Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File:                     Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier:          pGiichRFLZse4v1qhV1YYrJklJIkgzE6MHkiVu9Sck8=
Subject key identifier:   92:14:8A:B9:0F:86:DF:12:3E:6D:45:36:0D:AE:44:97:09:8D:45:74
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer:       /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial:       019F3AF439028DB47134C0A4D5E18731E163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number:          0622
Signing time:             Tue 07 Jul 2026 05:01:51 +0000
Manifest this update:     Tue 07 Jul 2026 05:01:51 +0000
Manifest next update:     Wed 08 Jul 2026 05:01:51 +0000
Files and hashes:         1: 5sjVZOffDC3SdMXl3xj-LISTTRA.roa (hash: NgYO+E9uip8I6LBuV26/SjtRZiAA/mIEsqO23fxRKZo=)
                          2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: T8N3Quiz3kVcywh2P9GArs27y1JIlYm+Bdde5Q1KmSc=)
                          3: UZ8MoagtWKlsIsRGsjso-iozLGw.roa (hash: dnetz1uWniSUYV1OlTPjy0Ix9dXrnsa95CDJdNzqlUI=)
                          4: _PN_oCivSa6SCwOfHRvwn1IYBgQ.asa (hash: 2M4AXv8yl0hWjN/wepg6vu4DidwOliFRGd1ExPxEg/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 05:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3a:f4:39:02:8d:b4:71:34:c0:a4:d5:e1:87:31:e1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
        Validity
            Not Before: Jul  7 05:01:51 2026 GMT
            Not After : Jul  8 05:01:51 2026 GMT
        Subject: CN=92148ab90f86df123e6d45360dae4497098d4574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:6b:18:0a:87:6c:7f:db:58:31:10:a5:37:
                    83:5f:a6:7f:6a:11:17:ff:2f:4a:ae:aa:3c:d6:1b:
                    df:d6:70:ca:4d:99:88:d9:59:f8:75:48:7f:d8:58:
                    a1:25:6b:cb:93:c7:eb:39:60:0b:1e:2d:63:83:86:
                    4e:76:38:9d:b5:92:db:2b:dd:02:d4:ac:bf:15:bd:
                    af:5a:57:4a:59:5b:91:b2:3f:8d:0d:71:10:72:c0:
                    60:1a:5e:32:cb:46:54:6f:4c:12:61:bb:87:4f:57:
                    aa:61:d4:26:c5:aa:a1:54:aa:58:6a:0e:dc:0d:da:
                    67:c5:dc:69:a1:6d:27:94:46:7e:65:41:18:b1:21:
                    6c:6b:87:a8:bf:28:b0:a1:6a:33:fa:63:62:ed:7b:
                    3b:3e:2f:b8:36:a6:4d:de:3e:7d:eb:47:30:d3:23:
                    ca:a0:3c:93:47:6b:f0:5d:3b:48:72:af:ec:3e:bd:
                    8f:8a:0c:a9:a2:43:2f:33:d0:f5:14:e7:93:80:a6:
                    10:8a:31:0e:71:96:a5:5b:e7:a8:93:76:66:81:34:
                    61:46:46:94:f5:98:18:5f:1c:56:0d:d5:80:f6:07:
                    44:de:bb:3b:68:36:7e:8a:c6:d7:6a:13:9c:fc:f0:
                    f0:f3:a8:b4:a3:f4:bd:85:db:46:32:e3:0c:c3:ff:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:14:8A:B9:0F:86:DF:12:3E:6D:45:36:0D:AE:44:97:09:8D:45:74
            X509v3 Authority Key Identifier:
                keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:30:41:51:e6:ba:95:93:59:25:04:01:11:8e:5d:df:d0:92:
         55:51:a9:2d:af:ec:83:d7:bf:60:cb:4d:8d:15:0f:7b:cf:15:
         ca:5f:2a:83:7f:6d:6c:e8:24:35:bb:02:a8:a4:67:f4:e5:64:
         7f:ea:1d:24:8a:13:13:08:dd:17:95:1c:00:5b:da:91:7c:c6:
         f2:52:e3:c0:04:fa:49:5d:cf:77:22:7c:cf:85:fe:bd:7d:f7:
         40:36:dc:63:04:2c:25:2c:18:53:53:d2:86:de:21:0c:b9:51:
         60:8d:d4:fc:7d:97:3a:9e:24:ae:f5:69:f4:18:24:5a:83:f7:
         89:03:6f:0d:f2:6f:e0:17:dd:f0:50:7e:b8:75:e1:ca:6c:05:
         b5:f3:29:c1:f1:10:78:ae:ab:5d:f7:88:04:21:9b:b7:ec:34:
         2c:fc:8a:98:20:0e:6e:b2:89:7b:48:90:31:3e:6f:66:ae:1b:
         e3:8b:b3:bc:b3:d0:0d:7c:d5:70:63:19:58:66:a1:1b:45:39:
         fc:47:3c:8a:31:f3:d7:3b:ac:24:a9:c6:15:fb:d5:ef:88:62:
         2f:3b:2b:56:f5:68:d9:53:9a:af:1f:38:e3:c8:47:6a:6d:38:
         67:46:b3:c0:db:55:41:7e:2a:b3:ca:28:ea:46:f2:d1:78:cc:
         f4:46:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:42:54 2026 by rpki-client