Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File:                     QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier:          3DE/eE7oU3vWCJ8bK10EoFfSWnbfDbLYLDvrQ3n+qAs=
Subject key identifier:   14:5A:58:33:F2:D2:A1:7D:D4:E0:06:09:11:20:3F:7B:B3:EC:0A:C4
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer:       /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial:       019F9F289031F49EBFC44F95A2258A158302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number:          0258
Signing time:             Sun 26 Jul 2026 16:01:03 +0000
Manifest this update:     Sun 26 Jul 2026 16:01:03 +0000
Manifest next update:     Mon 27 Jul 2026 16:01:03 +0000
Files and hashes:         1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: rTkFHrPsVUE/0pSXauWi7+h2RUAEFLbwdKlQo78ipNw=)
                          2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:28:90:31:f4:9e:bf:c4:4f:95:a2:25:8a:15:83:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
        Validity
            Not Before: Jul 26 16:01:03 2026 GMT
            Not After : Jul 27 16:01:03 2026 GMT
        Subject: CN=145a5833f2d2a17dd4e0060911203f7bb3ec0ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:27:18:1f:ab:3b:42:fc:9e:5f:81:90:e9:
                    61:cf:ad:71:d3:d5:18:aa:2f:60:95:9e:3e:30:a8:
                    00:20:0a:2e:b0:f5:fb:8a:4e:bd:e0:91:34:8b:ba:
                    bc:e4:97:2a:95:9a:10:a6:50:61:8b:5a:18:69:76:
                    06:1c:cd:16:c7:e4:54:f1:58:f6:41:77:1d:61:a2:
                    3b:bc:e9:32:ff:ac:8d:0a:06:68:0a:aa:73:f0:24:
                    05:76:e8:c1:87:74:1e:af:44:13:5b:f9:1d:d3:e9:
                    65:86:0b:29:df:41:dd:ab:c0:4c:8e:29:2b:3e:7c:
                    c8:3f:3b:72:d9:4f:f8:92:14:45:c2:2b:eb:0c:2e:
                    c7:d7:86:ab:20:c0:a0:3a:0c:d4:e0:be:03:bc:d3:
                    71:86:eb:30:21:ed:c6:5e:cc:18:42:55:20:f7:c0:
                    b3:df:79:0e:cb:2a:b2:be:59:76:20:01:45:8a:71:
                    9b:a2:f5:19:a2:07:f7:56:5a:e9:15:58:98:ba:1a:
                    64:c8:d8:03:e8:b1:95:20:d2:6a:03:5d:b5:5f:18:
                    8c:3e:48:85:25:31:63:ae:de:4c:d2:8d:44:ac:b6:
                    05:4d:3e:89:30:d0:c3:ab:77:94:6e:a2:6d:42:fa:
                    c3:f0:c1:56:be:4d:44:22:c4:11:33:1b:83:d4:80:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5A:58:33:F2:D2:A1:7D:D4:E0:06:09:11:20:3F:7B:B3:EC:0A:C4
            X509v3 Authority Key Identifier:
                keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:fa:ae:e9:0c:f6:78:e1:18:3f:a7:8a:76:ce:a7:9f:0d:
         74:61:7f:d1:b6:49:05:5a:9c:77:52:f5:f3:84:07:b5:d0:94:
         58:17:a1:7c:8e:27:be:b7:f9:b0:a6:8c:3f:ad:1f:d2:84:99:
         ff:85:35:69:2a:87:44:b6:cf:de:88:1a:db:89:96:d1:27:5f:
         de:1a:bd:0c:c7:e5:8d:ec:54:60:a0:32:b9:1f:b5:f5:7e:a1:
         c0:eb:ca:29:fb:29:50:37:90:a5:2c:dc:bb:54:56:78:44:82:
         67:6c:40:e9:a2:0b:13:be:c2:8a:63:d8:db:a1:60:22:08:2b:
         dd:fa:6e:5e:bd:92:5c:53:c4:37:00:bb:ef:cd:bc:96:1d:4c:
         1a:19:af:0a:84:06:fd:a5:21:21:5e:35:95:2b:b4:57:a9:e8:
         f8:0b:54:ac:0d:1f:8b:aa:92:4e:42:8f:98:fc:fb:57:43:50:
         2e:43:bd:fb:b0:47:1b:e4:42:cb:93:1a:75:ba:1c:bc:8b:e5:
         f0:cb:bf:91:c1:71:70:74:90:63:62:60:69:d4:4e:9d:43:34:
         55:99:fe:5a:5f:95:d8:d4:c2:38:c5:a8:51:d8:13:e8:61:d8:
         05:63:67:3b:93:0c:30:3e:bb:63:f5:89:1b:56:73:5d:12:34:
         b6:c3:3c:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fKJAx9J6/xE+VoiWKFYMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZDllYzVlMjI4YjRhZjdmMDNjMzQ1YmMzOTY3ZjUxZDZm
ZjhhMDkwHhcNMjYwNzI2MTYwMTAzWhcNMjYwNzI3MTYwMTAzWjAzMTEwLwYDVQQD
EygxNDVhNTgzM2YyZDJhMTdkZDRlMDA2MDkxMTIwM2Y3YmIzZWMwYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIcnGB+rO0L8nl+BkOlhz61x09UY
qi9glZ4+MKgAIAousPX7ik694JE0i7q85JcqlZoQplBhi1oYaXYGHM0Wx+RU8Vj2
QXcdYaI7vOky/6yNCgZoCqpz8CQFdujBh3Qer0QTW/kd0+llhgsp30Hdq8BMjikr
PnzIPzty2U/4khRFwivrDC7H14arIMCgOgzU4L4DvNNxhuswIe3GXswYQlUg98Cz
33kOyyqyvll2IAFFinGbovUZogf3VlrpFViYuhpkyNgD6LGVINJqA121XxiMPkiF
JTFjrt5M0o1ErLYFTT6JMNDDq3eUbqJtQvrD8MFWvk1EIsQRMxuD1IDmzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRaWDPy0qF91OAGCREgP3uz7ArEMB8GA1UdIwQY
MBaAFELZ7F4ii0r38Dw0W8OWf1HW/4oJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjkt
NmM5YjQ4YmRiZmU1LzEvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjktNmM5YjQ4YmRiZmU1
LzEvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZb6rukM
9njhGD+ninbOp58NdGF/0bZJBVqcd1L184QHtdCUWBehfI4nvrf5sKaMP60f0oSZ
/4U1aSqHRLbP3oga24mW0Sdf3hq9DMfljexUYKAyuR+19X6hwOvKKfspUDeQpSzc
u1RWeESCZ2xA6aILE77CimPY26FgIggr3fpuXr2SXFPENwC77828lh1MGhmvCoQG
/aUhIV41lSu0V6no+AtUrA0fi6qSTkKPmPz7V0NQLkO9+7BHG+RCy5MadbocvIvl
8Mu/kcFxcHSQY2JgadROnUM0VZn+Wl+V2NTCOMWoUdgT6GHYBWNnO5MMMD67Y/WJ
G1ZzXRI0tsM8eQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 21:23:35 2026 by rpki-client