Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
File:                     qeYaOcqwlqd1rl65N0mg67NnEoU.mft (raw, json)
Hash identifier:          ysPeJUNXfPgzG87wuQpXJl6oJ3ffSacoHp1HdVAs/VA=
Subject key identifier:   75:37:A0:74:36:B8:65:6F:9A:85:A9:20:EB:67:22:7C:62:9A:75:1E
Authority key identifier: A9:E6:1A:39:CA:B0:96:A7:75:AE:5E:B9:37:49:A0:EB:B3:67:12:85
Certificate issuer:       /CN=a9e61a39cab096a775ae5eb93749a0ebb3671285
Certificate serial:       019FA0DF99E979C68663C33EEDD138E0FE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:00:36 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:36 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:36 +0000
Files and hashes:         1: 5O-01ndXn91lvA7IGVp_7JD4C-I.roa (hash: nMoMotkyMIOIoR19nWnqbdZxJYSLaTBAftysCvWr7wQ=)
                          2: H5RC6IGh5Sbx9PEDoFiqbRt3ynU.asa (hash: n2QJ0n4EloMxuDW9dgN6ie/KWyMZurH7F5vYNP7+oXA=)
                          3: oekYsitCnhsBLEDUo2OKvfy3f9c.roa (hash: 9ar9NhbD7Igy6b/ldj4/mv2tjbrOn9f4QbaYWVwOYjg=)
                          4: qeYaOcqwlqd1rl65N0mg67NnEoU.crl (hash: QV+Hc8QGxVQnl2Jg0OGLa8wqiFktSjagacp7VGb2tzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:99:e9:79:c6:86:63:c3:3e:ed:d1:38:e0:fe:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e61a39cab096a775ae5eb93749a0ebb3671285
        Validity
            Not Before: Jul 27 00:00:36 2026 GMT
            Not After : Jul 28 00:00:36 2026 GMT
        Subject: CN=7537a07436b8656f9a85a920eb67227c629a751e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:86:3e:29:11:ed:4d:65:eb:21:3e:ab:ae:
                    8c:00:96:46:89:0b:5a:87:3e:6c:a0:8b:52:3d:c4:
                    45:52:29:32:9c:f8:f4:a8:9e:88:f0:65:2b:d3:0e:
                    72:ad:d6:ca:a1:9e:0b:45:a3:d6:3a:d5:6d:ef:d7:
                    82:1b:8a:ed:0c:16:59:d4:61:4a:c3:58:9f:f2:9d:
                    71:53:76:d6:d6:7c:0d:1c:38:71:79:b2:87:be:03:
                    13:9f:c3:4a:76:58:5a:3b:c9:26:49:22:23:fc:c3:
                    9a:2c:e1:8f:65:fa:e7:54:0a:61:4d:e4:0f:d9:63:
                    38:d2:d9:b0:ef:d3:81:08:ab:76:89:24:29:56:c8:
                    77:a4:0f:f8:09:13:7d:d2:cf:5b:18:2d:47:ff:b8:
                    f9:49:c0:e8:f4:f4:23:64:6f:49:c7:b9:2c:d3:02:
                    fc:78:ef:fc:d6:b0:d9:7a:7b:45:e2:b1:c6:dd:4b:
                    14:9f:33:91:5b:6a:ba:e9:0e:5f:b6:99:d2:83:c8:
                    ae:87:1a:3c:6b:58:65:84:b6:12:4b:08:16:9e:7d:
                    8b:1e:7a:38:32:be:c3:0f:a0:e6:13:74:4d:16:1f:
                    0e:dd:08:20:82:d7:76:43:72:ba:43:ba:02:1e:b9:
                    b2:bd:bb:16:dd:55:7a:e4:b0:80:c0:c2:3c:ea:36:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:A0:74:36:B8:65:6F:9A:85:A9:20:EB:67:22:7C:62:9A:75:1E
