Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
File:                     QGuz4srXsQAlbhxKf1VbajjYdSY.mft (raw, json)
Hash identifier:          TRo0VlLkeA0upPG724subz4CdVbhySPBoFpin/wHXLw=
Subject key identifier:   38:D8:40:DD:E5:66:36:71:80:31:B2:31:63:CB:BB:6E:D6:65:C3:94
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Certificate issuer:       /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial:       019F860D13EFA914D23CF0F871D0AC287733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
Manifest number:          0182
Signing time:             Tue 21 Jul 2026 19:00:31 +0000
Manifest this update:     Tue 21 Jul 2026 19:00:31 +0000
Manifest next update:     Wed 22 Jul 2026 19:00:31 +0000
Files and hashes:         1: QGuz4srXsQAlbhxKf1VbajjYdSY.crl (hash: 5dQXFNk3Gja2yzf7KE6SrxrIESWIdysaa0ojHDYn3S0=)
                          2: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (hash: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0d:13:ef:a9:14:d2:3c:f0:f8:71:d0:ac:28:77:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
        Validity
            Not Before: Jul 21 19:00:31 2026 GMT
            Not After : Jul 22 19:00:31 2026 GMT
        Subject: CN=38d840dde56636718031b23163cbbb6ed665c394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:aa:d5:84:5b:de:b7:30:79:c8:46:42:ce:
                    59:7d:9f:59:f9:42:8f:b2:6d:86:6a:b8:da:db:00:
                    97:47:70:09:1f:26:ea:16:9f:1f:f2:92:75:33:d4:
                    12:cf:b7:2e:66:86:d0:02:73:cf:f5:ed:12:e9:13:
                    a6:18:d9:48:e7:27:17:20:ed:6c:60:00:26:6f:2d:
                    7f:66:e6:c7:61:f2:ef:4c:93:64:b6:bb:e1:45:ae:
                    72:ba:20:bd:65:8d:6c:07:ab:3d:02:8a:38:f7:fc:
                    87:22:80:a6:0e:a5:5d:14:5c:1d:45:c2:92:a5:97:
                    b1:9a:93:32:75:fc:4b:2f:ef:67:f0:7e:9e:1f:fc:
                    8e:c5:ae:6f:54:c7:5c:f2:00:76:83:1b:1e:d6:f7:
                    4a:94:af:a0:03:d5:29:c5:67:ca:a8:9a:5e:6f:9f:
                    26:d4:a8:cc:15:82:8a:2d:f4:16:e4:0b:f1:f0:89:
                    cc:e7:a5:f6:89:db:00:b1:34:a6:de:28:50:1b:b6:
                    94:56:5a:03:c1:e4:6d:9d:6d:a7:1e:11:fd:90:72:
                    72:71:da:67:98:0c:6e:0b:43:45:de:60:4c:f1:79:
                    a2:56:79:92:10:88:2e:4e:1a:54:37:6b:87:77:5f:
                    a4:ad:3f:93:6f:c5:e0:b9:12:ed:bf:fc:10:96:78:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D8:40:DD:E5:66:36:71:80:31:B2:31:63:CB:BB:6E:D6:65:C3:94
            X509v3 Authority Key Identifier:
                keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:43:f8:7f:46:1e:4d:68:e0:10:02:33:96:bb:99:36:93:cb:
         da:02:7f:00:53:b3:75:6c:8a:a8:c7:e7:e3:80:e7:eb:70:11:
         18:c6:bb:19:69:e2:ca:72:b3:b4:80:7b:75:b1:c5:04:13:9c:
         47:9a:70:54:a7:df:20:ff:55:c8:bd:2d:18:b0:1b:b6:b3:d3:
         40:fc:1c:da:ff:9f:a8:b5:4f:59:c8:45:5b:56:3d:f9:b4:db:
         8d:26:11:50:0d:08:ff:6b:54:da:a5:6f:f6:f1:ab:53:d4:41:
         f3:a7:04:c2:ea:4a:41:08:41:d5:c2:63:72:4d:47:2d:f5:77:
         fe:06:be:a1:63:a6:e0:44:37:24:9e:23:97:b0:92:6a:2d:e2:
         45:af:3e:9e:f4:92:a0:e2:b9:07:41:15:28:ad:81:b0:47:5a:
         90:3f:f2:be:7b:61:81:af:8c:55:77:58:40:a8:0e:dc:d0:e9:
         67:18:90:3f:57:47:8f:1e:03:00:3e:ab:fa:ed:ad:00:12:67:
         45:ab:8b:eb:a8:86:de:4e:0b:c2:d9:b2:9b:23:86:11:ac:cf:
         30:da:82:ae:38:a7:63:ec:da:2e:ad:6c:07:27:43:6e:87:d7:
         4a:27:7b:e8:c1:5f:86:65:cd:86:f1:ff:66:49:25:93:a0:9e:
         c9:17:1a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GDRPvqRTSPPD4cdCsKHczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmJiM2UyY2FkN2IxMDAyNTZlMWM0YTdmNTU1YjZhMzhk
ODc1MjYwHhcNMjYwNzIxMTkwMDMxWhcNMjYwNzIyMTkwMDMxWjAzMTEwLwYDVQQD
EygzOGQ4NDBkZGU1NjYzNjcxODAzMWIyMzE2M2NiYmI2ZWQ2NjVjMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxOq1YRb3rcwechGQs5ZfZ9Z+UKP
sm2Garja2wCXR3AJHybqFp8f8pJ1M9QSz7cuZobQAnPP9e0S6ROmGNlI5ycXIO1s
YAAmby1/ZubHYfLvTJNktrvhRa5yuiC9ZY1sB6s9Aoo49/yHIoCmDqVdFFwdRcKS
pZexmpMydfxLL+9n8H6eH/yOxa5vVMdc8gB2gxse1vdKlK+gA9UpxWfKqJpeb58m
1KjMFYKKLfQW5Avx8InM56X2idsAsTSm3ihQG7aUVloDweRtnW2nHhH9kHJycdpn
mAxuC0NF3mBM8XmiVnmSEIguThpUN2uHd1+krT+Tb8XguRLtv/wQlngl3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjYQN3lZjZxgDGyMWPLu27WZcOUMB8GA1UdIwQY
MBaAFEBrs+LK17EAJW4cSn9VW2o42HUmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUd1ejRzclhzUUFsYmh4S2YxVmJhampZZFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjBhZGYtNjYzYS00MDJiLWIyNmMt
Y2ZjMDFjOGZmOWVkLzEvUUd1ejRzclhzUUFsYmh4S2YxVmJhampZZFNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZjBhZGYtNjYzYS00MDJiLWIyNmMtY2ZjMDFjOGZmOWVk
LzEvUUd1ejRzclhzUUFsYmh4S2YxVmJhampZZFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEP4f0Ye
TWjgEAIzlruZNpPL2gJ/AFOzdWyKqMfn44Dn63ARGMa7GWniynKztIB7dbHFBBOc
R5pwVKffIP9VyL0tGLAbtrPTQPwc2v+fqLVPWchFW1Y9+bTbjSYRUA0I/2tU2qVv
9vGrU9RB86cEwupKQQhB1cJjck1HLfV3/ga+oWOm4EQ3JJ4jl7CSai3iRa8+nvSS
oOK5B0EVKK2BsEdakD/yvnthga+MVXdYQKgO3NDpZxiQP1dHjx4DAD6r+u2tABJn
RauL66iG3k4LwtmymyOGEazPMNqCrjinY+zaLq1sBydDbofXSid76MFfhmXNhvH/
Zkklk6CeyRcaMA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:05:12 2026 by rpki-client