Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File:                     qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier:          G/KbThfwzLCZs14QOsaZnCFra+TyNeyN4q4LcqG9InM=
Subject key identifier:   6C:F3:CF:35:C6:E1:E7:61:F3:09:7C:51:07:35:DD:73:2B:D1:23:83
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer:       /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial:       019FA0E04B9187F56A63099E75F515481524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 00:01:21 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:21 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:21 +0000
Files and hashes:         1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
                          2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: jz94VvQjopGTi5JxH3ePAkPUvJwUfWyKG4O4qgOiLDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:4b:91:87:f5:6a:63:09:9e:75:f5:15:48:15:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
        Validity
            Not Before: Jul 27 00:01:21 2026 GMT
            Not After : Jul 28 00:01:21 2026 GMT
        Subject: CN=6cf3cf35c6e1e761f3097c510735dd732bd12383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:23:81:7e:6b:9f:bf:f3:17:02:ad:8c:47:
                    12:24:85:a4:8a:fa:94:48:12:59:40:78:e8:b9:f0:
                    c5:b9:b6:a2:61:40:f5:fb:8c:6a:bc:dc:0d:6c:bf:
                    b9:54:bf:67:bf:94:0e:b5:3b:83:1f:c9:53:1e:0b:
                    78:ea:2a:9e:2e:94:d3:9f:64:51:2d:70:e2:ae:8d:
                    e2:77:41:19:82:08:ea:77:8a:a1:a1:72:88:e8:ad:
                    cf:04:52:c9:75:6e:9d:ab:d9:bf:9c:b7:b4:61:2b:
                    0b:ae:25:14:9f:e8:6c:23:8c:47:87:3c:24:f2:c8:
                    82:5f:cb:6b:12:99:fe:9a:9f:da:99:f3:d0:70:00:
                    9a:a9:e5:31:13:73:ec:84:58:3a:d4:cf:16:fc:91:
                    11:f5:24:77:88:88:d1:3e:21:80:de:18:bf:41:94:
                    3b:c5:6c:51:c5:93:3d:45:89:23:06:2f:72:80:97:
                    67:ae:e5:0a:77:6c:d7:5e:04:d6:c8:c3:b4:2e:63:
                    80:ab:52:b1:bd:af:a9:d7:24:2c:6d:af:fd:13:12:
                    e7:31:d1:8c:2a:6f:a5:de:67:9a:aa:37:b5:a1:28:
                    98:52:0f:3d:ea:ae:ba:9b:58:bf:fd:9c:2f:7a:f8:
                    44:5a:b2:fe:d9:1c:4d:ae:21:2b:95:e1:b0:00:55:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F3:CF:35:C6:E1:E7:61:F3:09:7C:51:07:35:DD:73:2B:D1:23:83
            X509v3 Authority Key Identifier:
                keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:0b:a4:4d:77:fe:c2:88:c0:83:56:ba:38:e3:6e:7e:53:
         50:1e:72:5c:44:0d:05:c0:23:56:72:23:9e:1f:1c:68:9b:3d:
         8e:c3:83:d3:f1:d9:93:bc:48:05:b2:ec:e5:4f:cf:a8:68:4e:
         72:b3:b5:1f:81:75:36:f1:6b:36:bf:0c:95:aa:9c:ea:db:dd:
         3b:38:f2:d4:fe:0b:47:7b:6e:19:cb:ca:5e:23:8e:71:0c:d9:
         3d:0d:14:4b:6a:9a:1d:d7:71:ce:11:4f:4e:5f:10:f9:84:8d:
         58:de:4c:57:62:3d:8e:86:69:77:05:8f:cd:d6:23:90:78:46:
         3d:3f:b6:65:b6:f6:8d:7f:18:68:64:25:3a:f6:a1:5b:81:c3:
         ad:bc:ac:92:80:78:d1:24:5f:df:8c:39:15:2a:4f:a1:1e:84:
         05:e4:9a:85:c1:d1:26:15:2c:42:05:77:fc:e2:d1:5f:bf:ca:
         2f:26:11:51:cd:98:c0:e9:7f:77:b1:41:4b:65:72:bd:ec:d1:
         fe:a9:07:81:30:f9:4a:ba:fd:4d:26:cd:66:20:52:cb:3a:05:
         a4:43:86:74:bc:fd:fb:5c:e8:a7:ed:d2:74:a1:43:28:68:d4:
         12:e1:65:e8:47:0a:62:04:a7:f8:02:e7:2a:df:95:ec:ed:d8:
         cc:a1:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:35 2026 by rpki-client