Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          3yiS9iE7PejleHjm99GYQV+eLM2zdPhsoyUWnFby680=
Subject key identifier:   A7:D5:CE:77:BC:82:68:7D:D3:9D:FF:F5:61:50:B5:64:07:56:9F:D5
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       019F9323FE5F25F7FC7BB309465FC57ED175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          19DE
Signing time:             Fri 24 Jul 2026 08:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:37 +0000
Files and hashes:         1: 7qTepYATqKVXyyn2qZtoxxFTcjA.roa (hash: zj/P1u6iWoahM98pNTDlWucnNtLUswY/H6W+OVzgPg0=)
                          2: CxTPA5mUFSfM5zzjG_pBiZdndNM.roa (hash: +LuWTLTvb4XLHwaIc7XtaBKu05lC9tlVeMmuHJRwLok=)
                          3: FmqdkGuPwkHtcktyjB7p6qiaaA0.roa (hash: N+eixnx0ef9WfVBXPd6Nijvy/VigzdNIgybnerIGWxw=)
                          4: J037jcIbssptRuiF7QThwckkgYA.roa (hash: VzXGhtcRmbTMvgupmIWbk2ydVSdHNyFjivXfWRp24D8=)
                          5: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: R1bP9DE4yyIPyvobaKkwuIeSg5DGeJwi5X5ZxvXiK+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:fe:5f:25:f7:fc:7b:b3:09:46:5f:c5:7e:d1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Jul 24 08:00:37 2026 GMT
            Not After : Jul 25 08:00:37 2026 GMT
        Subject: CN=a7d5ce77bc82687dd39dfff56150b56407569fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:38:15:fb:4c:28:0b:12:da:07:f2:b5:8a:
                    4a:83:20:7b:64:8d:1e:4a:87:d0:85:cc:e6:da:4e:
                    7a:ff:65:13:97:8a:b5:32:62:9c:5c:b9:c6:bc:c5:
                    6b:35:79:eb:bb:55:2c:7c:8b:6f:79:67:ea:d4:b7:
                    76:ae:ae:e1:15:2b:00:e1:58:ce:3b:f9:b0:9c:45:
                    00:8e:0a:7a:f7:82:7d:74:e8:72:d0:4c:f7:4c:cd:
                    f6:88:36:f6:4b:02:06:00:44:86:6d:14:ad:7d:25:
                    3e:e8:a1:39:f2:51:d6:4c:a4:f0:68:3a:0f:82:ea:
                    88:aa:ef:b9:2c:28:e6:e9:bd:73:4b:10:d0:ba:b1:
                    63:ac:93:79:7e:64:46:e1:fd:b8:2b:4d:d1:17:fa:
                    39:56:78:11:e4:cf:b0:45:1e:91:15:b7:8a:89:20:
                    ab:1e:49:82:30:9c:5b:a4:37:f3:1d:b2:c6:c9:e4:
                    19:55:9c:fe:68:c4:75:0f:79:15:50:ed:3f:b4:00:
                    81:cc:7c:11:14:a6:bb:7b:7e:af:1d:c1:31:56:67:
                    75:54:e1:80:de:3e:30:ec:c1:ad:3d:67:1d:61:14:
                    12:21:07:20:34:c5:d9:91:95:6d:d2:23:39:82:82:
                    9a:c2:9e:3b:15:5f:13:4d:01:0e:87:d7:ac:eb:66:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D5:CE:77:BC:82:68:7D:D3:9D:FF:F5:61:50:B5:64:07:56:9F:D5
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:22:ad:17:13:65:1a:7d:59:5b:f3:1a:e9:fc:6f:61:62:f6:
         ed:32:82:0c:04:bf:3a:1a:a2:c4:25:73:63:48:bf:93:a7:7f:
         b8:c5:47:b9:a1:91:bd:3d:ed:43:67:8c:91:c7:83:ca:6a:94:
         48:a5:10:9a:7a:0e:cd:ac:52:9e:9a:52:e6:d8:84:22:66:81:
         26:eb:70:65:8a:a1:b9:dc:80:6a:b3:b8:6f:0e:32:24:32:03:
         c7:b1:9f:04:1c:57:73:ed:28:e4:09:c6:83:ef:fb:74:1a:c0:
         1e:97:a5:fb:12:75:e6:86:95:32:e2:e9:73:38:ed:83:34:2e:
         aa:74:07:dd:cc:3c:71:30:7a:9f:d6:6e:36:e4:bc:60:67:c5:
         08:7e:a5:f4:5f:88:f2:d9:43:bd:66:ac:10:fb:34:77:1c:48:
         f7:12:b4:74:49:4b:9d:38:8e:fc:f1:4a:a6:a0:93:7f:6b:7e:
         14:7b:56:28:95:9a:28:70:72:04:23:6a:e6:51:95:1a:a6:f5:
         1e:b5:11:16:40:e4:2d:62:90:c6:f3:6c:30:f6:7b:44:83:38:
         bf:6e:52:da:8f:d5:14:0b:c3:e9:59:92:09:8c:e5:2b:d4:cd:
         4e:6b:e7:8c:17:1f:a9:c7:6f:7c:2c:52:50:36:9f:0b:6e:86:
         07:39:e4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:32 2026 by rpki-client