Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          kjnGZn0axqYFl5cEQm8YptEj2iqB//waEhDcrfobHvg=
Subject key identifier:   C4:74:17:48:DE:60:68:6E:E4:BD:EC:7D:5F:2A:66:8C:00:14:94:D5
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       019F946DE32698EE559B7FF70C0DD4F3AE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 14:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:56 +0000
Files and hashes:         1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
                          2: 6wrwVwIOmyHRFv2kHnVse0hIMz0.roa (hash: 3Bl4eyRcujw6eiEUMKOOuOVx73Mu069CKt56gjYDvno=)
                          3: MaMuRhJpZN3sUs2ReczUrxtPqog.roa (hash: CIDmAVgYtghMXGXHEdC7pvKkJAeXg2JMbpBDZ4AJ2O8=)
                          4: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: yyBtTlcln+KuDJDXWDuvOWV2f3FQq2ABgus+/Zkt+Vk=)
                          5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:e3:26:98:ee:55:9b:7f:f7:0c:0d:d4:f3:ae:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Jul 24 14:00:56 2026 GMT
            Not After : Jul 25 14:00:56 2026 GMT
        Subject: CN=c4741748de60686ee4bdec7d5f2a668c001494d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:d6:b2:19:6e:a9:b6:40:7c:93:38:2b:a7:
                    1b:0e:f5:a7:e9:a1:69:70:21:77:d2:05:1b:54:95:
                    53:dd:96:1a:5b:82:c3:a1:28:f8:7c:b4:13:1d:28:
                    22:3f:e9:13:95:fe:a0:0f:88:25:e0:94:a2:98:d2:
                    3f:59:84:45:ab:bd:0b:2c:6d:8e:ff:2b:34:6b:40:
                    8d:ad:e9:1e:ed:f0:61:8d:08:81:27:2e:5a:8f:65:
                    b6:65:39:a5:13:9a:f1:41:78:84:4a:6b:87:af:46:
                    ac:25:79:04:ac:1a:84:b9:06:86:28:69:cc:78:86:
                    69:0f:e2:bd:e4:f8:03:8f:d6:50:a3:bb:67:fe:9b:
                    88:ba:9a:67:ab:6d:0b:70:31:df:d7:5b:1a:1c:fd:
                    4f:fc:6e:17:f0:98:4d:df:ca:e5:f9:3d:ab:ec:a7:
                    83:cc:01:61:b3:b7:50:59:c5:a3:9e:fd:b5:eb:b5:
                    6c:2b:04:48:0e:73:7e:bb:be:8f:fe:b1:1b:13:22:
                    28:09:90:bf:24:91:ac:37:9d:51:75:51:f7:05:1b:
                    7d:12:f1:cf:9b:17:9c:5b:53:84:6c:00:ec:1e:2c:
                    56:f2:7a:92:3a:16:45:3b:1a:3f:09:b9:2b:c5:e9:
                    89:b2:5c:3e:b8:bb:78:3b:fe:02:0d:f2:a3:37:17:
                    6e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:17:48:DE:60:68:6E:E4:BD:EC:7D:5F:2A:66:8C:00:14:94:D5
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c3:cb:44:f4:26:40:14:95:84:ee:e0:6e:57:a0:79:b7:0d:
         70:3b:76:59:e8:13:86:3a:e0:01:4f:09:5c:c9:21:79:35:79:
         49:b2:76:e2:76:dc:e4:0a:d3:2e:94:13:45:7b:fb:dd:71:5c:
         75:10:b2:14:a0:89:84:d0:85:9f:a0:c4:99:48:8e:3d:9d:10:
         d3:2d:1c:68:f8:07:4f:09:9e:53:ba:41:08:c6:d5:c1:80:b9:
         ca:8b:07:4b:75:e1:38:5f:cf:32:c7:89:2a:57:73:ec:a9:20:
         88:5d:5c:a2:57:5d:44:5a:52:08:39:10:2d:fe:9a:48:1d:f3:
         cc:9d:ad:51:06:a1:15:56:35:30:11:d4:00:99:06:fc:78:55:
         9a:c4:29:32:c9:75:1f:a3:e7:77:1f:44:47:aa:81:97:06:50:
         90:89:4f:a6:ae:8e:de:a8:d4:63:de:30:19:96:b6:fa:65:3b:
         3e:a7:e1:ca:d2:44:9a:bc:08:0f:61:84:58:b3:13:de:2f:9a:
         6d:9e:97:30:73:c1:86:19:6c:95:d1:1d:b1:15:0f:d5:6b:e9:
         1f:56:ee:c2:2a:4f:1b:6b:90:cc:47:52:4d:5a:ca:ea:ff:55:
         fe:2b:01:6b:b1:79:58:d8:93:b1:ca:e4:5a:f6:ad:99:71:ba:
         20:da:1c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:43 2026 by rpki-client