Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File:                     q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier:          pCyDWxRZ/ni0U9I/gxHz9tiLItBeAWoizePT0VtouO4=
Subject key identifier:   47:BF:42:E4:85:9F:46:F8:EC:59:25:B5:9F:45:4B:A2:39:42:15:2D
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer:       /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial:       019FA184533EDC1856C86CFEA47C7BD509EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 03:00:31 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:31 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:31 +0000
Files and hashes:         1: Nx1ZmF0LLUBVNb7pg5SUQFqkEEo.roa (hash: 7h8Dusgv5GisCOAGKVB6gWNCmRgBLzLbZbpY03tENm0=)
                          2: jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa (hash: nFOTFG+7OrEIpqu+RBWcBN5R7HeTDegtuQdJz0N3Rss=)
                          3: q-cmnczAq_R4WQig-JxyBCeiu3E.roa (hash: QW62YPpx0nobzbNY1r86LME0OVZNaU0nQ5C4usrbmMM=)
                          4: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: 4rsrAyMrej0a5poWFaSmpqRb5/bAbspSkwXLmgNpXFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:53:3e:dc:18:56:c8:6c:fe:a4:7c:7b:d5:09:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
        Validity
            Not Before: Jul 27 03:00:31 2026 GMT
            Not After : Jul 28 03:00:31 2026 GMT
        Subject: CN=47bf42e4859f46f8ec5925b59f454ba23942152d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:61:d4:09:64:7c:73:4b:a9:6e:fb:da:6a:
                    1e:b0:1b:3e:67:57:c5:90:0f:3d:ac:b3:3d:f5:50:
                    8d:de:4e:da:e0:d6:e1:cb:7d:c7:81:5f:b2:97:90:
                    20:a9:84:c4:a9:f9:e0:2f:d5:1b:4e:b0:a5:78:a0:
                    e1:3a:38:1a:b8:bb:00:7e:29:12:8d:82:6a:1a:40:
                    8a:d8:94:37:5c:92:73:d8:ed:44:26:63:69:3a:9f:
                    db:7f:61:88:bb:b7:77:92:30:4d:8f:95:4b:8f:1c:
                    36:0e:c0:32:d2:5d:b4:8f:2f:c4:bd:7c:ca:d2:de:
                    af:21:04:52:9b:50:5d:12:d3:a5:bb:14:99:50:63:
                    14:71:66:a4:44:48:ec:eb:18:c8:10:14:7a:68:94:
                    b0:19:1c:d6:9d:8e:6b:a5:b9:0f:f3:01:64:23:6e:
                    73:6b:93:09:76:47:42:62:9a:9a:1c:79:bd:29:2c:
                    c6:09:eb:ac:86:ab:9c:85:47:69:89:56:41:ff:c2:
                    19:ac:dd:d9:e9:f7:f0:82:cf:6b:5f:aa:47:f3:fc:
                    83:bd:31:00:eb:1b:26:a2:06:1e:bb:10:6e:c7:57:
                    e2:f9:35:48:22:73:10:20:ab:b2:cd:b9:31:9f:17:
                    16:0b:a5:19:7e:60:92:98:b5:1f:63:83:c7:14:b9:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:42:E4:85:9F:46:F8:EC:59:25:B5:9F:45:4B:A2:39:42:15:2D
            X509v3 Authority Key Identifier:
                keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:db:4c:8f:be:1c:11:e0:5e:5d:78:e1:9a:0f:5a:c2:fb:a7:
         cd:3e:03:9c:89:c0:da:54:f1:5b:15:5e:5d:bc:17:40:53:a3:
         7b:7b:16:da:19:e0:7a:7e:54:41:f2:2f:05:f5:90:5b:3f:99:
         de:5d:d5:47:55:cb:29:42:82:db:31:ac:a9:bc:c2:fc:fe:a9:
         e2:8c:22:1b:34:2d:7e:15:17:4d:d0:e3:40:33:5f:d0:4d:4c:
         f8:e3:68:ee:ed:be:8f:18:d7:17:d8:03:b8:96:6c:9e:1c:c4:
         6f:2f:72:2a:95:5e:57:ad:8e:60:09:0c:bf:d6:88:cb:1b:84:
         b8:ad:e4:6a:a3:85:31:64:1c:37:4a:79:05:8c:4e:c0:7b:90:
         8c:0a:d2:e0:5e:93:93:40:fb:99:e6:15:47:9e:99:02:af:1c:
         f7:e4:fd:46:7d:24:a1:cc:0b:c9:7e:c0:e7:be:79:b3:cb:de:
         b3:7a:24:38:fc:7e:14:ae:3a:4f:76:a7:72:55:45:bd:43:66:
         1f:48:08:39:29:60:38:ab:3c:38:ac:aa:91:55:53:e4:02:98:
         2f:04:dd:35:b1:27:71:42:5f:93:36:fd:e8:78:70:54:09:91:
         09:17:66:ae:9d:40:08:f8:51:2e:57:93:ae:df:e2:88:77:b4:
         88:33:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:53:55 2026 by rpki-client