Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File:                     Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier:          mbVqp4Fbb9HVUuJKw83WmeIwRW14Vkf47vNIfU+x5Nc=
Subject key identifier:   A6:0D:8B:B0:BC:70:AA:D4:10:03:82:64:F9:B3:14:6F:20:6B:FB:98
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer:       /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial:       019F92ED3A75FA70ED51E0B16F4474F8DF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number:          19DE
Signing time:             Fri 24 Jul 2026 07:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:48 +0000
Files and hashes:         1: 9jc69vVsdWk6bDgFshwFaPkQiW4.roa (hash: vJY4PURpp9zlGE8vkcu9TTy5SV3ZXYUmKNEh03HjHbE=)
                          2: McRpwaQnqqZOGTag3hww5pMg2ZA.roa (hash: S2MuhIxLoEt0UYzfR1rcMJ/qgJF6eA4a0C2qNQuo9nk=)
                          3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: gtXMUdDVn6XefIPf2alkfytG8fKvU6EjXRQ4t3Nt9tQ=)
                          4: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (hash: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:3a:75:fa:70:ed:51:e0:b1:6f:44:74:f8:df:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
        Validity
            Not Before: Jul 24 07:00:48 2026 GMT
            Not After : Jul 25 07:00:48 2026 GMT
        Subject: CN=a60d8bb0bc70aad410038264f9b3146f206bfb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:5a:e3:3a:60:f1:97:e6:11:fa:6e:c3:c0:
                    7c:98:36:da:08:46:85:8f:ec:95:5c:da:d3:0a:d9:
                    22:ed:e7:d2:e7:e9:be:89:64:77:6c:ae:a4:13:9d:
                    b6:1d:8f:e7:32:56:c9:f9:d7:f7:44:8b:18:06:e4:
                    30:5d:eb:a5:f3:d2:52:06:16:e2:77:24:0d:21:cb:
                    d5:6e:f9:b8:1d:d5:a0:22:80:4e:68:ba:e1:ee:86:
                    41:63:7e:f2:63:c9:2c:7a:12:66:1d:ee:ad:7b:01:
                    39:5e:9d:51:cf:f3:45:1a:38:51:16:0e:f3:f5:2f:
                    b8:55:07:69:ea:53:24:f3:59:72:16:f9:00:6d:de:
                    80:25:d9:46:ac:4f:7a:26:96:77:64:8d:43:b8:bd:
                    bc:a2:81:62:a7:76:e2:e0:4b:e7:c8:4f:46:75:47:
                    60:94:54:ef:f6:da:29:2c:9f:38:38:47:be:4b:9c:
                    e2:a7:ba:e1:71:e2:b8:b4:b7:4a:40:ef:2c:5f:0d:
                    25:db:91:a3:84:4c:b5:ff:4f:fe:56:c3:14:88:3c:
                    73:2e:88:cb:64:b3:d7:ba:21:a8:dc:93:b5:4f:d3:
                    03:93:48:4a:40:3f:8d:cf:9b:ac:15:2a:5b:4c:90:
                    e2:34:57:ee:6a:32:49:ad:1e:47:b1:7f:7c:2b:13:
                    1c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:8B:B0:BC:70:AA:D4:10:03:82:64:F9:B3:14:6F:20:6B:FB:98
            X509v3 Authority Key Identifier:
                keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6a:3d:9e:ce:05:a2:26:84:56:f0:13:8d:19:5c:d9:45:8e:
         aa:1d:ca:dc:a6:d7:ef:18:5b:c6:64:29:57:b6:ae:1d:09:fc:
         e4:4a:f7:39:39:2a:1f:02:44:23:33:66:83:8c:99:f2:63:e0:
         e6:71:c2:34:1e:59:3f:1d:fc:ac:4d:2a:c2:be:44:1e:9b:8d:
         93:6e:a1:ce:49:24:d9:17:cf:1b:45:08:b6:78:27:71:08:76:
         59:c0:7e:9f:be:52:e5:1b:e4:06:ef:5c:e8:d5:1c:8f:1e:ec:
         8a:00:75:8f:78:82:49:58:8c:21:08:c9:b7:6f:bf:4f:ff:0e:
         a5:74:86:6f:83:ef:b5:22:4e:38:cd:70:95:fc:cc:f9:2a:10:
         95:4b:f4:43:70:22:4b:3a:ee:42:95:01:b6:cd:47:88:4b:f1:
         e0:83:45:94:8d:78:2d:f7:6c:e8:1c:5a:64:7c:75:23:59:be:
         ad:fe:f5:7f:53:2f:eb:bc:5d:9f:61:da:8d:cf:f1:96:0d:ae:
         71:0d:a0:4f:72:5f:c1:fa:fd:a5:b5:cb:cf:48:97:21:9f:80:
         f4:e1:85:7d:70:65:81:2f:5d:d6:b1:37:c6:39:33:db:e0:96:
         b2:d1:b9:45:3f:d0:cf:02:17:a4:15:27:a9:99:e9:aa:6a:85:
         f8:42:57:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7Tp1+nDtUeCxb0R0+N9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk
ZDFiZmIwHhcNMjYwNzI0MDcwMDQ4WhcNMjYwNzI1MDcwMDQ4WjAzMTEwLwYDVQQD
EyhhNjBkOGJiMGJjNzBhYWQ0MTAwMzgyNjRmOWIzMTQ2ZjIwNmJmYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnJa4zpg8ZfmEfpuw8B8mDbaCEaF
j+yVXNrTCtki7efS5+m+iWR3bK6kE522HY/nMlbJ+df3RIsYBuQwXeul89JSBhbi
dyQNIcvVbvm4HdWgIoBOaLrh7oZBY37yY8ksehJmHe6tewE5Xp1Rz/NFGjhRFg7z
9S+4VQdp6lMk81lyFvkAbd6AJdlGrE96JpZ3ZI1DuL28ooFip3bi4EvnyE9GdUdg
lFTv9topLJ84OEe+S5zip7rhceK4tLdKQO8sXw0l25GjhEy1/0/+VsMUiDxzLojL
ZLPXuiGo3JO1T9MDk0hKQD+Nz5usFSpbTJDiNFfuajJJrR5HsX98KxMc0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYNi7C8cKrUEAOCZPmzFG8ga/uYMB8GA1UdIwQY
MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt
MzM5ODBjMDNmMDhlLzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl
LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmo9ns4F
oiaEVvATjRlc2UWOqh3K3KbX7xhbxmQpV7auHQn85Er3OTkqHwJEIzNmg4yZ8mPg
5nHCNB5ZPx38rE0qwr5EHpuNk26hzkkk2RfPG0UItngncQh2WcB+n75S5RvkBu9c
6NUcjx7sigB1j3iCSViMIQjJt2+/T/8OpXSGb4PvtSJOOM1wlfzM+SoQlUv0Q3Ai
SzruQpUBts1HiEvx4INFlI14Lfds6BxaZHx1I1m+rf71f1Mv67xdn2Hajc/xlg2u
cQ2gT3Jfwfr9pbXLz0iXIZ+A9OGFfXBlgS9d1rE3xjkz2+CWstG5RT/QzwIXpBUn
qZnpqmqF+EJX+Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:30 2026 by rpki-client