Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File:                     QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier:          sMytwaCTwf16kPIMKu6Tx9913LLPg2+zMZI6Vb4DKBs=
Subject key identifier:   6D:1B:85:51:9F:94:B7:2E:4A:79:A9:22:CD:98:5B:D8:DF:57:0D:A4
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer:       /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial:       019FA1845FE8F7A7863D12EA562A346E3ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number:          19D8
Signing time:             Mon 27 Jul 2026 03:00:34 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:34 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:34 +0000
Files and hashes:         1: Dxm0EoxGp2ndo74sPdVeeXzoflk.roa (hash: yNKkIjFKgCoECJezorrDtiFQ2gdUXVgat36+B1ETObs=)
                          2: OMxShmSN_MmgdqjB3FCH456QPyw.roa (hash: Vm7cRKSz6QpnQGwyuo2jJgMyLFID06ztzYaKVdmY098=)
                          3: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: s1hjMm7XKTk9atVrJqckQIuGyjx94Gr8PXWNoXjngPE=)
                          4: VLAKggAmP_2e5ujcu_orpJmGymk.roa (hash: R7zarhFK+F6qeI1f2Us/zQph/cT5R9wLEpRj2LShETc=)
                          5: g_4YB2ktK_BZdQW2jisjb57z4v4.roa (hash: FrWnOJyYlT2BDuUH41B6UfYjVVUxab5ezAoKnJ2JP3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:5f:e8:f7:a7:86:3d:12:ea:56:2a:34:6e:3e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
        Validity
            Not Before: Jul 27 03:00:34 2026 GMT
            Not After : Jul 28 03:00:34 2026 GMT
        Subject: CN=6d1b85519f94b72e4a79a922cd985bd8df570da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:5e:b4:81:2b:9d:fb:41:b8:78:fc:86:1d:
                    f2:b8:93:f5:1f:6b:ba:13:b5:eb:e2:3b:e3:a4:d7:
                    c7:c6:16:96:cc:f6:77:77:44:96:91:2e:20:3f:b5:
                    b7:33:53:c3:c3:d5:92:71:a0:0a:a4:8e:7b:08:df:
                    eb:b3:e9:f5:44:59:dd:d7:90:d3:0f:cd:94:57:71:
                    55:f6:4a:3e:54:43:27:d2:dc:9d:27:ab:6c:f4:13:
                    b9:91:d5:64:78:62:4b:66:ab:1f:e3:26:af:78:48:
                    aa:49:4b:5c:2f:15:a3:11:cb:6b:ff:e0:80:6e:19:
                    d9:03:88:51:ef:ed:47:ec:60:f0:d8:9b:66:8c:b8:
                    46:95:b4:4a:74:fa:77:c5:ff:d9:d3:6f:1d:19:7f:
                    7f:c2:eb:99:fc:40:b7:52:69:6c:5f:7e:a1:ba:39:
                    e9:17:1f:8d:07:c9:ee:99:77:5e:53:d9:c7:d8:d0:
                    33:65:ee:cb:71:d7:12:b7:bd:67:02:7d:87:7e:1b:
                    92:ab:e1:18:f4:86:8f:16:42:55:ae:bd:99:b9:a5:
                    8d:99:b8:fa:77:1d:4b:22:3e:de:d7:fb:01:af:d0:
                    ab:5b:78:82:30:ff:9e:cf:29:28:2c:d8:0a:e5:51:
