Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File:                     QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier:          Chpi22WX5hAZJt69PHJ41IrgFRshcUfKZQg1ZvXR57I=
Subject key identifier:   79:D5:B1:67:0B:DF:8C:D5:38:04:2B:5E:A3:15:A2:48:68:73:E1:37
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer:       /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial:       019FA03A809F0B8E63DCC2E0D223908491B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number:          19EE
Signing time:             Sun 26 Jul 2026 21:00:16 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:16 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:16 +0000
Files and hashes:         1: JDXE9ys32CWN1r6HQe8JdDKGwHU.roa (hash: z0K+IpcIaetv0JVCV28tmSZWrPzlKK6+pwHmn80nszI=)
                          2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: pTAMqMcmIqXNPj6D6CFp068wH9AQQ7dZ/84rbZJaHw0=)
                          3: gRLPj-QZguZ09jmT3_4W7rktsIQ.asa (hash: s5g3qik4l7YdfpWjnJdY6kRR7Y327DcpVO692i5PIOY=)
                          4: vRCc6wSVpGDCjEGuBc_d2VFIC1o.roa (hash: I3JSKrwrfRrEjKpZwP2hswy/hY627u4kM14hSG3V1DI=)
                          5: wBvtJBEGPbA8yMjhQOGXblnFbHs.roa (hash: as8M/W9LYn+st3wFF/4UgD/V6MFOrP7qv/FGXl/oZ+c=)
                          6: yeCw9h3KZU-0UNnW2F5N-0Bvork.asa (hash: Tp3AmGDQGTccp0cBgUHV9KzZGjjd75GREPDRqmOx7a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:80:9f:0b:8e:63:dc:c2:e0:d2:23:90:84:91:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
        Validity
            Not Before: Jul 26 21:00:16 2026 GMT
            Not After : Jul 27 21:00:16 2026 GMT
        Subject: CN=79d5b1670bdf8cd538042b5ea315a2486873e137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:fb:8e:5e:b8:18:72:43:ce:d0:96:4d:48:
                    d4:59:65:7b:5d:d2:af:ef:97:c2:01:d4:aa:6a:b0:
                    3f:27:a2:ce:99:79:db:6c:b5:f2:5e:6c:f4:92:78:
                    a4:45:da:87:3f:aa:3e:b7:2a:78:fd:8a:b8:2f:69:
                    ee:4b:48:7d:b1:94:e2:7d:83:4a:eb:10:7d:4d:ed:
                    9f:cb:73:c2:42:7f:d3:c3:64:73:3a:af:c6:c2:1c:
                    ea:01:0e:73:e1:11:7a:87:31:a8:57:1f:1e:4f:a3:
                    aa:6e:a4:0d:ff:24:41:df:20:87:f2:a6:42:35:db:
                    d1:4e:b1:9e:50:c2:a7:4f:2d:87:cb:af:3d:10:ea:
                    a9:20:b3:91:58:bf:ea:93:88:67:65:2a:36:ed:ab:
                    13:18:34:3a:c2:42:ae:3e:dc:a7:b1:47:13:08:ca:
                    2f:5b:d3:53:2a:9b:eb:2d:53:91:14:19:14:b2:25:
                    76:aa:55:2c:c6:24:9a:3c:5b:c9:67:8e:07:d8:b2:
                    bf:55:79:dd:df:2e:22:45:60:cf:19:b5:a2:bf:22:
                    84:7b:86:66:90:c4:65:a5:31:13:ef:e4:59:46:d4:
                    fb:6a:8b:0d:7e:3b:fb:ff:c5:1f:bd:ef:62:a7:85:
                    c6:0b:67:cd:a3:9e:04:c5:a6:13:b9:fa:0a:d6:39:
                    65:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:B1:67:0B:DF:8C:D5:38:04:2B:5E:A3:15:A2:48:68:73:E1:37
            X509v3 Authority Key Identifier:
                keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:d1:41:2e:83:4b:98:e1:86:23:a7:75:62:54:75:bb:23:
         d7:59:02:3c:6f:fb:3b:a7:59:f2:f6:45:07:fa:d8:da:89:3d:
         95:9c:53:cf:be:75:ef:bf:e1:12:c9:d6:c2:f0:46:b0:8a:a3:
         28:29:aa:6d:5f:f2:f3:cc:3f:84:dc:f8:a5:4a:5a:ed:c2:ea:
         5b:a9:b5:2d:05:66:63:75:9a:5a:c3:e4:16:99:21:45:3f:72:
         5f:49:56:81:6a:c1:31:ed:3c:48:f4:d2:8f:45:e2:3e:a8:85:
         83:e1:fe:5f:34:91:8d:1b:fe:e0:77:07:14:7d:5c:59:95:f2:
         1b:c1:b2:72:a4:5a:65:a7:d2:d5:b2:d5:94:56:f6:8f:f4:97:
         d4:d7:7d:02:2e:a7:8f:40:70:2e:eb:3c:86:77:c7:39:9f:95:
         0c:26:ff:56:a0:74:5d:87:aa:d4:ae:9d:7d:c8:20:27:8b:57:
         75:b7:ed:46:7f:bb:fe:5e:1f:95:f8:9c:ec:15:54:f2:90:e7:
         98:da:9d:19:73:03:28:1a:57:eb:11:6e:e3:11:7b:e4:85:1c:
         76:93:16:ed:eb:ff:63:15:31:90:a3:2a:13:d6:c0:21:90:fe:
         09:63:be:6d:b1:98:43:ef:68:59:30:f1:3e:fb:ae:37:12:c7:
         e9:10:c7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:01 2026 by rpki-client