Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File:                     TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier:          T5rwZnC+XZ1kPSl3ltN+jQ54HwrGoiEgPe9hWvMwrFE=
Subject key identifier:   56:26:43:34:16:A0:F6:08:16:3F:04:D7:4E:2A:6A:6C:50:26:7B:C5
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer:       /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial:       019F927F74B66EA2B4ED4777E8C0B12468AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 05:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:54 +0000
Files and hashes:         1: AHrBc9IiI5rzT7NjkubAdT8SUZY.roa (hash: sAnmMyrh/QNIQf8VgWnCRno2TJ9xZybX3KXlbr+CHB4=)
                          2: DrETaOYFwhHteuK_cjZBqrhBn3E.roa (hash: oyhA6G3HiupfNb3jMCFjOduY9kIjz5cSnNY6U8ENZ7Q=)
                          3: FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa (hash: dq1d/UwLiz9XXEmCgqOT7UCJTR2SgOpkulgHHbWFy0Y=)
                          4: RGZDs7FDHPZQveBdXaR6_RleIaI.roa (hash: f9EpD71aD4s84pzobb8iZVB6jiX1m2KzVjJwHRvpYCg=)
                          5: SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa (hash: R6bwiZJPSxjQW8oQUMZiQejN/ZuXwmuCXceRWrrSn8c=)
                          6: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: Iasqh/5dsZOq8oidD8JMr2p0vZUwpTkoNoUVuYPQ/o0=)
                          7: TpE0DuP8Mw6CTXYw4ySwlEKf3f8.roa (hash: IATIDCMEa6O9YiZhEYOaf75cWoMv6GvzQS0vn1Zk4es=)
                          8: jXuAqsPHXvSfZGYgxhNksOYSF5U.roa (hash: yaNveVmpBlc0ed50geLDpHfxvb9X4WQOsQ1rbbUocCI=)
                          9: nYp3_cwZdOz_BuJRO8waybMbYvE.roa (hash: WJbnF4/GV3sKMU67v+tU/MzKdfAphkSSw1EOxJcBQnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:74:b6:6e:a2:b4:ed:47:77:e8:c0:b1:24:68:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
        Validity
            Not Before: Jul 24 05:00:54 2026 GMT
            Not After : Jul 25 05:00:54 2026 GMT
        Subject: CN=5626433416a0f608163f04d74e2a6a6c50267bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:5e:91:32:c6:48:b1:84:b3:aa:54:b0:f5:
                    d9:f1:40:da:c4:30:fd:f0:e6:e7:11:ed:60:8a:84:
                    0d:d6:34:91:b0:1e:df:5b:68:d2:88:f3:3a:74:c7:
                    76:ed:0c:e1:fb:9f:b2:90:d4:e5:ca:95:2d:a1:8b:
                    7c:dc:c4:0f:23:e2:77:67:50:50:7c:d9:60:b9:af:
                    8a:d3:11:fb:24:84:b6:17:b3:4c:4e:84:90:bf:6f:
                    a9:aa:7b:f7:91:f2:2e:f2:88:7d:f1:09:bd:35:83:
                    1f:b9:61:ed:aa:4c:9e:80:76:93:bf:6c:34:71:40:
                    51:e1:bd:ca:ad:c0:9b:5f:61:92:f5:07:fd:27:45:
                    30:f9:13:98:e5:65:00:fe:37:56:dc:91:98:9c:cf:
                    24:ec:92:f7:c7:8b:8e:95:40:fd:63:e8:43:77:5a:
                    70:3a:4a:3d:90:f4:dc:a8:45:d5:aa:dc:d2:9e:21:
                    59:e2:e3:9d:e6:12:54:ad:e8:d7:b1:92:b1:e7:09:
                    16:1a:75:b6:73:94:56:37:93:45:a7:b9:29:ab:8b:
                    15:3b:d0:bb:c4:e2:8a:15:8a:11:03:33:be:f9:7c:
                    5f:09:09:43:36:c1:24:06:cc:48:90:36:d4:61:73:
                    95:a8:1d:20:1e:db:2d:ef:af:43:13:91:ac:c9:d1:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:26:43:34:16:A0:F6:08:16:3F:04:D7:4E:2A:6A:6C:50:26:7B:C5
            X509v3 Authority Key Identifier:
                keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:26:05:c4:df:c1:ed:09:f9:ae:36:44:11:b6:13:ca:a6:
         6f:64:ee:f7:15:69:69:09:f1:f8:ae:92:71:fc:02:61:da:29:
         aa:e9:21:e5:6b:ef:1a:de:75:e3:a1:4e:a0:72:c0:ce:cf:93:
         a2:4b:3b:99:75:42:30:3c:ea:e6:23:46:88:10:d7:1c:a6:f7:
         d3:5b:6d:5f:ef:cb:04:c7:6b:1c:62:3a:ea:00:dc:46:d2:5a:
         8c:13:99:1c:49:10:e1:54:0f:6b:5b:39:24:ab:e8:ca:da:13:
         3b:bc:f9:f6:aa:27:78:f5:76:c4:03:06:da:2d:bd:3f:95:8c:
         a5:2c:98:4a:31:e6:a3:5d:d7:92:07:8c:28:5f:50:13:bf:3a:
         20:f6:8a:cc:8d:50:e5:12:09:ae:23:73:15:ae:4b:d0:58:1c:
         40:b7:8f:e4:bd:20:d1:b7:9d:89:12:ec:d0:73:41:71:76:f9:
         2a:0f:1c:e7:1e:09:22:72:ec:7f:cc:4e:30:cd:ab:6f:f7:cb:
         40:b2:13:e9:51:62:86:ae:80:c8:8d:33:03:07:42:ad:d4:4a:
         10:6d:17:04:20:eb:80:d2:9b:c2:cf:23:f3:ad:c4:2a:9a:4e:
         52:ac:a6:d3:5b:8a:e0:0f:b1:94:6b:8b:d1:ea:e5:30:fb:bd:
         0a:dc:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:22:34 2026 by rpki-client