                    2a:26:23:3c:57:9c:6a:3a:f4:c3:56:62:fa:27:f8:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1B:85:51:9F:94:B7:2E:4A:79:A9:22:CD:98:5B:D8:DF:57:0D:A4
            X509v3 Authority Key Identifier:
                keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b6:3a:30:1e:c0:42:61:34:d1:ea:c3:66:40:5c:50:68:52:
         09:c6:ea:9b:53:8b:58:a3:7a:dc:27:9e:54:fc:f9:f9:00:17:
         de:91:14:89:0d:cc:0a:f6:ca:58:43:b4:8e:2b:f4:84:13:d7:
         22:61:fb:de:c9:39:3b:25:bb:cf:fa:2f:95:ab:ac:ea:2a:17:
         52:61:00:dc:02:2d:df:fe:9b:d5:8d:67:33:c2:f3:c8:c8:ca:
         3f:e6:0d:00:6d:f8:a5:2b:ad:7c:29:e8:01:64:b9:25:ec:cc:
         15:fd:5b:b2:36:14:93:ec:25:45:46:1b:0e:9a:64:74:10:37:
         2d:99:cd:64:8e:be:12:8b:8b:77:72:d1:f4:6f:02:67:0b:83:
         4e:34:98:3c:20:f9:59:5f:f8:60:04:56:57:6b:f3:0d:f2:6d:
         77:bb:c9:72:64:59:01:71:72:1d:17:92:02:05:62:19:e7:68:
         e1:a8:df:56:7e:e6:8e:52:51:81:ab:5d:8a:02:48:bb:15:67:
         aa:98:f7:41:5b:a1:df:75:6b:44:8e:88:ea:65:fb:e0:b1:76:
         22:82:1f:d2:f2:5a:7a:55:bc:17:4c:72:47:9a:fa:34:c8:a4:
         d6:8a:f2:fa:99:15:93:ee:fb:78:31:57:d4:5a:c2:21:29:69:
         53:3b:b8:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhF/o96eGPRLqVio0bj7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjhjMmYzN2JkOGQ3ZTA0ZTc2OTg1YTRjZWQ0NTU5ZDc2
NTFjNDMwHhcNMjYwNzI3MDMwMDM0WhcNMjYwNzI4MDMwMDM0WjAzMTEwLwYDVQQD
Eyg2ZDFiODU1MTlmOTRiNzJlNGE3OWE5MjJjZDk4NWJkOGRmNTcwZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv1etIErnftBuHj8hh3yuJP1H2u6
E7Xr4jvjpNfHxhaWzPZ3d0SWkS4gP7W3M1PDw9WScaAKpI57CN/rs+n1RFnd15DT
D82UV3FV9ko+VEMn0tydJ6ts9BO5kdVkeGJLZqsf4yaveEiqSUtcLxWjEctr/+CA
bhnZA4hR7+1H7GDw2JtmjLhGlbRKdPp3xf/Z028dGX9/wuuZ/EC3UmlsX36hujnp
Fx+NB8numXdeU9nH2NAzZe7LcdcSt71nAn2HfhuSq+EY9IaPFkJVrr2ZuaWNmbj6
dx1LIj7e1/sBr9CrW3iCMP+ezykoLNgK5VEqJiM8V5xqOvTDVmL6J/iPMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0bhVGflLcuSnmpIs2YW9jfVw2kMB8GA1UdIwQY
MBaAFEG4wvN72NfgTnaYWkztRVnXZRxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjIt
MjgxOGY2NTc4ZDFiLzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjItMjgxOGY2NTc4ZDFi
LzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbY6MB7A
QmE00erDZkBcUGhSCcbqm1OLWKN63CeeVPz5+QAX3pEUiQ3MCvbKWEO0jiv0hBPX
ImH73sk5OyW7z/ovlaus6ioXUmEA3AIt3/6b1Y1nM8LzyMjKP+YNAG34pSutfCno
AWS5JezMFf1bsjYUk+wlRUYbDppkdBA3LZnNZI6+EouLd3LR9G8CZwuDTjSYPCD5
WV/4YARWV2vzDfJtd7vJcmRZAXFyHReSAgViGedo4ajfVn7mjlJRgatdigJIuxVn
qpj3QVuh33VrRI6I6mX74LF2IoIf0vJaelW8F0xyR5r6NMik1ory+pkVk+77eDFX
1FrCISlpUzu4xg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:21:46 2026 by rpki-client