Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File:                     QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier:          I5hRuuoGQnDPbZEzkfs8hQrT6MEN6aTJqpvVofEeSEg=
Subject key identifier:   E6:E4:01:58:63:32:93:A6:68:DB:46:33:4E:61:43:91:5B:1A:2D:35
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer:       /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial:       019FCA1391B2E0269B19D7FBE1EE760D0815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number:          1937
Signing time:             Tue 04 Aug 2026 00:01:47 +0000
Manifest this update:     Tue 04 Aug 2026 00:01:47 +0000
Manifest next update:     Wed 05 Aug 2026 00:01:47 +0000
Files and hashes:         1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=)
                          2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: jgACV5cEBnqJADNiaa/C3/CKFc7RNgo4sW/spHFHX5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 00:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ca:13:91:b2:e0:26:9b:19:d7:fb:e1:ee:76:0d:08:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
        Validity
            Not Before: Aug  4 00:01:47 2026 GMT
            Not After : Aug  5 00:01:47 2026 GMT
        Subject: CN=e6e40158633293a668db46334e6143915b1a2d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:ec:56:c1:56:df:2c:a6:a2:97:dc:d4:3f:
                    f5:03:ad:e5:bb:8a:a4:53:86:f8:3f:a2:ed:7b:39:
                    e4:69:97:f1:25:49:ad:4a:b9:5a:b7:97:6f:4b:e5:
                    51:d3:5b:30:53:0f:a7:4f:e0:a8:96:24:b4:f2:34:
                    63:6b:03:94:eb:ae:b3:f0:7d:e8:b7:3f:86:d0:01:
                    f7:59:a0:f3:82:d7:9c:16:18:7c:37:4a:1f:22:b8:
                    a7:7b:fe:74:16:79:43:16:2a:ac:81:e0:b2:22:fc:
                    3d:b2:36:35:af:5d:e9:43:3c:ac:b7:e8:94:8b:10:
                    b0:0f:84:b7:de:70:32:f5:61:87:c8:01:0c:d6:34:
                    a4:b8:9e:3b:d3:4d:6c:e2:e9:63:48:dc:d8:47:9b:
                    8c:1f:8e:fb:82:5a:5f:51:86:97:05:52:55:c2:f1:
                    78:22:15:d9:53:1c:6f:c1:18:27:e0:9c:84:2f:c4:
                    a9:86:b5:22:bd:83:d6:5f:1b:bf:38:86:04:53:a1:
                    f9:1f:b1:fb:92:b8:55:c8:a0:fb:bc:09:9b:ad:59:
                    4c:55:37:18:51:27:fb:cf:7e:57:d0:65:90:91:d5:
                    19:86:5c:ee:6e:af:36:79:69:5d:b6:e5:69:4b:ce:
                    a1:f7:9b:0e:a6:86:37:0f:9d:95:3e:ff:d7:55:d7:
                    39:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E4:01:58:63:32:93:A6:68:DB:46:33:4E:61:43:91:5B:1A:2D:35
            X509v3 Authority Key Identifier:
                keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4d:9c:a5:54:bc:d1:ee:5e:94:0b:19:f3:4e:7d:5b:1d:89:
         9e:bf:7c:fc:d3:67:38:76:c4:3b:fc:04:4c:16:f7:3c:98:fe:
         04:e2:e7:1e:fa:30:c3:7d:79:4f:aa:d7:82:74:fb:66:2d:77:
         86:27:fc:0b:1e:20:17:71:b5:a5:4d:f3:4f:c7:01:f7:92:84:
         4a:40:9d:47:14:fc:9f:77:55:d6:86:9d:09:58:48:b8:04:f9:
         08:85:fc:8a:1e:1a:db:3f:fb:36:d8:09:26:66:c2:79:5d:8b:
         77:14:09:08:30:da:95:f8:fd:8a:1c:fd:5f:17:d7:37:bb:ff:
         9c:ac:00:b6:c9:03:1d:d0:ec:df:05:73:43:87:27:6a:99:e4:
         14:0e:9b:c4:92:40:5e:0c:a3:2e:84:a1:d5:ba:fe:2a:16:9c:
         0e:5a:70:fc:87:7f:70:47:59:c7:ba:dd:29:29:d8:96:4b:71:
         60:da:d5:b7:85:bd:5b:60:de:2f:c0:31:28:84:92:4b:01:51:
         bc:a1:d0:c9:11:8e:3f:ec:ea:7c:1d:b5:2f:5f:47:d9:2f:7a:
         cb:a4:c8:1e:c5:fb:bf:53:f2:5e:f5:31:2d:18:da:09:bd:76:
         97:5d:fe:46:40:7c:c3:bd:bb:d8:00:27:58:4a:c8:18:e7:0b:
         15:32:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 11:11:25 2026 by rpki-client