Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File:                     q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier:          PnCH/8RI+VcFu1L/xJs00n/x5OzLtdxQegQJc9IYQeI=
Subject key identifier:   B4:8D:44:AF:88:5B:C4:8F:69:F7:91:77:E9:04:9F:E5:4B:5B:4C:D9
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer:       /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial:       019EFD965E58281FBEEE9192F7E4EEFBC071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number:          19B4
Signing time:             Thu 25 Jun 2026 07:02:30 +0000
Manifest this update:     Thu 25 Jun 2026 07:02:30 +0000
Manifest next update:     Fri 26 Jun 2026 07:02:30 +0000
Files and hashes:         1: 9AQTjaHWKJCXsC30oHllY8BTYu0.roa (hash: 7fmthrhoa3IJWK083wDCI4y5oXM7TE8HLdralxn1zCQ=)
                          2: D8zt2B-zZXXGmbmFyYrVgX5VlhE.roa (hash: 7mktpizMJp0UVGb90YuRIUsj5vrCk7DRcIeq+0Shwlw=)
                          3: FR0TMzudRUII0Fa6Jf04w_3WI20.roa (hash: AJPhPEVbqaILZMRzPtnEJF9G4HZjyUJiNfN1jrcINf4=)
                          4: buqYzFTyi7wPpzd9BAt1N0qAHXU.roa (hash: 7fssqNhBi5yImjk1Vr2WL9ol/xv6RFd9KhgAwqTB6Mg=)
                          5: cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa (hash: iFLFl7A8YTDlZs6b2ZtDXNK2nv2uM/FdHMVOEy9wgkc=)
                          6: ffozWOJhdYTlZsYd3LUTrpAH84g.roa (hash: LqRzq5DyTPzo0AG3Z9lInY0bhS/P0365y/30CPyVkNM=)
                          7: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: B7QgKAW4pGRgRB+a183MZjsEASHYcMx30+aRpbMIJ8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Jun 2026 07:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:96:5e:58:28:1f:be:ee:91:92:f7:e4:ee:fb:c0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
        Validity
            Not Before: Jun 25 07:02:30 2026 GMT
            Not After : Jun 26 07:02:30 2026 GMT
        Subject: CN=b48d44af885bc48f69f79177e9049fe54b5b4cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:3b:bb:0c:25:e5:91:d7:98:4c:07:51:2c:
                    17:a7:8a:6a:19:56:e1:a4:7b:70:8a:ef:fa:b8:dd:
                    8c:5a:78:9e:51:e7:9e:2a:3c:7e:4c:d3:1b:66:e8:
                    71:85:42:45:6e:46:2e:34:99:86:42:b7:ca:ad:b6:
                    05:3a:88:ed:dc:dc:01:c4:b1:52:8e:42:84:d5:5b:
                    9d:84:03:e3:2c:ac:43:8b:da:d1:b6:a3:3f:2e:79:
                    1a:63:6a:60:3d:8f:d2:76:b9:bf:60:72:ab:6f:15:
                    93:38:88:f8:1f:f1:77:be:b1:e8:05:6d:a5:8d:9c:
                    86:5e:b8:e4:e9:07:e9:d4:a7:5d:d8:b3:cc:69:55:
                    67:98:89:d7:e8:50:b1:0d:92:f8:80:ee:ad:8b:41:
                    89:35:31:83:78:f3:e3:23:e3:9e:d4:8b:0c:32:22:
                    4a:28:c8:68:0c:3d:39:b8:9b:1a:07:64:9e:a8:e7:
                    61:b9:4c:5d:1b:f9:7e:b2:97:18:b1:d4:1a:ba:b6:
                    85:89:03:e4:7d:af:d1:ce:cd:92:56:55:e2:53:25:
                    d9:c0:5f:15:84:75:4d:34:38:bf:fd:d9:b0:d8:de:
                    3a:04:ca:69:0c:7b:a4:0d:65:86:76:d5:42:5f:fe:
                    35:23:c4:6f:b8:b8:a5:d5:0c:a0:1f:18:91:36:30:
                    40:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8D:44:AF:88:5B:C4:8F:69:F7:91:77:E9:04:9F:E5:4B:5B:4C:D9
            X509v3 Authority Key Identifier:
                keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4d:47:78:bb:ea:bd:ed:c2:81:26:af:40:3a:88:40:da:69:
         2f:ee:35:66:2c:10:34:a2:ef:d3:e4:0e:32:d8:d8:87:76:b0:
         de:aa:bf:fd:71:ff:da:8c:3f:93:c1:8a:0b:de:12:3a:67:a8:
         ee:6d:e4:42:f2:d3:e3:3c:c6:38:1b:d5:fb:38:c0:65:b6:1a:
         8a:9d:0d:f5:4b:93:66:a8:88:82:4a:73:65:db:cb:d1:b1:73:
         18:99:1e:51:4f:b5:77:c8:cd:a0:05:e6:ce:47:7c:eb:e4:bb:
         e3:8c:3d:96:25:8d:e4:93:68:79:cf:2e:d7:70:8b:77:22:26:
         85:1b:32:3d:7d:e5:d8:da:00:80:6a:58:38:08:f1:35:63:cf:
         10:f9:f6:72:40:b0:0d:8e:b7:26:31:c7:3a:08:ee:7e:c3:f0:
         29:9d:d3:21:d5:ef:2c:df:da:ed:35:30:d4:3c:36:94:24:20:
         19:24:02:a0:c8:7b:d0:06:8e:c6:d5:7e:62:1d:54:2d:71:27:
         a8:5f:48:7b:6c:0f:f1:07:5b:49:40:cd:fb:6a:f0:56:aa:18:
         f7:db:33:01:d1:a8:f1:0e:56:d7:e1:48:8c:82:76:9c:d5:05:
         f0:b7:4a:d3:38:b1:26:16:12:fc:55:7e:5a:bc:6e:9d:c5:e8:
         18:b6:0e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 10:33:53 2026 by rpki-client