Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
File:                     Qg_zglhintUOC3VkwjNBFYHh3w4.mft (raw, json)
Hash identifier:          H06OmTkeGN6DtaCxp9MxyPqSAZys1f+F3kHMPJtPWnk=
Subject key identifier:   50:03:37:CA:EF:28:03:10:E6:A0:DC:AA:31:EF:F5:D3:1A:D2:DE:23
Authority key identifier: 42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E
Certificate issuer:       /CN=420ff38258629ed50e0b7564c233411581e1df0e
Certificate serial:       019F935B97F7A4BE92AC89C6399AC781665B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:20 +0000
Files and hashes:         1: Qg_zglhintUOC3VkwjNBFYHh3w4.crl (hash: Yl5SHN2jWWcSd8IAHTCnGjWCXaAiqWGr9y65FuIdNms=)
                          2: i44ZsQWX9kFjZrBXqxJShe4F4UY.roa (hash: BxMxpzl8UVGfzxTIfCiqxK6y7sVAleuv4Iaf2OthD/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:97:f7:a4:be:92:ac:89:c6:39:9a:c7:81:66:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420ff38258629ed50e0b7564c233411581e1df0e
        Validity
            Not Before: Jul 24 09:01:20 2026 GMT
            Not After : Jul 25 09:01:20 2026 GMT
        Subject: CN=500337caef280310e6a0dcaa31eff5d31ad2de23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:24:62:fc:92:f3:cd:75:ae:51:42:2e:4d:
                    da:85:2f:c5:5b:f7:46:7e:a8:c6:bb:35:38:36:1f:
                    59:d0:13:16:4c:00:0a:42:17:09:ef:b8:fa:3c:cb:
                    1d:d2:a6:c4:a3:76:ad:3a:fe:d2:c6:5c:f8:9e:47:
                    61:75:65:33:9a:89:8a:5f:4f:4d:ce:8c:fb:f9:71:
                    31:6b:7f:4e:77:e2:91:61:8e:3a:1e:7b:37:bf:68:
                    ca:f9:73:41:4e:a6:5a:b6:57:19:44:5e:33:e6:e0:
                    c5:7e:c8:2f:01:21:7a:94:b3:37:41:f5:e6:a1:78:
                    6a:ec:59:8c:fd:53:76:c1:ab:6f:58:53:a9:fd:e5:
                    7a:4d:31:a3:8b:ed:f9:8f:49:9e:8f:9f:54:fc:80:
                    2c:2e:d3:21:10:29:ef:87:4b:60:ed:d7:e6:f6:90:
                    35:db:83:55:16:57:39:3d:00:32:c7:fa:ff:2f:1c:
                    9f:40:2c:3e:68:fa:ab:d0:5b:42:fb:e3:df:0d:bc:
                    6f:bf:b0:72:fe:67:59:71:ce:f3:6a:c8:e1:36:cf:
                    d8:81:75:24:86:e3:7d:6c:47:fa:de:dd:5a:72:6c:
                    ba:cb:db:a7:22:11:c7:06:e7:be:88:c2:96:07:0e:
                    ff:0f:e7:dd:c1:02:85:5f:4e:db:bb:09:54:12:14:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:03:37:CA:EF:28:03:10:E6:A0:DC:AA:31:EF:F5:D3:1A:D2:DE:23
            X509v3 Authority Key Identifier:
                keyid:42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:e7:9e:1e:8d:fd:c3:06:ea:e8:ca:f8:09:14:2c:ce:7d:
         69:3d:ab:99:6e:d9:c0:ef:71:2d:75:bf:40:de:16:c8:07:99:
         ab:4f:30:b9:aa:33:0c:3b:d4:0e:cf:59:e0:3d:8d:1a:31:38:
         af:66:31:9e:11:91:85:1c:9e:02:cb:2b:15:da:3c:b8:bf:cc:
         f8:2b:23:0c:fd:12:55:dc:3e:e5:1d:66:03:91:62:18:e3:9c:
         31:28:91:ec:6b:c0:03:59:01:24:7a:6a:8e:ef:ce:a7:07:c5:
         d2:ea:bd:7d:7b:2f:a2:b9:75:6d:9c:9f:0a:c2:e8:6d:0f:73:
         88:03:cf:5e:f1:b3:12:9a:42:99:a2:2b:2d:df:01:5a:37:10:
         ab:d3:e7:d7:31:62:50:67:c1:db:06:91:22:88:46:45:7c:91:
         31:16:6c:72:db:db:71:41:80:db:f4:ff:27:81:79:9d:95:0f:
         02:84:81:ad:9c:0e:f6:55:5e:39:b0:12:0e:9b:ed:e8:84:c0:
         84:42:32:bb:ff:e1:cf:1b:59:d6:ac:c1:a0:0d:37:ba:89:37:
         fc:70:0f:ec:3c:79:57:62:11:50:a4:57:e6:f4:2a:cd:16:fc:
         db:75:93:8f:97:76:65:cb:ce:c7:73:19:c8:97:68:6f:bc:1d:
         d7:f5:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:21:33 2026 by rpki-client