Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File:                     qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier:          pBLBMBzky8qTlApVEZ/7bKDoaryHnbCfPQISIIzlBQA=
Subject key identifier:   64:71:78:0B:85:31:22:9E:BE:13:00:B2:88:0D:1C:1C:A4:53:2C:F3
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer:       /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial:       019F9323E9D01F2F7CB463E24DB504256740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number:          1969
Signing time:             Fri 24 Jul 2026 08:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:32 +0000
Files and hashes:         1: HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa (hash: nQkhhNw6S8PZEQHevPsGMLpoMsMwEk7juRVeNkbr0JM=)
                          2: jn0JJn7gaoXIjIZG9D82qZbLreU.roa (hash: LSPvb66GbUguyzdJ2arG3PXVq5iyU2uqoZTdf33Egv0=)
                          3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: Wgqn8yRRofKroJzMDTbRZ2mN9B22ooSEmW5SGERxRj8=)
                          4: wA3yzq_z75jJrcxF21_yaXTLA1E.roa (hash: iBqEBSf11enOfh3VlmmIO8pdDcGFw1PdUgNRwZ2N9r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:e9:d0:1f:2f:7c:b4:63:e2:4d:b5:04:25:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
        Validity
            Not Before: Jul 24 08:00:32 2026 GMT
            Not After : Jul 25 08:00:32 2026 GMT
        Subject: CN=6471780b8531229ebe1300b2880d1c1ca4532cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:78:29:82:ca:b8:69:80:c6:2b:35:14:11:f4:
                    96:e2:b9:c0:99:17:03:7b:6a:23:bc:ab:06:d3:8e:
                    71:97:ea:f0:f3:2a:29:8c:ad:73:54:ef:ca:43:58:
                    db:40:67:39:58:1c:14:e9:8d:d3:24:4d:ff:10:e1:
                    dc:08:9a:ba:44:2c:75:d2:5d:93:16:70:70:eb:0a:
                    ae:b9:2a:8e:20:a8:c4:ce:27:86:f4:03:59:f5:47:
                    bd:08:2e:c5:72:fd:78:b2:87:5b:eb:f8:57:b7:04:
                    03:b6:aa:ab:b8:13:fb:bf:5d:4e:56:bf:86:14:90:
                    f7:0b:24:50:7f:19:89:b8:ee:19:78:24:7e:98:19:
                    b2:4d:8d:bb:d9:36:cd:1c:8b:a7:31:23:2b:56:48:
                    a4:56:82:30:28:df:ce:3a:97:c1:e9:a3:fc:6e:e1:
                    50:86:19:2c:19:e0:30:67:db:07:c0:a4:0d:eb:98:
                    62:b2:89:dd:31:23:08:c5:92:07:6c:b4:2d:8d:a2:
                    73:ac:7f:7f:57:53:50:a5:af:e1:26:07:b7:cb:e6:
                    ee:7d:48:ad:c3:47:19:6b:e3:be:b6:6b:08:8c:04:
                    68:01:b0:bd:61:fb:51:70:1f:c8:f1:9d:1d:37:8c:
                    c5:00:55:f9:be:6a:76:34:0d:b6:f9:7b:f3:9a:c2:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:71:78:0B:85:31:22:9E:BE:13:00:B2:88:0D:1C:1C:A4:53:2C:F3
            X509v3 Authority Key Identifier:
                keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8b:5c:cd:2d:02:fd:36:89:0d:b3:a4:48:b0:7a:85:f0:0a:
         82:5f:41:e8:4d:e3:38:84:0b:e6:84:ec:ac:2a:6b:23:11:ca:
         d1:30:68:75:e0:6e:c9:d1:e2:f2:d9:ba:dc:9a:36:c6:20:f3:
         db:d2:26:bf:d7:74:2f:78:bb:2d:bb:12:c3:08:31:c8:0f:58:
         ca:52:05:98:c4:29:7e:ee:68:e7:aa:2f:a6:6b:45:66:07:66:
         05:95:79:6a:19:36:51:ea:c1:97:72:27:7f:24:ed:b7:a6:12:
         94:8c:47:36:a9:ec:6a:7d:d5:af:bb:3b:28:a5:79:82:6d:28:
         1d:ec:f8:9b:0c:2c:61:ea:8f:d0:13:93:b7:54:b9:26:e5:7c:
         3c:82:a9:8a:85:91:52:44:92:e2:09:c4:fc:b4:80:eb:ee:d5:
         cc:35:9e:f0:03:73:e6:61:55:12:48:50:c0:aa:5d:52:a6:5a:
         66:c8:d4:04:43:67:10:17:e5:6c:2d:ca:98:93:aa:cd:3f:b9:
         ac:2c:58:34:6f:03:b5:bb:fa:af:03:67:66:0b:a6:a3:15:9c:
         be:ae:f0:fe:aa:e9:d1:37:2c:3a:66:13:65:58:c9:fd:90:71:
         ae:ca:cf:58:be:36:ce:90:fb:fe:0d:af:a1:a1:00:d9:7e:41:
         25:c4:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:57 2026 by rpki-client