Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
File:                     q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json)
Hash identifier:          FpQcUp700xnmzvGl8xtMUh1ZZLT9mhEbHqBlik9EbBo=
Subject key identifier:   AE:80:31:7A:B4:E7:E4:3E:76:01:30:00:5C:37:A9:9A:A6:79:AB:F4
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       019FA14D3DB44C2BCFE270A23F1307F09F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
Manifest number:          16DF
Signing time:             Mon 27 Jul 2026 02:00:21 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:21 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:21 +0000
Files and hashes:         1: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (hash: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ=)
                          2: 2_JDrlEf39vL8qmUM9CaRXwOr04.roa (hash: /7e65G97+6p4mluseOQELP9OxF86iI75OQ+5Z/TQzmA=)
                          3: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (hash: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0=)
                          4: 6NzUbUPfmG_2OYaxE5u0iljd-HM.roa (hash: GEVpwDXH3AnmmmYcwcQLhZ1oJzowlyvgSDom4fjBpAM=)
                          5: BVx20OvNIr_bjMiJlAuvJK99SH4.roa (hash: DO6SxTL8ZIDZlJLjGOfKoMzyvMaVazIOTTdETJq4hxI=)
                          6: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (hash: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w=)
                          7: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (hash: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg=)
                          8: MSewK7b92JObaKeUrbrsAb5fWQk.roa (hash: sWACoQHb5c7UneFSMmjv5A00HKxYwU6xUqQ/8qlbIPE=)
                          9: NqUE_7vgG-i019hpuas3mtpVIf4.roa (hash: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=)
                          10: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (hash: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU=)
                          11: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (hash: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g=)
                          12: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (hash: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=)
                          13: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: 2UD9nkyy42phwr7qjT6rZKyPrYeqDJ2D4wGJbFju6aU=)
                          14: qaltJRhtOumKjVHwnWVUetcuLl8.roa (hash: BGZRfPeZLiJVX41F+zt+HW9khnF21BsLuwIzvIKpNck=)
                          15: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (hash: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=)
                          16: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (hash: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA=)
                          17: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (hash: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=)
                          18: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (hash: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:3d:b4:4c:2b:cf:e2:70:a2:3f:13:07:f0:9f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Jul 27 02:00:21 2026 GMT
            Not After : Jul 28 02:00:21 2026 GMT
        Subject: CN=ae80317ab4e7e43e760130005c37a99aa679abf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:8b:15:c3:47:14:f9:36:78:33:9c:5b:60:
                    bd:82:15:ed:23:3e:96:16:ad:5f:50:ea:ec:75:96:
                    44:e5:e8:db:4e:9f:9c:60:b1:5f:d3:96:88:60:55:
                    b5:6b:95:be:3a:83:89:23:6a:46:75:59:3d:7a:b4:
                    8e:96:2b:69:df:17:2b:80:1b:0d:87:9e:36:fc:ca:
                    a8:7d:c3:28:67:e0:9f:35:b4:51:66:eb:2c:1b:69:
                    81:97:c2:7a:9b:50:6e:31:1b:00:14:45:bc:75:08:
                    ce:f8:79:02:0e:09:cc:db:e9:f7:b5:d8:d9:ac:26:
                    f9:12:11:51:c3:7e:06:48:9d:2e:10:a1:33:6d:b9:
                    b1:b0:c4:be:f5:ba:92:76:ea:d7:35:1a:24:d0:c4:
                    74:e8:22:13:38:30:50:fe:82:da:5c:45:c4:5f:0b:
                    7b:06:ea:d1:9c:4b:7b:ae:5d:6b:6b:46:a9:15:a0:
                    f3:e5:98:cb:e4:36:b0:05:c8:56:b8:91:a7:16:32:
                    00:4c:a0:37:89:34:92:80:2b:a9:08:70:60:6f:3e:
                    9c:9d:e7:7d:17:68:23:0a:8b:e4:4a:db:be:a2:aa:
                    a8:a1:8f:ab:c9:a2:43:fb:30:80:bf:34:6f:07:52:
                    27:57:ee:de:1b:0e:86:bb:a6:17:64:ad:bb:b9:12:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:80:31:7A:B4:E7:E4:3E:76:01:30:00:5C:37:A9:9A:A6:79:AB:F4
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:33:6f:03:e6:c1:58:6f:f3:59:a2:6e:e5:fe:60:23:cc:c5:
         1f:e2:48:d6:b5:a2:d2:15:00:f4:95:c0:46:62:32:06:14:48:
         7b:1e:a7:2d:a5:8d:17:d3:dd:01:d1:db:42:d9:f9:4f:51:76:
         a3:81:96:33:aa:69:39:c8:4a:e3:01:82:62:d0:06:87:b9:9a:
         df:c7:81:db:01:33:16:e1:f6:9f:bb:99:5a:20:63:89:7d:62:
         f1:f1:c3:9c:c8:57:34:34:54:e4:01:2c:2e:0f:33:d9:ff:91:
         c8:a4:04:eb:55:2a:2c:54:92:3f:0a:d4:a0:5b:bb:96:39:12:
         94:09:e6:0f:5c:36:6e:e1:97:f5:23:58:65:1e:20:43:7a:98:
         a3:77:67:52:7c:66:14:a1:f8:83:8c:49:8b:ef:1b:72:8e:80:
         09:60:76:4d:df:11:45:18:71:ac:d6:2a:7c:88:98:3f:b0:ac:
         1e:98:b8:59:5d:19:a8:a6:af:5c:03:d0:c9:41:20:b3:38:54:
         0d:5f:6a:ab:b8:ea:17:35:ee:e7:f0:6a:75:06:e9:17:11:b5:
         34:70:ce:b3:0d:66:e0:c5:51:15:83:0e:58:f3:a2:e2:1d:2d:
         1b:de:ca:ec:59:33:01:75:e7:ca:76:7e:38:52:a5:f2:b0:8d:
         22:cc:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:28 2026 by rpki-client