Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File:                     QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier:          J854XhZUVMknjf7GQUequg0ML5TJ2UMdmDqjgvAAvQQ=
Subject key identifier:   56:11:B4:2C:10:AE:C3:C3:D8:CB:2C:9A:E2:74:C5:75:39:FC:C0:8D
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer:       /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial:       019F859F704E97211C3C721416E9CE0E947C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number:          19BF
Signing time:             Tue 21 Jul 2026 17:00:46 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:46 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:46 +0000
Files and hashes:         1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
                          2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: 4cYLrk58ozTetRZ4kcS/Qm6f7EqD9WepdGOSSqSvRVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:70:4e:97:21:1c:3c:72:14:16:e9:ce:0e:94:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
        Validity
            Not Before: Jul 21 17:00:46 2026 GMT
            Not After : Jul 22 17:00:46 2026 GMT
        Subject: CN=5611b42c10aec3c3d8cb2c9ae274c57539fcc08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:e6:48:8a:a2:f5:38:14:13:39:dc:83:ee:
                    60:af:51:8c:21:7b:24:ca:4a:2b:b0:e5:f2:42:df:
                    d4:a2:d0:e4:77:3b:f1:a2:03:76:ab:0e:a9:7d:fe:
                    60:f7:b8:ee:92:a5:5b:ba:72:f9:ba:a4:a8:2e:35:
                    eb:87:18:2a:73:8a:81:9c:3d:b5:b9:9b:a2:bd:ad:
                    f3:b5:67:31:05:f0:00:90:af:91:dc:61:39:7d:63:
                    3d:a7:8e:e5:cd:45:cc:56:bd:21:ab:8f:2c:3b:4a:
                    50:36:1a:5c:6a:9c:43:c7:79:89:e7:03:ac:75:73:
                    1f:48:9c:00:dd:16:53:39:c0:1b:13:67:9b:3d:8e:
                    ba:74:84:49:72:16:6f:86:be:c9:9f:06:31:d2:95:
                    60:39:5c:be:80:b3:2b:37:6c:37:db:b4:f4:39:52:
                    5a:13:1f:e6:27:39:c1:77:ec:97:83:7c:86:8f:ac:
                    ad:86:35:68:1b:8e:00:a8:29:ba:b8:53:33:32:2c:
                    4d:91:0d:7d:cf:dc:16:d3:cb:4b:b8:d8:18:ed:bf:
                    9a:f7:7e:75:e4:4d:5c:e5:de:ca:19:85:56:ed:aa:
                    f1:83:3d:96:60:41:e8:c2:08:49:e1:1c:e2:cf:41:
                    87:fe:9e:5f:08:f0:1d:73:7b:59:3d:af:57:7d:07:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:11:B4:2C:10:AE:C3:C3:D8:CB:2C:9A:E2:74:C5:75:39:FC:C0:8D
            X509v3 Authority Key Identifier:
                keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6e:4c:8d:29:a8:87:36:ff:6c:df:7b:a6:e5:1c:9a:e2:6e:
         48:88:fe:b3:9e:be:25:9e:98:f8:a2:2d:08:92:95:91:d7:bb:
         39:5a:d5:e9:b7:ad:0d:b7:cf:79:67:3e:db:fd:f9:9b:45:b8:
         49:29:1c:b3:08:b7:6c:b5:e7:07:e0:a1:1e:bd:82:0d:fb:81:
         3a:70:7e:ef:e5:d1:5b:51:ab:5b:f8:2f:8f:b2:83:28:10:a2:
         b3:db:c9:a8:56:9b:43:dd:31:82:04:d9:ec:0b:67:b1:38:e5:
         ce:5f:a4:b2:05:94:ae:af:65:ba:61:81:78:2d:99:5e:88:d2:
         09:27:e1:08:24:20:c1:fc:b9:f6:18:ff:f9:ec:25:fc:09:3d:
         38:b2:e7:1c:8b:c4:62:aa:bb:e4:f9:24:8d:b7:88:00:2d:1d:
         c8:7a:c8:57:47:f9:97:5f:fe:92:47:24:72:73:e0:05:89:03:
         da:c9:10:af:45:49:16:56:b2:76:17:61:43:fe:79:51:5d:28:
         04:92:6b:69:91:8a:bc:1e:37:08:af:8f:36:94:06:a9:30:91:
         4b:e4:34:b6:2f:8c:7f:46:39:c2:21:55:bd:c9:0b:fb:7c:bc:
         2d:ea:9b:14:cd:60:7f:47:57:65:16:0f:a1:1f:3b:8d:ba:fe:
         31:31:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:26 2026 by rpki-client