Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
File:                     qreGFvOzntSCDQTOCY6nwgZVMUs.mft (raw, json)
Hash identifier:          PrdXg/vOFO/FAe8hcJzneSz38ImNPZbfnRg631X9ZB8=
Subject key identifier:   75:B1:9A:71:C8:9D:DA:32:66:CF:93:48:32:42:39:63:66:96:EF:16
Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
Certificate issuer:       /CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Certificate serial:       019FA2CEE20BE8EE37ACA10DA9DE78673660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 09:01:34 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:34 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:34 +0000
Files and hashes:         1: qreGFvOzntSCDQTOCY6nwgZVMUs.crl (hash: 9bvjuVu8srinDZBOZJYqwdUVuwoKe/RQIb/BgaO1U2Y=)
                          2: zEwISNAn9YCW0Wsdm5RUCpSTUKM.roa (hash: pK2Nt8VgUMcXHhwtUp37qnY4MdMfrXTVdUqLGk4kB7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:e2:0b:e8:ee:37:ac:a1:0d:a9:de:78:67:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b
        Validity
            Not Before: Jul 27 09:01:34 2026 GMT
            Not After : Jul 28 09:01:34 2026 GMT
        Subject: CN=75b19a71c89dda3266cf9348324239636696ef16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:4a:1b:fa:15:7c:bc:be:75:7f:4d:88:9a:
                    18:05:fa:09:65:e8:80:d7:bd:38:de:c3:a0:27:d1:
                    ff:bf:51:89:5d:6e:e9:30:bf:38:f3:02:31:85:4d:
                    46:46:93:a2:9b:ad:f3:09:e0:0a:a6:8c:60:04:a6:
                    4c:5e:8f:af:61:01:a9:44:f1:e4:2d:97:95:7c:e2:
                    bf:49:ad:f4:ba:11:e0:20:e7:11:74:48:d0:d8:b0:
                    c2:1d:7f:36:6a:0b:8c:d5:71:0b:bd:10:58:36:da:
                    c9:89:8d:e6:ae:a7:18:5d:d1:f9:d3:e4:05:dc:6a:
                    e6:ea:5e:2b:1e:e6:40:11:44:2c:f2:d2:0f:d6:9a:
                    15:9b:d1:6f:ad:7d:d0:8a:22:bd:29:47:ef:77:ad:
                    d6:e3:37:62:e6:5d:d5:ff:41:b0:8e:74:ad:ad:dc:
                    3b:44:b7:2a:2e:27:23:38:89:c8:57:8a:92:1d:21:
                    41:85:fa:fe:3b:0a:f1:dd:38:95:56:94:64:c9:ff:
                    c6:05:6d:3b:2a:c2:6d:ca:df:bd:47:72:06:5a:d2:
                    b4:9d:c3:8b:ae:a9:91:e1:fd:0f:15:2d:e0:31:4f:
                    15:d9:31:f3:61:4e:9a:7e:07:b0:77:d0:13:9c:25:
                    35:b2:f1:cb:bb:2b:3c:f8:b2:bc:ea:bf:f6:11:9d:
                    65:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B1:9A:71:C8:9D:DA:32:66:CF:93:48:32:42:39:63:66:96:EF:16
            X509v3 Authority Key Identifier:
                keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:86:e0:ae:2c:43:5b:f1:62:cd:a3:5f:46:d3:eb:28:72:
         70:26:27:dd:a5:40:9a:73:29:52:67:de:15:f6:6f:77:2a:89:
         dc:47:1e:8b:65:b3:86:7f:03:02:1d:c8:f8:6f:60:df:2b:73:
         ab:88:eb:91:fd:0d:77:47:a7:fd:53:51:2e:30:44:70:3c:54:
         21:71:3b:95:ff:ed:39:77:e2:91:1d:d3:00:bc:4e:4a:34:52:
         38:ea:33:7b:fe:6a:2a:96:43:ad:ed:e9:15:4f:84:95:ce:3f:
         c7:cc:16:87:34:77:35:ca:ea:61:91:a8:6d:f3:cf:81:f3:45:
         80:2d:0d:cc:a7:06:84:c6:75:24:5d:68:1c:a1:39:17:f4:2d:
         25:8b:12:b9:b6:18:a3:26:eb:f7:c3:3e:5b:35:33:70:ec:67:
         a9:3b:3b:d1:03:24:8c:7e:56:5f:c7:e4:f5:cb:b5:e1:bf:e0:
         ec:d5:1d:9d:51:ab:ae:be:ac:3a:26:37:b2:51:31:62:25:b3:
         ed:55:f7:81:cf:f5:8a:64:e5:3e:d4:bb:a2:43:4f:43:20:57:
         e2:ae:f4:fd:34:de:59:49:33:6d:a3:fc:9e:c1:c2:2e:ea:bf:
         50:c5:18:5e:63:f2:6c:d0:d3:00:e0:67:f0:9b:ae:e8:7a:19:
         d9:91:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:12 2026 by rpki-client