Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File:                     Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier:          iXzxg2qM3HZ0fQQVH3x0hc+2d0aLKL7jZp55Ph9pz7k=
Subject key identifier:   E6:FC:F2:D1:5A:85:08:83:9E:FD:BA:1F:39:24:18:B4:40:68:65:6B
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer:       /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial:       019F91DAC5FE168EB20A841907F6E012E2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number:          1666
Signing time:             Fri 24 Jul 2026 02:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:01 +0000
Files and hashes:         1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: zw6uxMBrU7bvJrFBqYafGapcQvg8s4Z2sTEWLML7Zgs=)
                          2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:c5:fe:16:8e:b2:0a:84:19:07:f6:e0:12:e2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
        Validity
            Not Before: Jul 24 02:01:01 2026 GMT
            Not After : Jul 25 02:01:01 2026 GMT
        Subject: CN=e6fcf2d15a8508839efdba1f392418b44068656b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:36:68:3b:cb:10:d5:da:f8:60:84:17:69:
                    f1:c3:a4:a6:39:3e:f6:37:69:dc:cb:ab:f9:e9:5e:
                    ef:0e:90:48:5a:0c:99:08:98:27:5a:8d:a6:e1:69:
                    58:32:ec:9b:c4:07:cc:e4:b4:00:20:d9:45:39:4f:
                    12:aa:7e:19:d7:d8:cf:d3:c0:b1:8a:a7:f3:42:0d:
                    f0:3b:7f:5f:6a:d9:0c:9c:0e:88:53:d7:33:0b:e1:
                    12:f0:35:8c:ef:5b:5c:cb:17:c4:c1:f4:2d:4c:64:
                    31:3c:84:5e:b5:09:f3:d6:8c:9a:81:3d:5b:a3:b7:
                    53:9f:53:5e:52:ca:bd:06:66:70:74:ca:c5:b7:88:
                    d4:2a:3f:81:f7:8c:3d:bf:c4:ce:fb:9f:40:96:39:
                    18:14:c3:35:b2:f1:05:1d:39:dd:66:ee:c2:20:15:
                    69:2f:c2:ef:af:5d:ff:c8:fb:a4:7f:da:af:9e:3d:
                    d1:72:32:cd:c6:db:61:4b:23:2f:5a:4f:17:94:d9:
                    19:54:86:14:18:ca:4a:60:fc:ed:c5:ff:35:f1:05:
                    62:6e:56:3e:11:10:76:73:ac:4b:0e:88:59:b5:11:
                    ac:13:6b:37:79:ed:5b:22:8d:da:b7:c8:e2:72:51:
                    c1:4c:3f:4e:b2:fd:57:47:40:34:39:07:86:34:29:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FC:F2:D1:5A:85:08:83:9E:FD:BA:1F:39:24:18:B4:40:68:65:6B
            X509v3 Authority Key Identifier:
                keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b7:1a:69:24:79:23:de:f1:95:fd:fb:4e:45:93:b7:7e:d3:
         64:a5:e4:17:b6:4b:5b:ae:9d:62:f2:7d:c3:b9:eb:27:5c:07:
         d1:52:9f:be:54:ea:d3:1d:40:21:63:c7:b2:2d:80:48:22:ce:
         04:09:f7:ae:e3:f8:3f:64:d2:4c:84:fe:ae:76:88:4e:78:3d:
         93:1c:4c:5b:fe:ad:fa:28:d9:03:bf:3e:3d:2e:b1:79:91:e3:
         76:f2:2f:ff:d8:8f:ac:1e:33:e6:ad:3f:17:ce:a9:27:50:ae:
         88:26:be:0a:f1:9a:1e:2c:15:6b:3d:66:a5:13:20:4e:9f:32:
         4e:14:25:54:0e:6a:b9:8e:45:44:c8:a5:c1:2a:9f:eb:db:de:
         68:cd:4f:33:d0:31:e3:32:cf:9a:50:29:6a:33:67:c9:33:42:
         1b:a7:7a:4d:fd:61:bf:8e:29:7e:36:1d:0e:cd:e6:59:82:93:
         84:5a:7c:14:00:20:a5:bb:75:08:c3:1f:68:77:1f:5d:37:ea:
         79:47:d9:6e:33:5b:1d:02:40:db:50:15:1b:e5:f7:21:d1:c2:
         7c:a0:bf:f2:13:55:87:09:58:d0:7c:a8:9e:33:57:b8:5e:a5:
         3c:50:00:5b:b9:30:a1:6a:e8:58:a4:da:bd:2f:0c:92:75:ce:
         81:a3:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:16:18 2026 by rpki-client