Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File:                     qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier:          0YFDClc4u5HU6C4zZIFnTMN7Q3PS/OwpXbenA8/cxro=
Subject key identifier:   22:ED:41:3F:3C:31:4A:0D:E6:F1:B4:42:E4:76:97:4C:E5:42:14:27
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer:       /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial:       019FA184A703F408A923352CFA23E665350D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number:          073A
Signing time:             Mon 27 Jul 2026 03:00:52 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:52 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:52 +0000
Files and hashes:         1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=)
                          2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: Es9/4qrFwKtgPReUULGkVlLM3RUwp/xX8BbScLV+DMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:a7:03:f4:08:a9:23:35:2c:fa:23:e6:65:35:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
        Validity
            Not Before: Jul 27 03:00:52 2026 GMT
            Not After : Jul 28 03:00:52 2026 GMT
        Subject: CN=22ed413f3c314a0de6f1b442e476974ce5421427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:02:6e:81:7e:9f:db:17:a3:08:33:2e:4a:
                    16:82:01:1d:b7:f8:0d:f7:b5:4a:14:e5:af:14:a6:
                    87:d3:70:b3:3e:b6:96:6f:46:bb:70:39:50:b7:7c:
                    4b:4a:35:bd:dc:4e:de:43:80:40:7e:c3:ed:0d:51:
                    14:47:f2:d8:04:70:1e:d4:25:95:12:c9:6d:f0:8b:
                    e3:65:19:4a:ae:01:08:ae:43:02:3f:9c:46:ca:27:
                    6e:ac:77:e8:93:f6:33:4b:1c:36:f0:d9:f4:c3:93:
                    7e:2c:aa:3f:01:86:07:5b:03:27:d1:69:5d:a5:a8:
                    5f:bb:84:5d:d7:a9:2d:35:3e:61:a6:b5:77:58:c1:
                    ef:e9:63:84:b6:52:26:01:a8:30:87:0a:ec:29:14:
                    b2:22:b5:c3:d7:30:c6:40:10:63:c4:0d:3e:e8:b6:
                    06:47:4e:76:ac:84:9f:e5:63:e4:06:9b:36:07:d1:
                    b0:5f:f6:bb:ab:81:7f:19:1c:ec:f6:08:41:56:bb:
                    9f:6e:88:c0:1b:bd:81:a9:74:44:84:91:32:2b:ea:
                    81:cb:e1:df:18:1c:9b:7a:f5:27:2d:b2:7b:e3:83:
                    b5:9e:80:36:14:83:6a:d9:c6:0b:08:4d:28:6d:61:
                    21:91:55:32:23:14:64:d7:9c:bc:e6:75:72:f5:48:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:ED:41:3F:3C:31:4A:0D:E6:F1:B4:42:E4:76:97:4C:E5:42:14:27
            X509v3 Authority Key Identifier:
                keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:bb:65:1f:1f:b4:fa:ab:b2:27:32:6e:2d:df:4a:15:99:43:
         a1:d1:e4:4d:ed:61:f0:f1:2f:c0:4d:32:43:87:5d:6b:4d:19:
         92:d2:90:e8:79:ed:4c:bb:45:b2:20:d3:8a:6b:fd:3c:16:13:
         7b:a9:9d:6b:41:41:12:ec:5f:4e:aa:6d:ec:11:9c:79:ef:89:
         13:ca:25:ab:74:09:79:4b:50:a6:1e:10:35:01:1c:9c:2e:09:
         30:e5:f6:8f:b0:a3:1e:73:dd:81:40:52:cc:f1:9d:cf:b5:94:
         44:3b:c5:e1:b3:73:0c:ca:95:79:21:ee:ba:85:84:42:9c:12:
         2c:ad:c4:39:9d:db:9d:a6:a8:c9:da:2b:38:0e:85:19:36:6a:
         6f:4a:fd:20:91:bb:bb:7a:08:95:2b:70:33:65:57:e1:84:bc:
         9d:9f:c0:46:4b:32:0a:6d:0d:c7:42:c1:59:29:11:84:04:08:
         bd:a9:c0:d7:60:88:80:d4:77:e9:42:76:f3:47:55:16:7e:d7:
         4c:a8:d3:d8:b3:f5:3c:a9:35:6f:f5:b9:56:e5:d9:07:56:2f:
         84:cb:3a:50:02:bd:f2:43:02:3a:7a:03:23:61:de:5c:9d:f1:
         98:56:69:81:03:75:d8:6d:4b:74:7c:c8:4a:66:bd:e7:bb:c3:
         56:1f:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:17:30 2026 by rpki-client