Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File:                     QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier:          Prg/+IOYIlr8OXVHVNMVt8HD3kc39I2HFEPWAYQhprg=
Subject key identifier:   B7:8E:50:AB:74:47:C8:E0:85:4A:B1:3E:7D:F6:1F:6F:22:9A:D4:02
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer:       /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial:       019F94DC9212F4F13707AD66C16ECDB58D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number:          191D
Signing time:             Fri 24 Jul 2026 16:01:51 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:51 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:51 +0000
Files and hashes:         1: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (hash: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk=)
                          2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: I+8O9h/a7hxjxm8khJPAOdXTcF0rGA5jsEN+56uVPbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:92:12:f4:f1:37:07:ad:66:c1:6e:cd:b5:8d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
        Validity
            Not Before: Jul 24 16:01:51 2026 GMT
            Not After : Jul 25 16:01:51 2026 GMT
        Subject: CN=b78e50ab7447c8e0854ab13e7df61f6f229ad402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:56:1d:cb:a5:94:2d:d6:09:7f:34:b7:f6:
                    25:1e:ff:c6:6a:e9:b0:6e:f5:62:d9:80:a7:d0:53:
                    73:15:31:5a:ce:d2:ff:12:17:aa:4d:c5:6e:b1:fc:
                    b6:ae:b6:f4:1c:bc:38:b0:a1:02:80:64:a4:2b:e8:
                    42:13:06:a9:e9:6d:88:30:2a:57:5f:32:03:68:35:
                    cb:36:02:6b:87:3d:40:15:d3:5e:ae:7d:1a:d2:18:
                    23:76:c5:bb:be:7e:d5:e6:b3:3b:51:5e:66:9f:a5:
                    5c:d4:a2:9c:e8:f9:a8:84:3c:1f:66:19:f9:26:04:
                    60:d3:c3:d7:94:f3:8a:87:c4:45:4f:79:89:87:22:
                    3d:f7:c5:e6:c1:b5:96:b7:a5:8f:49:88:85:78:08:
                    e5:43:cb:e4:f9:71:54:40:10:13:71:55:4b:81:b5:
                    db:70:1a:23:a4:d8:8d:fa:ad:e6:3e:4d:4e:4d:17:
                    9f:d7:c1:42:d8:33:53:90:8d:a9:b3:2b:34:a0:0a:
                    7e:05:ca:8f:85:60:77:89:13:dc:5f:85:13:43:9c:
                    17:6e:18:50:c8:4c:42:e0:5a:b7:d6:18:1a:f3:6a:
                    48:85:61:13:f9:e3:28:57:ff:38:f9:2c:3e:ee:8b:
                    87:b1:4e:27:8f:a5:36:01:53:20:77:bb:a8:f6:d8:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:50:AB:74:47:C8:E0:85:4A:B1:3E:7D:F6:1F:6F:22:9A:D4:02
            X509v3 Authority Key Identifier:
                keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:0d:85:02:67:c0:20:ce:2e:88:3c:ce:2d:42:cd:61:97:
         37:b5:ef:67:19:35:95:ca:28:54:7b:33:9e:ee:1d:19:f2:6e:
         06:bd:25:b6:7c:e4:af:27:6c:4c:e5:28:16:75:8a:15:79:63:
         31:47:bf:7b:3c:22:40:25:79:c9:29:ed:48:65:28:ce:1d:5e:
         e4:f0:4c:3d:fc:27:42:a2:cf:fd:fa:f9:14:66:a8:cf:bd:79:
         45:b1:55:40:df:cd:65:5b:f0:f0:9f:7e:e7:42:df:ce:d3:a3:
         d3:e1:2a:32:c4:e7:26:c3:15:98:f4:43:d2:10:be:f6:d2:59:
         4c:f0:3f:ac:0d:80:c4:8c:4a:bf:98:6f:82:4e:e5:b5:ee:a3:
         5e:54:d9:7e:b0:db:15:97:fe:0e:2a:d0:47:d0:7e:91:51:43:
         81:90:c0:1c:3d:f3:c2:d7:55:5d:e0:01:1c:e3:6d:81:ac:1a:
         15:ba:da:98:35:d3:64:13:2a:3c:07:7e:3f:4f:75:b4:7b:7d:
         57:65:c0:9c:d4:fb:cc:13:d7:80:c0:3b:38:5c:c9:e4:c3:ea:
         6b:a3:b9:d3:94:74:8d:18:82:4d:0a:79:61:26:81:ed:22:44:
         c1:80:fc:85:e5:20:23:73:58:f3:ee:78:f9:25:1e:3e:8b:84:
         0d:fa:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:24 2026 by rpki-client