Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File:                     qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier:          zUNCt08dkAC3pwLiZ4+o8nUB4+Srm/V2mciGh8DZoBQ=
Subject key identifier:   C1:F4:17:79:A7:EF:2F:0E:FE:A1:B2:06:3E:66:B6:9C:CB:1A:85:26
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer:       /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial:       019FA116AC7C7724222E649D4946A1C18CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number:          0AD9
Signing time:             Mon 27 Jul 2026 01:00:45 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:45 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:45 +0000
Files and hashes:         1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=)
                          2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: 7IxXt3DlabDN9SzjSP2igfRa9B6UoXX4HYxMXxzI17o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:ac:7c:77:24:22:2e:64:9d:49:46:a1:c1:8c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
        Validity
            Not Before: Jul 27 01:00:45 2026 GMT
            Not After : Jul 28 01:00:45 2026 GMT
        Subject: CN=c1f41779a7ef2f0efea1b2063e66b69ccb1a8526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:5e:42:c4:52:20:45:e0:05:23:bd:f5:bf:
                    89:cd:2c:11:19:bd:b0:7b:04:9a:7a:a0:66:62:fe:
                    03:47:4e:21:55:c0:cd:00:57:74:42:f8:24:5d:9f:
                    f0:4c:c6:3b:94:3f:5e:32:e3:f5:3b:6e:85:e0:a4:
                    e0:e9:fa:0a:71:9e:71:32:64:20:a6:f5:8f:24:be:
                    69:d7:6a:ef:fd:15:0b:55:b4:74:49:d1:5f:9b:34:
                    48:ee:be:70:e5:f1:43:73:24:06:07:44:98:f7:91:
                    8a:2a:99:e7:05:1d:d2:4d:a7:d3:9b:ca:16:79:a9:
                    54:2e:c3:83:97:56:30:d2:fc:e7:f8:1a:2f:f4:02:
                    fb:dd:b1:13:7a:ce:c8:7a:d8:ac:81:b8:8f:08:ae:
                    fd:a8:58:57:f4:fb:fd:21:13:b9:6a:0b:1c:41:07:
                    77:1b:04:43:8d:f2:74:cf:2a:d2:c6:87:b1:52:54:
                    e5:c4:ce:50:c7:e3:47:87:f7:09:f9:02:30:90:4c:
                    4f:f0:fa:14:dc:fa:cd:59:5e:c4:f3:dd:66:a6:f8:
                    c4:12:09:00:89:cb:17:d3:32:96:a2:ea:65:94:20:
                    7a:8c:53:79:2c:15:aa:29:6f:35:83:62:35:a0:1f:
                    9f:ff:1d:a5:de:e5:0b:36:54:f0:16:a2:37:b0:4f:
                    6c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F4:17:79:A7:EF:2F:0E:FE:A1:B2:06:3E:66:B6:9C:CB:1A:85:26
            X509v3 Authority Key Identifier:
                keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7a:fb:fb:2a:12:67:21:f9:89:eb:93:36:92:6f:a7:69:b4:
         28:07:b6:c4:c6:d1:49:71:32:a5:db:0c:be:6c:76:2c:12:0a:
         13:42:57:54:27:fc:be:bb:c2:8f:0c:a5:2e:bf:88:9c:42:4b:
         ef:5c:54:20:b1:c5:ef:4e:05:61:0f:cd:3d:5f:14:e2:80:ae:
         a6:a8:da:05:da:78:45:cd:38:38:0a:64:77:76:c4:1b:c0:66:
         0b:de:a9:13:38:3e:f2:e7:be:53:22:2b:a0:73:ce:71:23:30:
         3f:fc:d3:a2:f2:d8:8f:60:1d:f6:d4:18:05:ee:e7:e1:7c:fa:
         2b:b2:ee:d6:56:88:24:4d:1f:ea:74:d3:06:12:cb:a6:d5:cd:
         3a:c7:f1:98:9d:0b:e1:17:bf:be:c8:c2:77:0c:e4:8e:79:59:
         da:7b:2d:91:a6:b3:58:86:eb:59:44:11:97:f4:54:19:f3:e6:
         3e:94:48:23:44:df:fa:a2:02:11:5c:42:bf:bb:52:09:cc:d4:
         76:ff:c8:d9:0b:45:fd:a0:e4:76:d5:0b:4a:e5:1f:2d:2c:6f:
         91:d3:4b:6d:6f:9a:86:22:19:60:f4:db:8c:94:51:cd:51:91:
         ef:6c:aa:b5:6e:57:d4:bc:5f:06:f1:b5:ae:a8:db:1e:4c:ce:
         c2:a0:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:26 2026 by rpki-client