Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File:                     qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier:          XUhwX3hfUxugNTL31fg46unTGbA5iaPbSkj1whjl1GY=
Subject key identifier:   F9:28:A6:67:4D:C2:C1:34:BB:FA:BD:B1:48:6D:D2:F0:8A:42:E0:78
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer:       /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial:       019F9F95F6F9330E2FA6B2E5A41F3B96D094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number:          046E
Signing time:             Sun 26 Jul 2026 18:00:33 +0000
Manifest this update:     Sun 26 Jul 2026 18:00:33 +0000
Manifest next update:     Mon 27 Jul 2026 18:00:33 +0000
Files and hashes:         1: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: 9K+z/QSsIHPOs4LcRdb/PsOFGfyi7haOXS4rURYAiBU=)
                          2: tHTr07ZBhUD8R_5r3PxqgiRA1CA.roa (hash: /8DCcSpchfgecurYBVc/dGLfkDOCG1kP3rKMMF22VmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:95:f6:f9:33:0e:2f:a6:b2:e5:a4:1f:3b:96:d0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
        Validity
            Not Before: Jul 26 18:00:33 2026 GMT
            Not After : Jul 27 18:00:33 2026 GMT
        Subject: CN=f928a6674dc2c134bbfabdb1486dd2f08a42e078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:00:6a:8c:89:41:a3:2b:d5:04:a4:07:fd:
                    99:50:6e:48:47:0b:bc:68:87:c6:c2:a5:1d:93:f3:
                    31:7a:53:46:d9:6b:16:7c:d6:08:00:7d:98:ff:d2:
                    d7:15:be:5f:8a:da:a8:2e:34:a6:e1:3d:31:91:e0:
                    1d:d8:d3:c1:d2:b6:f2:2c:92:2a:27:0e:67:63:54:
                    d4:4f:5e:d0:a0:ae:1a:33:86:20:cf:3d:51:37:61:
                    59:df:27:c9:a1:0a:ff:d5:1b:d9:25:04:9c:f2:cb:
                    30:87:27:d4:41:47:2d:19:d5:46:39:35:5c:e8:7b:
                    64:11:4a:68:e2:55:bc:0b:c5:d8:dd:95:17:bc:b7:
                    78:c5:a0:83:f8:77:b7:74:d1:bf:1a:ab:dd:51:b0:
                    ba:8e:e9:b9:1a:80:43:80:19:15:b5:14:d7:0c:0d:
                    48:be:b9:4a:07:8e:33:6e:1b:d6:c5:67:01:89:1a:
                    70:ca:95:3e:fe:67:34:6f:b0:4f:83:ac:80:3e:04:
                    5b:04:22:f8:7c:40:3d:1b:a5:05:0f:63:78:69:72:
                    b7:ba:c3:46:52:b5:ed:76:d7:b8:5a:2b:98:bc:57:
                    bf:8b:38:5f:2a:95:70:b7:3f:6d:31:ae:f1:b4:9e:
                    dd:dd:5f:88:28:b7:fd:53:0d:0f:16:ce:b5:9b:38:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:28:A6:67:4D:C2:C1:34:BB:FA:BD:B1:48:6D:D2:F0:8A:42:E0:78
            X509v3 Authority Key Identifier:
                keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:34:7e:aa:59:ee:b0:70:8a:04:c7:eb:62:1b:01:f6:c2:43:
         3f:14:91:2d:f2:f5:a0:33:d9:b9:ba:e9:44:8d:8a:91:5d:cf:
         66:7e:e9:84:5f:56:a9:6f:5a:85:2f:73:63:08:32:96:eb:8f:
         4f:64:a3:67:85:5c:1b:5f:5d:37:00:81:08:23:b3:31:bb:e3:
         f4:9a:b5:ab:d5:87:8a:99:99:26:e0:b9:a8:19:70:b7:7a:84:
         81:e4:35:fc:76:81:49:ff:0c:21:93:15:ae:5a:0b:20:a6:a1:
         5a:8a:14:af:e8:78:48:c3:cd:99:71:5c:5a:bf:2b:42:3f:81:
         1c:aa:82:5d:96:b1:0a:c8:fd:78:f8:c7:47:00:5b:43:68:7f:
         76:41:2a:59:c2:f7:5c:21:70:97:28:94:a9:7b:77:84:d2:c5:
         39:0d:9f:9a:cb:ed:84:07:7f:35:56:b0:c4:fc:65:ef:3b:71:
         c1:0f:8d:5a:7e:f9:d9:c6:9a:88:e4:34:42:30:5e:34:d5:db:
         76:de:2f:fe:b7:08:85:1e:3d:99:5c:32:ad:b8:3f:34:bc:af:
         80:3b:df:e4:7d:46:b9:8d:f4:5a:02:9e:c3:eb:e6:c1:71:45:
         45:c7:74:c6:ae:fb:d2:d8:80:06:04:fc:db:03:10:85:30:6a:
         e0:ba:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:25:01 2026 by rpki-client