Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File:                     0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier:          mM9BIdU+6GYK4N8Lupp3LVqkUazNXIjg/DGR4UyG1fc=
Subject key identifier:   AD:1F:AE:D5:2F:C7:FF:A5:1D:E1:C3:5E:76:8D:52:07:75:30:5E:E7
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer:       /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial:       019F9059D27290E105FA01A65042C52F98C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 19:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:33 +0000
Files and hashes:         1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: 8QUoKMFV0b+1SuRKtLwZWT83QFrAcLVKGMK9M0axLkE=)
                          2: 25O7M2UWZLtjZfht3TvmhhoKUbU.roa (hash: aHZMolfVFoYqPERvCPULtiENfnmx30XYIbMKIT0hRPE=)
                          3: DdN7vkJnOB--YPWssHLoFQourZw.roa (hash: 4Xwtg1/EpdhFY06tPduHwk9/msCJ+le6Q0TbeFIOaTA=)
                          4: ik9bQHA3wdhcXWdy4pApX4ViEtA.roa (hash: YUhchzwns71ZrkZmZzkm82sDpa46jMSA30HHNbNFaao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:d2:72:90:e1:05:fa:01:a6:50:42:c5:2f:98:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
        Validity
            Not Before: Jul 23 19:00:33 2026 GMT
            Not After : Jul 24 19:00:33 2026 GMT
        Subject: CN=ad1faed52fc7ffa51de1c35e768d520775305ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:8a:de:68:07:62:e0:2b:7a:d9:29:d7:8c:
                    80:8b:dd:10:74:f8:9a:d9:23:ae:bd:ed:32:67:a3:
                    3a:aa:54:3a:f2:3c:3b:06:9f:93:42:80:20:ef:1a:
                    a8:ee:67:12:3f:f2:f8:e6:06:32:7e:2c:05:e2:5e:
                    2f:ca:5d:7d:36:a2:94:21:d4:5e:e1:c2:b1:92:31:
                    94:5c:1f:05:8c:df:f1:4a:d1:0c:31:7c:55:f7:d2:
                    ae:78:bb:79:c5:30:91:d9:c1:6e:ca:40:7e:42:33:
                    c9:f6:65:2c:bd:1d:f4:42:29:81:e8:87:fd:33:33:
                    d0:93:a5:09:78:4a:8a:b0:45:95:ba:26:0f:05:08:
                    d8:23:3b:a9:90:75:f6:a0:bd:a2:b9:71:e2:07:03:
                    b9:71:7f:1a:c1:1d:e0:3a:75:82:f7:45:88:40:33:
                    17:fa:b3:d7:3d:62:6c:87:90:6a:cd:f2:0a:0d:47:
                    c1:63:d0:18:2a:f2:a3:b0:ed:d0:91:2e:4a:7b:01:
                    01:d7:0b:89:99:ff:6e:10:c0:4d:65:17:4e:6a:ba:
                    69:64:14:13:b8:14:a4:44:d3:04:ae:42:4e:9a:76:
                    c8:59:29:d8:a6:11:d8:b6:fd:92:c4:9e:bd:22:f5:
                    3e:c3:06:5a:69:79:57:15:57:94:10:b8:f5:80:79:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1F:AE:D5:2F:C7:FF:A5:1D:E1:C3:5E:76:8D:52:07:75:30:5E:E7
            X509v3 Authority Key Identifier:
                keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:52:ea:bb:42:19:0f:91:8c:3c:73:bd:4a:06:fd:0d:27:0a:
         71:3f:23:62:a6:b0:4b:e5:44:19:58:fc:77:8b:13:a9:dc:79:
         96:b2:8f:7f:0e:52:a9:0b:e6:0a:4d:f2:7c:ad:4f:5c:c6:32:
         db:6d:7e:99:4e:9d:20:f3:69:af:15:e9:11:9e:6c:a2:3e:ae:
         fa:71:d2:3f:7d:4e:fa:93:54:a4:03:99:19:61:d6:98:77:d6:
         fb:5b:83:3a:5c:b8:99:75:13:50:3a:47:29:1d:6f:89:9c:79:
         58:e7:fb:7a:b1:3a:c2:be:cf:a0:3e:be:ac:26:b2:74:f5:90:
         10:a3:9a:99:07:2b:19:f3:c9:7b:27:3b:55:60:c1:c9:75:9a:
         62:c8:e3:b1:1c:43:1d:bf:39:00:0e:ce:f9:4b:2f:a2:81:0d:
         7a:70:8a:ad:96:5c:61:be:87:d2:26:ca:4f:94:b8:c7:6d:f7:
         64:00:4c:cb:b8:d6:63:51:55:85:58:c3:cd:82:15:6a:b7:18:
         53:da:17:58:71:b3:b3:74:f7:60:fd:63:a9:16:8c:be:ed:c1:
         e0:0e:2a:83:ec:c1:bc:7d:08:b3:1b:40:67:f8:c6:50:1f:6b:
         3b:39:22:37:ba:c3:40:0f:cb:3f:28:15:de:bc:5c:ee:43:21:
         6b:d3:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:54 2026 by rpki-client