Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File:                     hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier:          gWEQMXVEbAxFGcO+5w7XpTW1pE/F+f5UGzTecsY6LgQ=
Subject key identifier:   EB:0D:7C:92:7F:6A:F4:A2:12:ED:34:00:49:EB:59:24:C4:2C:C7:55
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer:       /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial:       019F848CBB2FADD8EB60ED75AECF5938C17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number:          19C1
Signing time:             Tue 21 Jul 2026 12:00:43 +0000
Manifest this update:     Tue 21 Jul 2026 12:00:43 +0000
Manifest next update:     Wed 22 Jul 2026 12:00:43 +0000
Files and hashes:         1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=)
                          2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=)
                          3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: ssBltQ9AzsxuhCq3hZ1ospxPfdPc4bikaOWPiXRh5DA=)
                          4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8c:bb:2f:ad:d8:eb:60:ed:75:ae:cf:59:38:c1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
        Validity
            Not Before: Jul 21 12:00:43 2026 GMT
            Not After : Jul 22 12:00:43 2026 GMT
        Subject: CN=eb0d7c927f6af4a212ed340049eb5924c42cc755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:e5:1f:54:6e:99:9d:4c:97:ee:b5:0c:a4:
                    0f:75:2c:1a:7a:ab:e1:ee:03:7c:3e:b8:ea:12:be:
                    21:96:54:88:7d:ae:72:8c:7c:a8:4b:4b:3e:36:5f:
                    43:12:1d:4d:7b:01:89:b3:bd:da:8c:5a:9a:02:00:
                    e0:c9:43:55:94:c6:16:e6:f7:4f:8f:d7:03:b9:bc:
                    7b:5b:04:5f:26:5e:a0:0b:40:5d:c2:a9:f5:65:b5:
                    cb:9a:15:75:3e:fc:f8:ed:b7:a7:ca:c4:5b:c2:39:
                    be:83:b3:53:39:64:7f:39:e6:9e:09:56:ab:35:da:
                    d4:69:53:ed:9d:c7:76:4b:da:af:7e:d4:5e:9d:8f:
                    21:03:36:4b:4e:55:21:d1:bd:b7:40:e3:e7:79:7b:
                    e7:c5:b9:17:d5:a9:87:7b:64:84:0a:59:30:ae:87:
                    a0:a8:6f:22:40:07:36:30:eb:61:45:65:b7:ff:ee:
                    1a:3c:63:5a:8d:0f:0a:c4:a2:7e:1b:79:0e:62:53:
                    b8:37:a5:5b:e4:b7:b8:ab:a8:81:7f:fb:55:97:ed:
                    c2:53:a7:b6:9f:7e:99:24:f0:c6:7b:a8:06:6c:d1:
                    b3:be:3d:35:86:52:7c:54:5e:5c:86:ae:bb:85:6c:
                    8c:b2:a6:95:6d:59:74:08:4d:b7:dc:16:f1:1e:af:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:7C:92:7F:6A:F4:A2:12:ED:34:00:49:EB:59:24:C4:2C:C7:55
            X509v3 Authority Key Identifier:
                keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:19:79:69:d3:1b:f1:97:e2:00:6a:04:95:ce:43:0b:db:31:
         9c:7b:90:23:25:58:a9:ac:06:65:c9:ad:28:98:bb:02:ee:88:
         b6:a5:52:e5:fa:db:9e:3f:ba:32:ba:74:8e:92:d8:a5:fa:bb:
         76:61:c1:3e:28:7e:22:d0:64:cd:33:6c:b2:01:7a:9f:6c:cd:
         91:cf:69:85:fc:f4:c0:70:77:c8:ae:24:e0:c9:10:40:53:c3:
         b2:d7:b3:48:5a:05:02:c9:72:27:64:23:45:bf:5c:b5:e8:19:
         12:92:c0:f2:45:51:d0:89:32:8a:a3:7f:12:44:3d:ed:ab:f6:
         f6:67:45:c4:06:b6:46:29:14:59:33:db:f3:c9:0e:96:e2:0f:
         6a:2a:63:75:1e:13:6e:ec:94:56:47:ad:c3:5f:86:b6:22:38:
         bc:7c:15:0f:99:bc:6d:ff:8c:82:1f:ab:24:8e:d3:66:0a:a0:
         06:9e:d8:f7:57:d2:13:cf:e8:7d:b9:0b:78:a5:45:ca:37:65:
         68:94:a1:55:b2:1a:c4:a2:5b:fa:f3:8b:16:7c:bb:10:dc:5e:
         b5:b9:3e:6d:a9:ee:3d:66:7b:24:df:54:61:8c:5b:3f:e3:5d:
         bc:f5:a5:f6:3d:18:d3:53:f9:4a:9c:a4:33:d8:3f:b0:12:51:
         5d:3a:d4:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EjLsvrdjrYO11rs9ZOMF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh
ZDJmMDkwHhcNMjYwNzIxMTIwMDQzWhcNMjYwNzIyMTIwMDQzWjAzMTEwLwYDVQQD
EyhlYjBkN2M5MjdmNmFmNGEyMTJlZDM0MDA0OWViNTkyNGM0MmNjNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1DlH1RumZ1Ml+61DKQPdSwaeqvh
7gN8PrjqEr4hllSIfa5yjHyoS0s+Nl9DEh1NewGJs73ajFqaAgDgyUNVlMYW5vdP
j9cDubx7WwRfJl6gC0Bdwqn1ZbXLmhV1Pvz47benysRbwjm+g7NTOWR/OeaeCVar
NdrUaVPtncd2S9qvftRenY8hAzZLTlUh0b23QOPneXvnxbkX1amHe2SEClkwroeg
qG8iQAc2MOthRWW3/+4aPGNajQ8KxKJ+G3kOYlO4N6Vb5Le4q6iBf/tVl+3CU6e2
n36ZJPDGe6gGbNGzvj01hlJ8VF5chq67hWyMsqaVbVl0CE233BbxHq+21wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsNfJJ/avSiEu00AEnrWSTELMdVMB8GA1UdIwQY
MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt
MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz
LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxl5adMb
8ZfiAGoElc5DC9sxnHuQIyVYqawGZcmtKJi7Au6ItqVS5frbnj+6Mrp0jpLYpfq7
dmHBPih+ItBkzTNssgF6n2zNkc9phfz0wHB3yK4k4MkQQFPDstezSFoFAslyJ2Qj
Rb9ctegZEpLA8kVR0IkyiqN/EkQ97av29mdFxAa2RikUWTPb88kOluIPaipjdR4T
buyUVketw1+GtiI4vHwVD5m8bf+Mgh+rJI7TZgqgBp7Y91fSE8/ofbkLeKVFyjdl
aJShVbIaxKJb+vOLFny7ENxetbk+banuPWZ7JN9UYYxbP+NdvPWl9j0Y01P5Spyk
M9g/sBJRXTrUnQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:03 2026 by rpki-client