            X509v3 Authority Key Identifier:
                keyid:A9:E6:1A:39:CA:B0:96:A7:75:AE:5E:B9:37:49:A0:EB:B3:67:12:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4b:80:16:6d:5d:a3:3f:cf:dd:7f:14:34:be:fc:3d:0d:35:
         74:93:b7:f7:69:08:96:19:c6:79:0f:23:f7:8d:4b:ae:3f:f9:
         2b:a2:c1:31:81:e3:a2:9a:97:eb:98:8d:77:6b:7d:0c:b9:9f:
         89:50:3f:19:c1:45:5f:80:13:5d:93:20:ae:6c:ca:a3:0f:c3:
         5c:0b:02:a9:75:75:8d:bf:47:62:82:2d:55:e8:26:c5:9b:c6:
         1b:cc:24:5f:60:3d:f3:a4:39:f6:35:56:23:65:f8:cc:07:5d:
         c9:41:c5:1e:3e:81:58:29:4a:91:f2:d3:f1:73:99:22:b9:17:
         1e:21:e0:7e:dc:9e:c4:09:90:61:49:43:15:39:e5:bd:9d:b6:
         a8:c5:db:7b:f2:36:28:8f:32:9a:cf:e4:31:21:4a:e2:9b:5a:
         da:03:f5:14:b6:96:59:66:16:2d:78:f2:9f:7a:f3:11:6d:dc:
         91:f5:ed:b4:4a:a2:61:24:d8:08:dc:81:24:7a:21:42:e7:35:
         c4:52:1f:b4:c4:f2:43:7d:c2:4c:df:61:28:43:14:a2:9b:20:
         27:a2:c2:c8:68:42:5e:2f:f9:7b:27:79:1a:5d:5b:79:61:a5:
         c1:1b:11:17:be:a7:e3:9e:7e:17:7c:01:6a:15:2e:17:69:56:
         dc:0d:0d:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g35npecaGY8M+7dE44P5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZTYxYTM5Y2FiMDk2YTc3NWFlNWViOTM3NDlhMGViYjM2
NzEyODUwHhcNMjYwNzI3MDAwMDM2WhcNMjYwNzI4MDAwMDM2WjAzMTEwLwYDVQQD
Eyg3NTM3YTA3NDM2Yjg2NTZmOWE4NWE5MjBlYjY3MjI3YzYyOWE3NTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD2GPikR7U1l6yE+q66MAJZGiQta
hz5soItSPcRFUikynPj0qJ6I8GUr0w5yrdbKoZ4LRaPWOtVt79eCG4rtDBZZ1GFK
w1if8p1xU3bW1nwNHDhxebKHvgMTn8NKdlhaO8kmSSIj/MOaLOGPZfrnVAphTeQP
2WM40tmw79OBCKt2iSQpVsh3pA/4CRN90s9bGC1H/7j5ScDo9PQjZG9Jx7ks0wL8
eO/81rDZentF4rHG3UsUnzORW2q66Q5ftpnSg8iuhxo8a1hlhLYSSwgWnn2LHno4
Mr7DD6DmE3RNFh8O3Qgggtd2Q3K6Q7oCHrmyvbsW3VV65LCAwMI86jaiZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU3oHQ2uGVvmoWpIOtnInximnUeMB8GA1UdIwQY
MBaAFKnmGjnKsJanda5euTdJoOuzZxKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWVZYU9jcXdscWQxcmw2NU4wbWc2N05uRW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt
YjI5ODEyYzNlNDY1LzEvcWVZYU9jcXdscWQxcmw2NU4wbWc2N05uRW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1
LzEvcWVZYU9jcXdscWQxcmw2NU4wbWc2N05uRW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUuAFm1d
oz/P3X8UNL78PQ01dJO392kIlhnGeQ8j941Lrj/5K6LBMYHjopqX65iNd2t9DLmf
iVA/GcFFX4ATXZMgrmzKow/DXAsCqXV1jb9HYoItVegmxZvGG8wkX2A986Q59jVW
I2X4zAddyUHFHj6BWClKkfLT8XOZIrkXHiHgftyexAmQYUlDFTnlvZ22qMXbe/I2
KI8yms/kMSFK4pta2gP1FLaWWWYWLXjyn3rzEW3ckfXttEqiYSTYCNyBJHohQuc1
xFIftMTyQ33CTN9hKEMUopsgJ6LCyGhCXi/5eyd5Gl1beWGlwRsRF76n455+F3wB
ahUuF2lW3A0New==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:38:30 2026 by rpki-client