Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File:                     RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier:          JvFrNMrtD8yL3nCa4lOBGo/DeI2+piZIb8XmCnkNs18=
Subject key identifier:   36:CF:13:FB:02:6E:B5:38:83:C7:13:6C:B7:47:43:D0:9D:68:DF:51
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer:       /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial:       019F9FCDA99F6274F6BD0ABA1A779A422681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number:          11B9
Signing time:             Sun 26 Jul 2026 19:01:23 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:23 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:23 +0000
Files and hashes:         1: 7JHxpyxpo02zkoPorIc6uG3BVuA.roa (hash: b8rxzTKBj6Qg6MVgNOKKZSKKJO0QmX7hL5AcNsaVFUw=)
                          2: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: VG6/cmkpYHVo7Nth1ZP3giDyDQMZDpKqjRnDEF0wHCs=)
                          3: cfefMU6VCTQ-krOdPG6PUT0K-AE.roa (hash: /iqY0OlFoitueMsNG0GZcTyMYyjjsKmq3zEGu1XC6Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:a9:9f:62:74:f6:bd:0a:ba:1a:77:9a:42:26:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
        Validity
            Not Before: Jul 26 19:01:23 2026 GMT
            Not After : Jul 27 19:01:23 2026 GMT
        Subject: CN=36cf13fb026eb53883c7136cb74743d09d68df51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:b6:68:25:1c:aa:3d:9e:b6:5a:01:91:1c:
                    5f:c4:a3:ae:54:a3:c9:a9:9f:32:76:bb:67:7e:f9:
                    ba:e4:f1:a0:2b:1f:90:96:b9:63:e6:03:12:a8:ec:
                    bd:91:e2:be:01:9c:ab:ae:42:3e:7b:f1:b6:ba:4f:
                    3d:62:fb:84:f7:64:e8:02:29:c2:3a:81:17:54:fc:
                    4c:7e:2b:d2:e1:68:2a:3e:39:fa:eb:a8:51:1e:08:
                    98:93:63:dd:2b:2e:a9:8a:1c:0f:4b:e7:10:a0:70:
                    41:30:41:d0:74:33:77:e9:a2:0b:b6:28:28:b8:a8:
                    98:a9:29:76:31:69:c2:d0:56:ef:87:59:a9:b4:8d:
                    ff:fd:92:67:35:61:6a:3b:28:72:7d:39:14:ac:1d:
                    6b:9c:6b:28:f6:50:e1:af:88:10:11:10:48:21:46:
                    e4:e6:d1:06:fd:af:d6:0c:7c:1b:0d:9d:eb:db:08:
                    07:5a:1c:54:88:6e:cd:fd:f4:de:c2:df:04:a5:18:
                    bf:c9:8e:d5:dd:e8:5f:ed:d8:b8:14:f5:fb:4d:a3:
                    c5:90:58:2e:98:f7:d7:76:4e:31:25:03:a4:79:98:
                    ce:c3:fd:9c:d8:39:72:85:61:ea:72:9f:c8:6c:f5:
                    10:48:20:ca:02:71:65:ce:3d:39:09:8d:01:d8:0d:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:13:FB:02:6E:B5:38:83:C7:13:6C:B7:47:43:D0:9D:68:DF:51
            X509v3 Authority Key Identifier:
                keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:e5:67:c5:ce:e3:9f:39:38:5d:0e:24:b5:ea:3a:04:1a:
         43:8c:90:07:f8:9e:cd:8d:b1:06:62:33:6a:1b:36:17:87:ff:
         e6:10:74:89:81:37:9b:a6:f4:3b:a0:23:e7:de:01:fa:67:34:
         f7:1a:2c:93:df:f8:ef:df:96:4a:4b:75:08:a2:8f:04:ba:ad:
         fb:7b:ed:7c:99:6e:d0:74:46:dd:c8:15:6c:4d:3c:00:eb:c1:
         54:73:89:47:80:e4:14:c2:2e:bd:87:1c:ea:62:53:2d:e4:3c:
         5f:27:41:96:51:50:31:c4:41:f3:83:b0:38:85:cc:9b:de:c2:
         54:8a:ac:71:49:ad:d7:43:66:ca:90:da:00:2f:12:d5:e4:0d:
         8a:a0:b1:da:68:78:61:09:64:aa:2e:32:1e:0f:64:ad:90:cf:
         eb:1d:69:2c:bf:a5:9a:ed:67:30:5e:5f:18:fb:7e:f7:8f:66:
         55:d2:7b:2c:f6:c8:e5:eb:af:21:e0:23:ef:45:5a:1a:ee:19:
         4b:ba:c0:f2:2a:8f:31:12:0e:ea:9d:05:bc:03:83:35:54:99:
         c0:d1:0d:02:7e:86:b6:9d:df:35:7e:e0:e6:65:2a:88:16:a3:
         b7:44:23:34:04:01:f3:9c:e2:3c:b4:7d:ba:35:dd:6f:36:85:
         4e:49:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:16 2026 by rpki-client