Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File:                     QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier:          5wqvkscQ1K+aeBfaYfJ7BE1SBx3wdiHKbo5p97+DbGA=
Subject key identifier:   57:FE:EF:6E:3D:03:31:72:14:07:0F:19:2B:0A:8B:B0:45:54:C3:09
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer:       /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial:       019F916C52B5D4F1AEBA9EF317D1F8769486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number:          175B
Signing time:             Fri 24 Jul 2026 00:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:22 +0000
Files and hashes:         1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
                          2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: 5OUTFl1edkH44Uiu0p/hEiiOu30cuNdT3wRN1OPdoLE=)
                          3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
                          4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:52:b5:d4:f1:ae:ba:9e:f3:17:d1:f8:76:94:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
        Validity
            Not Before: Jul 24 00:00:22 2026 GMT
            Not After : Jul 25 00:00:22 2026 GMT
        Subject: CN=57feef6e3d03317214070f192b0a8bb04554c309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:2c:62:8d:c0:8c:bf:34:89:96:fd:ee:84:
                    14:8f:4c:fe:1c:28:6a:4d:ac:b4:4e:ab:81:0f:f0:
                    cb:62:6f:07:aa:33:19:c5:58:26:56:a1:6a:11:d0:
                    f6:4d:d4:2d:de:72:77:3f:b0:fd:2b:ae:ae:10:a0:
                    46:06:8b:0b:d5:e4:c7:60:61:ec:be:e1:b7:e9:f5:
                    f0:53:e6:95:6d:d1:31:c8:a3:71:27:d5:74:10:65:
                    48:ab:15:1c:bc:0b:7f:f1:92:7c:2b:40:b1:da:22:
                    5e:11:24:7e:4e:3b:fb:0d:f9:b2:20:6b:63:68:7d:
                    f5:56:56:1f:d9:eb:07:5b:fd:1a:20:22:c4:e1:2e:
                    94:33:5e:4b:d5:3a:3d:d2:cd:fd:02:67:46:fd:34:
                    ff:71:00:aa:6a:60:57:5c:7f:57:1f:d9:58:44:83:
                    b5:79:ba:52:b8:ab:f7:86:a8:91:fd:89:bb:fd:15:
                    82:f1:af:ba:13:eb:33:dd:5b:29:9f:85:71:15:d4:
                    38:a3:4f:4b:c3:65:b5:b6:5d:ec:4e:fb:52:64:72:
                    ea:65:5e:87:08:2e:09:4a:c0:06:c3:71:bf:81:d2:
                    23:89:01:98:22:80:c0:8f:2e:31:3b:91:62:f0:e9:
                    1b:68:b3:a1:5a:d5:9a:cc:f8:7d:39:6f:bf:db:f2:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FE:EF:6E:3D:03:31:72:14:07:0F:19:2B:0A:8B:B0:45:54:C3:09
            X509v3 Authority Key Identifier:
                keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a6:d7:ff:b7:19:60:41:db:41:ab:a7:c1:16:79:ea:eb:5b:
         98:7c:d9:93:83:f6:b2:78:cc:b4:56:86:99:64:39:ce:bf:db:
         1d:a7:b5:3b:e4:07:31:5c:3c:b8:8a:a2:d1:7c:c8:11:09:43:
         59:50:fa:00:f2:77:c6:cc:5d:de:eb:18:aa:ac:bb:1b:44:80:
         47:34:40:99:e2:e6:9d:3e:b4:a5:d8:9c:38:d3:04:91:fe:c3:
         0c:ec:cc:2b:63:e1:62:b7:a9:b9:bf:92:fa:9b:f1:d7:7a:88:
         4d:ab:54:0f:98:fa:e4:72:1d:c7:54:db:0c:a0:5f:c6:7f:00:
         6a:6a:a0:56:eb:5f:bd:e1:0f:27:9d:84:74:a9:c5:6d:f3:5d:
         4e:ef:75:21:79:14:f0:e8:60:c4:41:53:e7:33:b4:41:ff:5b:
         65:86:b4:71:9e:1a:93:11:96:ae:40:8d:13:15:20:57:19:78:
         f6:7b:9a:28:a9:c3:86:4e:b0:5d:f4:bc:c6:f7:f1:76:b2:7e:
         48:37:cc:09:a6:b1:43:6a:9a:dc:d2:cc:0f:06:fd:0c:4d:d5:
         3f:52:c1:2f:b4:c7:06:c2:d2:fc:3c:7b:92:fb:2a:c9:db:23:
         0b:96:cd:fb:17:0a:e3:9b:53:f4:4d:7e:35:52:b0:46:a9:9b:
         a9:00:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:21 2026 by rpki-client