6f:63:e0:45:ee:c6:5a:99:b0:34:96:
         89:ed:c9:4d:2a:c8:7f:a2:77:07:de:72:b5:fd:e2:81:06:cb:
         a7:08:ae:74:4e:f6:52:87:e4:4c:28:5d:a3:e8:44:5e:0c:ee:
         2a:89:80:c0:ee:bf:3b:ce:97:d5:16:82:eb:24:86:ff:e4:c7:
         d7:cb:29:70:b6:14:20:19:cf:12:99:64:4d:4e:2e:42:ca:23:
         78:6e:1e:6b:09:48:c2:28:57:53:43:98:39:63:6c:f2:cc:3c:
         24:dd:a7:ff:5c:4d:cb:61:86:5a:fd:ee:9f:d1:64:53:86:6e:
         52:5a:16:46:af:a8:62:37:a2:bf:e2:98:fb:fa:f0:b8:78:e9:
         7b:f2:d1:61:d8:09:3a:d3:95:5d:08:f4:93:b4:45:00:52:d2:
         e2:89:b3:56:48:d5:f6:7e:75:e9:65:34:ec:6b:0e:e1:ad:bb:
         bf:de:9a:31:01:eb:3d:d3:a3:ef:f4:69:79:d6:52:6f:20:7b:
         3f:63:2b:35:c1:b8:86:8a:12:dd:94:b8:65:a0:15:9d:ee:36:
         46:1b:ed:ea:fd:c5:a4:f2:5a:0e:39:e3:96:9a:5c:1d:55:3e:
         23:f9:bc:8d:cf:a4:f6:2d:e8:f5:d9:28:e6:18:da:53:a0:d5:
         24:b4:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:40:48 2026 by rpki-client