Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File:                     MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier:          zkLYWN2zofyAeyhi1TblkYhZXlqs2nQnYsR4sgVl8ps=
Subject key identifier:   CD:71:3F:F2:B1:A0:41:F6:D3:FB:8F:15:37:21:80:E1:29:16:15:11
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer:       /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial:       019F8F1031AEC473784547D67271783921D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 13:00:30 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:30 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:30 +0000
Files and hashes:         1: I-BczlQ87u3cZxP5X5d_PlT55BM.asa (hash: DRlmLGJSRr+fe7px26Jne8q0/DHdNfMhrIjwQGGjyaI=)
                          2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: XpG7NQJv00/j0qoJN2ETsOgNdX1KEAE51j9QDco2bEE=)
                          3: NaTtSMcFSdIxu8H6S2lvgqrJ0Uk.roa (hash: 3H1l6ys+xgmXRMr5rMXY56PSQg72vyKmuhKkZeQKlIw=)
                          4: Ov46GgLCmGN9cynwnomndLJK3rE.roa (hash: 4L/nJ8yxPDp+NjD2T6a5/b4C4w4UlasaJygLN6MYTus=)
                          5: UqRSxyomKtUymi7IXAoPkqqc9Mg.asa (hash: J1GRn2t62rZaNAhTHkwBgbzGS8c8siyOl252umE8GzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:31:ae:c4:73:78:45:47:d6:72:71:78:39:21:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
        Validity
            Not Before: Jul 23 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=cd713ff2b1a041f6d3fb8f15372180e129161511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:92:8b:d2:57:9e:66:4b:b7:35:ce:d9:d3:
                    7a:66:eb:0a:bc:26:0e:aa:d2:c9:e2:fc:41:72:23:
                    34:05:54:c9:96:9c:2c:a0:c1:7c:3c:27:0a:f2:c9:
                    09:6d:b5:d2:c0:a0:a2:73:9d:f0:d6:09:61:85:54:
                    77:e2:b7:df:d9:3c:da:7e:27:37:9b:7d:1c:63:9f:
                    d0:7d:99:13:fc:8b:37:6d:6d:c2:57:7b:e1:98:31:
                    8c:66:5b:bd:4a:57:78:3f:5f:b0:a9:1b:6d:74:d8:
                    01:ff:a6:de:74:cd:75:c9:35:78:df:d2:4c:ac:55:
                    6e:58:9e:52:45:45:b8:d5:f5:51:91:a1:37:18:2e:
                    ea:9e:ec:b5:19:6f:fc:67:bb:a7:dc:55:ac:75:2c:
                    e0:88:6c:1b:4e:28:cd:2f:18:7a:f9:75:90:8a:45:
                    31:b3:60:72:03:c9:cc:d3:26:92:8a:a5:ad:86:3d:
                    7d:92:70:06:ec:42:d4:ac:05:7d:d2:2a:ae:fa:22:
                    46:1d:42:3c:ba:b1:5d:62:22:b8:f2:99:21:57:5a:
                    3d:3c:41:c6:02:6c:de:65:90:fa:0b:1a:4e:9d:9d:
                    b9:71:72:ea:c3:3e:08:dc:65:71:1d:9a:76:ea:58:
                    61:ec:c4:fc:f2:70:78:37:e5:8b:35:9e:25:45:eb:
                    07:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:71:3F:F2:B1:A0:41:F6:D3:FB:8F:15:37:21:80:E1:29:16:15:11
            X509v3 Authority Key Identifier:
                keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:40:44:90:0f:03:37:45:95:fe:60:be:50:31:46:6d:9e:
         be:5e:9e:f0:ca:29:5b:1e:dc:85:65:e3:24:df:33:1d:10:bf:
         f2:d0:65:7a:93:8d:6e:62:11:51:a1:d0:45:6c:07:a7:f7:80:
         91:c4:31:82:e8:e8:bf:a5:fa:48:ae:8c:1b:2a:1e:fd:6e:71:
         21:5b:dd:18:45:19:68:ea:0f:ba:51:03:b3:83:66:83:2d:34:
         29:7f:ed:7d:05:74:3e:45:15:39:76:b7:dd:ca:07:d2:3e:0b:
         c2:1f:76:00:11:08:9b:f2:9b:16:b0:d6:4f:00:a4:ae:a2:59:
         c3:7f:da:bc:84:1a:5c:eb:44:a3:7e:54:25:9f:a3:2d:a7:ba:
         6b:46:b5:1a:3f:e5:34:50:e1:69:01:e9:34:fd:8c:0a:f0:e6:
         ca:fd:8b:d5:f1:fc:d9:16:7b:c9:0a:d0:24:42:8d:ce:65:82:
         e9:a6:6b:c5:ec:d8:6e:8c:85:0b:74:f2:a9:36:12:88:0d:05:
         e0:d9:d7:20:38:16:c9:8b:91:9e:78:0a:2e:2b:3c:1a:50:fb:
         5b:ca:bb:b9:99:e1:52:49:b0:db:0a:a7:12:0c:d1:03:5b:43:
         26:46:47:d3:a4:f1:8b:b8:26:da:02:83:6a:5b:8f:04:6f:39:
         74:75:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:34 2026 by rpki-client