Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File:                     qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier:          +KzbllthH1GmrWTuAn5p9/colQM4VJR1qGpmaevTYdE=
Subject key identifier:   3A:B3:E3:89:E0:22:7B:65:C8:5F:EA:E7:E5:66:6B:AB:54:03:0A:E7
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer:       /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial:       019F94DC405FD34D325180757121660ACFB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number:          047D
Signing time:             Fri 24 Jul 2026 16:01:29 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:29 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:29 +0000
Files and hashes:         1: LzYZHC-rjJGbruYM23VscVWulpM.roa (hash: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns=)
                          2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: UMGk2L/rLF+hOtwS0kZ2psYqxMnbGqvXFZuLf0IUgAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:40:5f:d3:4d:32:51:80:75:71:21:66:0a:cf:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
        Validity
            Not Before: Jul 24 16:01:29 2026 GMT
            Not After : Jul 25 16:01:29 2026 GMT
        Subject: CN=3ab3e389e0227b65c85feae7e5666bab54030ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:40:45:34:1c:ef:21:c8:61:e8:88:23:8c:
                    bd:87:14:92:77:39:b6:f8:94:1c:01:5c:49:c5:7e:
                    dd:ee:72:08:07:2d:ff:7d:0d:e4:f8:dc:a6:da:07:
                    83:54:91:d9:64:cf:2b:c2:25:67:6c:b1:fc:08:3b:
                    03:a3:24:6f:ed:7e:c9:44:b7:5d:e4:e8:8c:bb:2e:
                    ea:37:02:83:a7:53:bb:97:2a:f3:8b:b0:60:00:2f:
                    23:b2:b6:fe:74:6e:4d:82:ae:07:5d:eb:1f:22:61:
                    14:01:6c:b3:e9:cc:94:37:b7:97:87:4b:b1:a0:0e:
                    f7:7e:5e:75:40:50:fe:36:93:72:fb:61:af:a5:e6:
                    26:69:16:cd:ed:19:56:14:7b:ca:c6:71:a0:5f:4b:
                    78:9e:04:dc:ed:bb:df:66:7f:6e:28:8f:58:7b:e7:
                    cd:94:60:ec:3c:67:bd:8f:68:fc:e1:a7:c5:25:f3:
                    93:9a:07:8c:2e:5b:b4:0b:46:5a:7e:90:01:34:e2:
                    a9:78:f6:72:bc:c6:cc:ed:16:f4:a6:90:fa:50:57:
                    99:01:c1:0c:ed:ee:29:2a:22:c6:5d:ab:73:38:eb:
                    04:25:30:bf:59:5c:9b:12:4d:3d:76:df:2a:79:f3:
                    37:52:ac:87:54:42:1e:91:11:13:39:55:37:09:23:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B3:E3:89:E0:22:7B:65:C8:5F:EA:E7:E5:66:6B:AB:54:03:0A:E7
            X509v3 Authority Key Identifier:
                keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:86:48:db:d7:2c:93:39:c2:b0:dd:bd:25:05:b7:1c:42:61:
         3a:2d:6a:34:c9:6a:98:8a:62:81:45:0b:a9:1f:d8:15:44:06:
         b7:3e:5d:4c:83:24:7a:73:b1:28:d3:c4:65:29:c3:31:b5:3e:
         b3:53:41:ec:3d:75:33:83:99:92:cc:82:11:78:24:25:d9:6b:
         9e:37:2a:df:eb:e9:98:be:15:a2:17:a3:94:c5:32:4d:37:db:
         6e:c2:ed:ea:7c:4d:48:d7:60:bb:b8:63:b0:02:2e:ef:80:57:
         bb:c4:7f:ee:16:bf:50:2b:ea:4d:ea:39:52:a3:2f:a0:b3:3b:
         5c:01:50:1a:20:1c:9a:60:a1:5f:47:04:bd:84:d7:36:a4:12:
         c6:ff:fb:6c:aa:13:ca:4e:12:55:06:63:39:81:de:c7:a2:e0:
         8a:c2:e9:1b:64:b6:28:b5:6c:1a:5f:06:20:84:b4:18:de:c3:
         41:9a:75:c5:86:09:bd:6a:ab:4d:a3:3c:69:74:4a:c7:c7:c0:
         48:82:51:53:d5:3f:6d:d2:34:9a:76:50:b2:3e:d4:db:3c:73:
         17:4c:2f:f7:ca:92:75:91:fc:01:cd:2a:ae:2e:2c:e1:12:74:
         79:a9:2a:7f:b6:98:77:56:95:84:54:3e:56:31:f1:d7:99:84:
         89:91:4a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U3EBf000yUYB1cSFmCs+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmU1ZDk3OWUwMzI1Mzk5OTQ2YjIzOTA4MjJkMzBmMWQy
ZjM1ZTEwHhcNMjYwNzI0MTYwMTI5WhcNMjYwNzI1MTYwMTI5WjAzMTEwLwYDVQQD
EygzYWIzZTM4OWUwMjI3YjY1Yzg1ZmVhZTdlNTY2NmJhYjU0MDMwYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4VARTQc7yHIYeiII4y9hxSSdzm2
+JQcAVxJxX7d7nIIBy3/fQ3k+Nym2geDVJHZZM8rwiVnbLH8CDsDoyRv7X7JRLdd
5OiMuy7qNwKDp1O7lyrzi7BgAC8jsrb+dG5Ngq4HXesfImEUAWyz6cyUN7eXh0ux
oA73fl51QFD+NpNy+2GvpeYmaRbN7RlWFHvKxnGgX0t4ngTc7bvfZn9uKI9Ye+fN
lGDsPGe9j2j84afFJfOTmgeMLlu0C0ZafpABNOKpePZyvMbM7Rb0ppD6UFeZAcEM
7e4pKiLGXatzOOsEJTC/WVybEk09dt8qefM3UqyHVEIekRETOVU3CSNpZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqz44ngIntlyF/q5+Vma6tUAwrnMB8GA1UdIwQY
MBaAFKkuXZeeAyU5mUayOQgi0w8dLzXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAt
YTQ3ZDE0MWNmYzVhLzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAtYTQ3ZDE0MWNmYzVh
LzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIZI29cs
kznCsN29JQW3HEJhOi1qNMlqmIpigUULqR/YFUQGtz5dTIMkenOxKNPEZSnDMbU+
s1NB7D11M4OZksyCEXgkJdlrnjcq3+vpmL4VohejlMUyTTfbbsLt6nxNSNdgu7hj
sAIu74BXu8R/7ha/UCvqTeo5UqMvoLM7XAFQGiAcmmChX0cEvYTXNqQSxv/7bKoT
yk4SVQZjOYHex6LgisLpG2S2KLVsGl8GIIS0GN7DQZp1xYYJvWqrTaM8aXRKx8fA
SIJRU9U/bdI0mnZQsj7U2zxzF0wv98qSdZH8Ac0qri4s4RJ0eakqf7aYd1aVhFQ+
VjHx15mEiZFK+Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:20 2026 by rpki-client