Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File:                     QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier:          LMDVjWibqFj637fxkm/ieG2d1DINVWDqSPzZ044HnF8=
Subject key identifier:   37:2A:2C:19:71:66:64:00:7C:02:7F:00:8A:17:D2:A2:E9:1C:71:E5
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       019FBC20C01F0270EA567816D7B2A168FC27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number:          1A2B
Signing time:             Sat 01 Aug 2026 07:01:30 +0000
Manifest this update:     Sat 01 Aug 2026 07:01:30 +0000
Manifest next update:     Sun 02 Aug 2026 07:01:30 +0000
Files and hashes:         1: EI7CwvWnDzGoyUcQkEgispb35mE.roa (hash: t9+WU2EdfrtjbLHdXRpNBIukhT3LimVMvmcXGL3pKdk=)
                          2: J858U9M3Pu6Cp06GzOrCZktlpEU.roa (hash: /2LUChah4azSZ6Ix+z1gFSt47yg5myoIj13SluIuDYE=)
                          3: Kxo0teOZwloERI7QoSNyGmfd6Lc.roa (hash: l3pXjBFAyH7G75ccUcJxbRG9IMuyFszbxgxuaSQ++ko=)
                          4: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: X4G3Y5bwKPk1teKHTHy+mJfylic0mfEvf0PajNxOlOs=)
                          5: y-5g3Ds5jdVaEjYUTBRxwj9KePk.roa (hash: xkFS8ndIcGJCTnEuH8OY0/pn+DbrNxwHF7zMRFER0qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Aug 2026 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:bc:20:c0:1f:02:70:ea:56:78:16:d7:b2:a1:68:fc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Aug  1 07:01:30 2026 GMT
            Not After : Aug  2 07:01:30 2026 GMT
        Subject: CN=372a2c19716664007c027f008a17d2a2e91c71e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ee:16:a0:9b:89:09:dc:2e:75:1b:9f:a7:e0:
                    89:18:77:2e:05:40:cc:45:c9:17:12:aa:2d:c5:b9:
                    5a:cf:8f:cc:3a:f5:28:e3:29:ef:a1:56:d5:88:3a:
                    76:37:5f:cd:27:04:e1:1f:9f:a3:ca:e6:ce:6d:20:
                    a4:92:50:7a:3a:8f:c0:e8:df:0b:96:93:e8:d4:a8:
                    13:50:ca:30:78:0d:29:e0:fa:50:44:ae:b4:57:fc:
                    54:27:74:68:9c:59:43:37:4d:c6:a5:a1:7d:74:86:
                    b1:ba:b6:40:f3:0f:65:ad:be:a3:a1:50:40:8d:4a:
                    97:b5:dc:4a:05:a9:44:99:11:93:a7:c4:ec:c6:3a:
                    0e:9f:26:79:c0:80:f4:97:f5:dd:1a:1b:b3:49:7e:
                    32:ad:10:72:24:e4:43:05:a2:a7:da:fd:cb:6e:0e:
                    c6:a0:9c:39:95:fa:77:42:56:e2:4d:76:ee:3a:0a:
                    e7:f9:dc:09:bb:e5:fc:5a:bd:e3:02:d4:33:76:88:
                    ea:9c:62:c1:19:0d:50:38:96:3e:a7:07:e9:0c:5d:
                    29:4a:5e:2c:d3:61:18:e8:0f:85:4b:d6:36:68:80:
                    51:1d:71:cf:fd:25:06:d2:77:2b:25:20:20:e5:2e:
                    70:a6:6a:66:dd:de:2d:1a:a8:0d:16:1b:f9:71:00:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2A:2C:19:71:66:64:00:7C:02:7F:00:8A:17:D2:A2:E9:1C:71:E5
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:4c:c9:4a:cb:6a:01:34:52:8d:ce:df:13:8a:c8:79:19:
         76:1c:97:46:3d:71:f8:4b:d5:67:fe:53:94:2c:e5:63:e1:aa:
         48:1b:6a:e0:6d:eb:a1:86:8a:c9:c1:57:b7:ea:a4:cf:4d:a0:
         28:fd:d9:a0:93:5e:fa:ae:e2:6c:be:43:7e:57:c3:e3:46:43:
         3a:13:96:1c:d7:30:ac:6b:ea:5c:5f:09:e8:b9:b0:b0:ee:78:
         a0:b5:c3:e9:5e:58:4f:17:a8:61:fd:fd:44:96:e2:c6:93:67:
         37:06:5e:95:57:ed:6c:3c:57:9a:c6:c7:7a:71:e5:da:ea:18:
         1b:e9:3d:fc:98:fd:11:2c:08:9b:64:2c:5e:82:0a:52:de:ee:
         00:03:1d:ea:18:bd:cf:28:15:81:6b:1c:e3:4d:4d:e5:df:92:
         5a:09:92:eb:13:a2:72:49:71:f8:b3:c7:23:95:2f:fd:81:95:
         65:ee:17:72:f6:79:2d:af:91:b0:e7:d1:02:d6:ae:aa:74:d9:
         98:e9:13:84:0a:fc:69:62:6c:ee:52:5f:9d:26:aa:2d:7a:a2:
         5a:71:5e:fe:71:f3:89:88:4b:93:4d:59:ae:e4:ef:4b:23:d9:
         c6:7a:d2:cf:bf:59:15:5a:42:c5:bc:62:ff:0d:7f:79:b6:36:
         75:cc:71:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 15:22:04 2026 by rpki-client