Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File:                     qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier:          PDATUvOtS8uQt6jzZbzJ3AsbO+wZGOJpe5eEXt4DMic=
Subject key identifier:   4B:50:3C:C2:A5:D8:54:BC:03:0B:F6:70:30:12:5A:94:55:20:6C:79
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer:       /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial:       019F8643E538DA26C70E8635C23215404495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number:          1953
Signing time:             Tue 21 Jul 2026 20:00:24 +0000
Manifest this update:     Tue 21 Jul 2026 20:00:24 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:24 +0000
Files and hashes:         1: PI8Cnztdcg0Orhj3hNj0SOev2FA.roa (hash: F0vD9Ue05tdjzmjFbmnRff+jKy6sKGlrmWL0EX8ad5o=)
                          2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: gua0MU9Dt5NKjFmQ+Zb7r/lYvrBUFvX76bxg3Im/hgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:43:e5:38:da:26:c7:0e:86:35:c2:32:15:40:44:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
        Validity
            Not Before: Jul 21 20:00:24 2026 GMT
            Not After : Jul 22 20:00:24 2026 GMT
        Subject: CN=4b503cc2a5d854bc030bf67030125a9455206c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:cf:12:5c:7c:0f:f0:01:dd:e0:03:8d:c8:
                    db:fa:5f:7b:d5:dc:b4:9a:4b:6e:7c:8a:9b:1f:1c:
                    a2:6c:ec:1d:20:cd:20:2d:fd:10:aa:8f:7e:6e:41:
                    0c:08:25:aa:1e:0c:eb:b2:87:8c:c6:72:5a:ce:1d:
                    40:db:29:9a:8d:f1:9b:12:19:e5:a4:7b:88:43:10:
                    dc:b2:84:a0:96:0c:fe:6a:82:d2:cb:60:28:28:01:
                    e9:14:5e:14:61:73:fe:46:1f:59:39:e8:e2:3f:f2:
                    4e:6f:25:93:3b:db:b9:79:30:4c:93:31:ca:d1:22:
                    91:9b:53:63:c3:d8:b1:c3:5f:a3:17:e8:d3:85:46:
                    fa:30:75:5f:fe:d1:98:57:2e:e4:2b:aa:be:0c:c1:
                    4b:92:2e:42:73:7c:22:36:0b:e7:5a:ba:3c:f1:ef:
                    fc:96:05:e0:e9:67:6d:09:8f:bd:a8:a5:f3:09:07:
                    d4:b1:49:49:b0:2f:ee:12:72:c9:3f:25:b7:de:07:
                    67:e8:fd:b9:81:8e:36:e2:fe:60:36:ea:03:6f:3f:
                    b7:33:d1:83:8c:e4:bc:55:87:6a:0e:e4:ed:9b:0a:
                    d9:1e:02:d7:05:7e:8d:46:eb:9a:bb:f1:ce:48:79:
                    93:b8:e8:a9:4e:d9:40:f1:c1:a8:fb:58:60:db:b3:
                    d2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:50:3C:C2:A5:D8:54:BC:03:0B:F6:70:30:12:5A:94:55:20:6C:79
            X509v3 Authority Key Identifier:
                keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:2f:9d:4c:a0:ca:8b:a7:96:6e:e6:96:28:76:35:23:1d:
         a8:b1:0d:85:d0:04:ab:ff:4b:8b:ed:99:7b:fa:14:3f:e9:df:
         36:7d:ba:19:c3:55:fc:1d:f7:5a:2a:da:69:0a:20:7a:f5:f9:
         e6:01:a9:71:e3:11:90:02:c9:be:88:0d:98:d1:82:c9:d0:c9:
         8c:0e:ec:30:69:79:c2:f0:6f:70:39:0a:f1:42:e4:22:9c:36:
         21:bc:fa:f4:79:86:d3:64:e1:5b:fe:ca:64:51:dd:9c:76:4c:
         1d:10:bb:a9:bf:5f:f9:3a:71:10:3a:22:90:21:7d:35:1f:0e:
         4d:17:6e:90:77:e3:ef:db:be:f7:ef:07:d5:d7:37:5d:4c:ec:
         df:d8:ff:1b:fb:3b:e1:e5:81:b0:4d:7d:3d:6a:f7:a9:0d:0d:
         bd:2a:8d:0f:00:e1:5a:43:27:72:2a:dd:22:ee:f2:7d:e3:da:
         dd:b8:56:84:de:2b:a9:95:84:40:d1:b4:61:6a:69:cb:f6:83:
         7b:4e:91:96:4e:5d:52:96:fa:2d:b3:12:a1:b7:90:a4:cb:f1:
         20:bc:69:f1:d5:7e:bd:91:27:93:09:be:0e:1f:1c:c9:37:e2:
         31:28:ab:ad:b1:19:da:c7:9a:39:4b:97:03:e2:fa:84:4e:f7:
         77:c2:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:47:11 2026 by rpki-client