Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File:                     Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier:          jBdJ5MaErzRnqvoaeCukjU8XsKgJkF8kgiqUQQSNK/w=
Subject key identifier:   84:F2:B4:E6:4C:C7:68:24:00:2F:6D:37:CF:53:B7:7E:D2:12:F2:9F
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer:       /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial:       019F90FE9023C1D6D6767A282C5E3C067A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 22:00:29 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:29 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:29 +0000
Files and hashes:         1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
                          2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
                          3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
                          4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: QzhFXvADF5jGFBEpVEEhlkU5wBi4Qi/mIKZ8szVp2w0=)
                          5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
                          6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
                          7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
                          8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:90:23:c1:d6:d6:76:7a:28:2c:5e:3c:06:7a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
        Validity
            Not Before: Jul 23 22:00:29 2026 GMT
            Not After : Jul 24 22:00:29 2026 GMT
        Subject: CN=84f2b4e64cc76824002f6d37cf53b77ed212f29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:94:30:39:e0:58:93:d6:54:d4:ac:8d:97:
                    0c:87:45:4b:fb:67:d5:14:73:99:8b:3b:31:6c:7e:
                    74:58:cf:5a:e1:9c:b0:64:90:14:a3:e7:ab:6e:1c:
                    b0:cc:1a:e6:9a:41:cf:46:48:b1:6d:c1:80:c7:bb:
                    44:22:61:02:b2:11:9c:af:59:de:4c:0e:dc:13:33:
                    81:1c:4e:b6:74:92:0e:06:d2:d8:2a:18:8a:b8:3d:
                    76:c7:7d:9e:77:ed:48:dc:61:9c:d1:43:ff:e6:96:
                    2c:e3:1b:78:18:20:49:e9:33:16:8e:b4:23:4d:9a:
                    d2:3b:7b:e7:24:be:1f:19:0c:86:0f:da:89:74:c2:
                    2b:20:a2:21:e7:16:ff:51:a0:35:d8:05:d0:79:5e:
                    35:75:01:51:69:e7:66:84:19:2f:04:0f:aa:c3:e0:
                    0e:35:97:91:bb:e1:56:aa:ae:aa:1a:7a:25:82:69:
                    51:d6:c5:1b:3a:f9:fc:2c:3e:77:a2:a2:6a:3d:82:
                    00:9c:02:e0:53:5b:ec:2b:6c:8b:d1:f1:bf:da:e2:
                    50:a0:e7:78:30:91:fc:ae:e1:98:96:50:4e:21:b2:
                    cf:75:5e:1b:6c:e4:fd:a4:3f:2a:92:1d:5e:f5:e2:
                    d6:d6:88:b3:1c:f1:ee:56:c8:f8:37:7c:86:3b:d2:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F2:B4:E6:4C:C7:68:24:00:2F:6D:37:CF:53:B7:7E:D2:12:F2:9F
            X509v3 Authority Key Identifier:
                keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:5d:ad:61:b5:d6:41:79:88:0b:3b:e5:95:02:30:3a:a8:
         1a:2c:1b:ac:cb:71:ce:7b:65:87:2f:25:cf:ef:31:7b:11:a7:
         31:87:65:d3:b4:16:c9:c1:ed:af:f1:17:6b:95:c3:d4:70:28:
         88:f3:fe:0a:5e:24:32:f2:09:c4:fc:11:09:11:b3:8a:e3:b5:
         01:47:2f:b5:fd:bb:f1:51:b0:71:4c:ec:f0:ec:83:b8:56:ca:
         ee:53:2a:a8:f8:f4:c4:58:4d:e1:53:46:b9:e7:56:2c:09:4f:
         45:0f:dd:17:9a:93:8b:52:0a:fd:70:07:40:e8:db:d0:da:f1:
         6e:69:d6:1e:c4:24:54:db:d4:7c:d8:72:8b:8e:5e:b7:11:26:
         76:a5:06:45:64:cd:ae:44:dd:3c:db:e0:33:53:c7:1c:08:61:
         4b:55:45:80:c4:93:a0:ad:68:9a:5b:3c:53:49:d5:cd:86:fa:
         51:d1:d3:2c:73:35:65:4d:e7:67:46:bf:9b:ce:63:26:81:ee:
         e1:70:e6:50:ea:fb:66:34:65:d7:e4:57:a9:b2:9b:52:84:ed:
         ef:80:af:32:43:d5:62:88:ab:d4:2f:b2:57:ef:2a:22:f3:8d:
         c8:74:af:44:f3:bb:b9:09:1d:9a:25:dc:00:30:b6:d3:de:ed:
         bf:a2:dd:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/pAjwdbWdnooLF48BnqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzE2NTk1OTY2YWZiMGJhY2YxZDc5MzdmMjQ1ZDZhMDUy
MjIxYTMwHhcNMjYwNzIzMjIwMDI5WhcNMjYwNzI0MjIwMDI5WjAzMTEwLwYDVQQD
Eyg4NGYyYjRlNjRjYzc2ODI0MDAyZjZkMzdjZjUzYjc3ZWQyMTJmMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMmUMDngWJPWVNSsjZcMh0VL+2fV
FHOZizsxbH50WM9a4ZywZJAUo+erbhywzBrmmkHPRkixbcGAx7tEImECshGcr1ne
TA7cEzOBHE62dJIOBtLYKhiKuD12x32ed+1I3GGc0UP/5pYs4xt4GCBJ6TMWjrQj
TZrSO3vnJL4fGQyGD9qJdMIrIKIh5xb/UaA12AXQeV41dQFRaedmhBkvBA+qw+AO
NZeRu+FWqq6qGnolgmlR1sUbOvn8LD53oqJqPYIAnALgU1vsK2yL0fG/2uJQoOd4
MJH8ruGYllBOIbLPdV4bbOT9pD8qkh1e9eLW1oizHPHuVsj4N3yGO9Kh/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITytOZMx2gkAC9tN89Tt37SEvKfMB8GA1UdIwQY
MBaAFEPBZZWWavsLrPHXk38kXWoFIiGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGIt
NTk5MGVhNThlMDMwLzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGItNTk5MGVhNThlMDMw
LzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcldrWG1
1kF5iAs75ZUCMDqoGiwbrMtxzntlhy8lz+8xexGnMYdl07QWycHtr/EXa5XD1HAo
iPP+Cl4kMvIJxPwRCRGziuO1AUcvtf278VGwcUzs8OyDuFbK7lMqqPj0xFhN4VNG
uedWLAlPRQ/dF5qTi1IK/XAHQOjb0NrxbmnWHsQkVNvUfNhyi45etxEmdqUGRWTN
rkTdPNvgM1PHHAhhS1VFgMSToK1omls8U0nVzYb6UdHTLHM1ZU3nZ0a/m85jJoHu
4XDmUOr7ZjRl1+RXqbKbUoTt74CvMkPVYoir1C+yV+8qIvONyHSvRPO7uQkdmiXc
ADC2097tv6LdWQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:44 2026 by rpki-client