Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File:                     qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier:          +WPwAYyNP087g3/cIQgpMx2mnaq/Mh2mQY21bz6/f4M=
Subject key identifier:   4E:C8:E9:97:5F:2D:A1:0A:9B:4E:B8:AF:D0:89:BE:C8:0A:DD:F0:64
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer:       /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial:       019F927F7E3ADED087E79C6CBEEF2E4669FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number:          1552
Signing time:             Fri 24 Jul 2026 05:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:56 +0000
Files and hashes:         1: gCXrBFLxOw6kqjD16CuMsL6zWgE.roa (hash: v9RU6FPgMI/ClMLp92GPHhi/v35/JkjC+Xjyrv6zdv8=)
                          2: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
                          3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: u8fKKj1S9mZQQsda/zq1STUb/zK+LWcZYU/SVM3H/to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:7e:3a:de:d0:87:e7:9c:6c:be:ef:2e:46:69:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
        Validity
            Not Before: Jul 24 05:00:56 2026 GMT
            Not After : Jul 25 05:00:56 2026 GMT
        Subject: CN=4ec8e9975f2da10a9b4eb8afd089bec80addf064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:e3:9a:c9:d2:1e:bc:af:d6:f5:a9:ab:af:
                    2a:e8:48:c4:ed:97:9e:25:33:40:0b:f4:e2:45:d3:
                    b7:af:3a:e5:e9:b8:6c:2b:82:d5:54:1d:bb:55:a6:
                    50:75:c5:38:3f:9f:1f:af:77:61:96:f0:bb:c7:e6:
                    2d:45:03:06:a4:88:0a:0c:a0:72:b2:8c:57:36:f6:
                    14:f6:21:0d:7a:a3:46:f9:1d:00:d5:4f:6d:9e:dd:
                    1c:e0:8f:22:ab:a3:3c:e3:32:64:f0:e7:26:23:c5:
                    7f:13:ae:6e:53:95:1d:b8:3e:96:ee:4a:e6:2c:d4:
                    ec:ee:09:9c:e5:8e:07:6a:54:45:23:aa:a8:55:06:
                    3c:11:b5:36:96:d6:12:e7:67:62:08:c6:d5:a7:d4:
                    5c:b2:d8:f2:97:a0:73:51:e0:15:35:e5:b4:ef:05:
                    37:ae:7c:79:96:fd:ef:4e:57:2d:34:0f:59:f1:34:
                    34:6c:60:66:6b:e4:ea:4a:b1:c2:25:f4:6b:71:f3:
                    2f:e1:51:db:ba:dd:12:97:64:08:19:0b:36:cc:f3:
                    db:1f:13:2c:08:4c:13:c2:2f:d0:7b:00:56:c9:37:
                    f1:c2:af:57:11:40:6b:b2:99:04:fe:b1:0c:cd:c8:
                    6a:de:fd:6a:65:98:ec:79:45:d8:50:da:07:f7:7e:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C8:E9:97:5F:2D:A1:0A:9B:4E:B8:AF:D0:89:BE:C8:0A:DD:F0:64
            X509v3 Authority Key Identifier:
                keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f8:ed:3f:be:d5:40:a0:b8:61:41:ee:b8:9c:a5:d8:10:8e:
         dc:76:d5:c9:eb:e2:9b:32:2d:0f:9a:49:ae:01:90:b1:b2:7d:
         9d:ca:c0:40:19:91:2c:d2:ae:15:ae:ba:50:c0:5e:4b:e9:a2:
         dd:68:cc:d5:a3:10:f8:32:0f:0b:9a:cb:63:1e:31:63:23:83:
         a8:ec:14:d4:ad:a1:3a:54:b1:f3:2f:5c:d9:94:09:c8:73:61:
         6b:05:33:bd:86:14:bc:2c:f2:e5:c0:85:c5:e8:70:b5:cd:8c:
         8e:b5:f8:6f:60:3d:de:24:ea:fb:9f:86:03:92:56:56:57:7e:
         80:7c:d5:1b:39:ad:a3:e6:39:55:ad:4b:0a:33:90:aa:f4:13:
         8d:42:b9:6b:2e:76:13:ce:e9:91:d9:b0:78:04:26:b8:f4:87:
         fd:b6:e0:9c:6a:6c:0a:f9:91:80:48:59:eb:45:e0:47:bc:17:
         55:00:25:5b:fc:97:68:59:f2:90:82:eb:30:94:f5:88:8e:2e:
         6d:ff:98:81:d2:a6:02:66:1f:9b:d6:be:e2:f3:97:e8:62:5f:
         80:89:1c:b4:86:d2:50:e7:84:33:2c:03:fd:bf:1a:2f:16:86:
         9a:3f:00:cf:82:17:70:57:60:cd:99:ef:4a:03:5c:4f:c8:0d:
         78:1f:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:27 2026 by rpki-client