Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          2/gRXy580vhuhN+JazBvSmsMPV4i0uwuP/5tIVaSJZg=
Subject key identifier:   CB:93:5E:6B:E0:FF:92:0E:61:28:75:6E:01:2B:9A:44:36:9D:D5:B3
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       019FA1841D55CF102DEE1011F3D4D6701393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          15AE
Signing time:             Mon 27 Jul 2026 03:00:17 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:17 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:17 +0000
Files and hashes:         1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
                          2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
                          3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
                          4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: BRVo+0aYevEE6Rsj4H7Soj/1BIqbI2+lwioeOP8aHIw=)
                          5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
                          6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
                          7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
                          8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
                          9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
                          10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:1d:55:cf:10:2d:ee:10:11:f3:d4:d6:70:13:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Jul 27 03:00:17 2026 GMT
            Not After : Jul 28 03:00:17 2026 GMT
        Subject: CN=cb935e6be0ff920e6128756e012b9a44369dd5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:35:20:a9:ef:89:8f:a3:34:10:82:c2:3b:
                    40:2c:ed:8f:cd:9c:80:26:b8:b7:6c:7a:9c:a3:44:
                    15:2e:39:e9:d0:08:62:d3:14:cd:dd:ad:15:b0:07:
                    10:b4:d1:1d:e5:93:c0:0f:bd:76:87:6d:54:8d:ba:
                    93:be:d5:c8:c3:e9:2b:b9:45:7e:e3:9a:26:d6:c2:
                    25:06:86:c1:51:65:3c:eb:40:1b:82:15:01:c9:0b:
                    17:23:54:c7:bc:7f:34:96:43:e0:91:21:9c:e0:41:
                    b0:97:42:58:0f:15:b9:40:e4:da:26:b8:54:a8:52:
                    53:aa:3d:05:7f:e1:1c:21:c9:cb:99:d0:f7:1d:5c:
                    bd:51:3e:b6:6d:f2:c0:c6:5b:40:fb:61:24:6c:20:
                    36:86:1f:01:70:2e:3c:9d:2c:44:e7:56:e5:9d:93:
                    48:9a:81:30:9c:91:29:a2:85:6a:c3:43:69:1a:39:
                    f0:73:68:50:41:bd:88:1f:fc:d1:fa:f6:a9:fe:ad:
                    d7:8a:40:05:35:14:6c:9c:f7:f8:c9:23:74:ce:3a:
                    af:89:b4:c8:7a:e1:43:0a:57:07:76:4e:ae:df:13:
                    76:c8:46:80:09:0d:a4:c9:8c:74:50:c5:ce:03:f3:
                    79:ed:98:43:44:8e:72:aa:df:4d:45:b4:cd:ff:03:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:93:5E:6B:E0:FF:92:0E:61:28:75:6E:01:2B:9A:44:36:9D:D5:B3
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:07:49:54:af:d7:39:d4:de:83:1e:39:dd:c3:0c:b3:15:
         3b:df:ac:e8:e8:f2:89:0a:35:b2:cf:28:41:21:12:6e:71:61:
         b4:88:82:4d:7b:8c:30:d0:19:ad:c0:0e:4c:3a:b0:11:ca:83:
         2b:43:4d:00:d2:19:ff:6d:97:d4:22:a4:d5:be:76:45:4c:18:
         35:ed:20:e3:ba:ce:d6:1a:f0:ea:4f:f9:bb:fe:86:9d:06:d8:
         b4:a7:00:15:88:d1:9c:ea:86:fa:c7:52:df:13:70:6a:c2:f8:
         15:12:b2:75:da:5a:03:10:5a:2c:e3:72:e9:c9:23:56:c4:28:
         48:ca:fd:a7:0c:0e:70:ec:28:81:e5:26:7a:2c:7f:12:97:d3:
         f3:16:9d:de:b3:29:31:85:dd:1f:b2:93:b0:d6:4f:97:88:d5:
         ff:b2:47:e9:05:89:ea:bc:cb:94:46:91:bf:ea:d6:80:7a:30:
         16:54:04:63:9b:eb:a0:37:db:9d:b4:ba:76:06:2f:c4:12:85:
         5d:61:bd:d6:11:10:e0:d3:fa:76:b0:3b:05:fd:86:bd:3b:79:
         2e:25:f5:36:11:e7:6b:41:1f:b6:79:6d:e3:f4:ce:bf:3e:b5:
         4f:da:75:7b:17:fd:b8:bf:10:ce:c8:cf:ee:94:44:9a:30:87:
         1f:21:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:17 2026 by rpki-client