Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File:                     cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier:          Q+/vQ+BrwyKJJuzK1ugGoxF1RJs/lsVgCFzr7AdvtB4=
Subject key identifier:   8B:18:B0:A3:E3:35:3F:15:54:52:11:38:52:9F:28:A5:C6:6C:CB:F3
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       019F935AB64CD80C4AF2162A50D93C2D49FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number:          135F
Signing time:             Fri 24 Jul 2026 09:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:23 +0000
Files and hashes:         1: 1-Jdb9MOi2OCF-p6jh4Zq96r-xPA.roa (hash: 62VCCuvgTiReatvA5wQmGjPCyOeu1mdSWJmbcsT6fPM=)
                          2: AK4y5Yo9ayCfpMH_MDJ76y33uGo.roa (hash: fHKlhzEm7Am6zseRdyfLR7iKSnBY8Ngvrjg8FNEEqok=)
                          3: WY6pvsgJR7LRmk_zcT_H6lPiyNM.roa (hash: s9khrceBdwiskxC2l1lsQTmPFSMRENlWQQ8ETb/4LxA=)
                          4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: CpQ0Hgo7HIR6upvYN3MWaywNY7+aan0qtGO4hiHsD/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:b6:4c:d8:0c:4a:f2:16:2a:50:d9:3c:2d:49:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: Jul 24 09:00:23 2026 GMT
            Not After : Jul 25 09:00:23 2026 GMT
        Subject: CN=8b18b0a3e3353f1554521138529f28a5c66ccbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:f7:15:b7:c6:67:a5:62:da:98:2a:ef:35:
                    79:82:5f:6d:91:08:ee:84:7e:5a:93:62:84:0f:64:
                    09:8a:44:5b:0b:e6:86:8d:29:df:9d:fc:3e:e4:bb:
                    7b:fe:a0:1c:b2:be:76:de:41:e0:35:16:92:5d:e0:
                    69:b5:bc:e8:52:17:3c:91:47:6b:bf:c4:45:77:af:
                    93:37:f4:3b:f7:d4:e4:76:20:5a:40:ef:8c:29:55:
                    c5:33:5d:8e:22:fb:c8:9b:54:42:08:5c:9c:26:44:
                    2b:45:5b:02:b1:56:5a:20:c0:4d:ee:56:88:dd:aa:
                    a7:0c:d8:1d:cd:df:a8:73:d8:22:a4:e8:bc:46:df:
                    12:71:78:52:27:f8:df:cc:c0:c3:68:a5:58:a9:1a:
                    0e:57:29:39:76:c1:14:d4:aa:21:6e:0b:47:66:1a:
                    cf:28:7b:f8:b9:a8:26:3b:c9:87:d6:56:59:2d:8b:
                    72:6f:34:0d:a2:67:55:b4:79:a9:25:03:28:d7:a7:
                    8e:07:2a:ae:84:94:85:c0:0b:a5:6f:40:96:cd:70:
                    b0:52:19:e0:0e:95:2f:01:5d:e7:a8:ea:be:c6:5b:
                    d0:f8:c7:04:13:a0:39:25:53:b7:ce:cc:47:90:81:
                    ae:78:33:63:1a:87:a3:9e:fe:73:0f:70:9b:41:ec:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:18:B0:A3:E3:35:3F:15:54:52:11:38:52:9F:28:A5:C6:6C:CB:F3
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2b:e5:52:c5:26:7a:b4:b9:df:9d:7d:71:99:3f:3b:a4:eb:
         ea:b4:9e:fd:e9:0b:cf:e0:47:c3:ca:59:2a:19:af:e8:fc:a9:
         2c:25:e8:ff:e3:23:92:2f:2b:9f:09:e7:a9:81:cc:bc:25:b6:
         85:22:3e:23:f2:3e:6e:b5:64:a4:d3:6b:fa:ef:65:f4:c1:0b:
         f0:24:b0:d7:39:6c:58:1f:9e:57:02:b6:4d:a8:59:20:01:7c:
         d9:db:bc:40:54:f5:bf:69:6f:3e:93:af:ba:a5:c7:b6:24:71:
         02:84:9c:c6:c3:16:e9:20:0b:1e:40:3d:1f:74:a1:8d:ec:45:
         b1:36:72:5d:c1:5d:06:c7:94:aa:82:c9:51:4a:8c:c9:49:52:
         c1:80:46:fe:f3:cf:ed:11:a5:07:81:60:92:83:31:90:f5:11:
         41:af:59:ca:89:f3:99:96:54:a0:62:41:1f:5f:da:81:fa:2e:
         3f:c1:11:43:78:e2:91:aa:b2:df:8b:e3:de:a8:6b:6b:b6:a0:
         7a:9e:d5:e5:2d:56:2f:ef:88:aa:6f:35:ee:73:64:98:80:42:
         db:d0:fa:c7:eb:c4:47:c3:4f:73:d6:c1:df:4a:c5:25:14:88:
         6b:3f:85:7d:34:75:88:76:7c:c2:2c:91:c2:74:54:d8:ce:27:
         2e:5c:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:20 2026 by rpki-client