Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          HSNqyxJc/EJiIK4doTlIeGLPss8Tn0BAOSoAIh8UPG0=
Subject key identifier:   A3:04:4E:A8:83:BA:03:46:CB:51:E0:EC:CC:03:2D:69:94:3E:9E:7D
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       019FACE45F3561D93D5888E92065EA8C177E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          0911
Signing time:             Wed 29 Jul 2026 08:01:15 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:15 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:15 +0000
Files and hashes:         1: NE-Gskahv4yhz4NSW0eOQznOBbc.roa (hash: 2cjZe+aPFDte9rIu8wJCuhBoVs4OYpmJVxKR+K10wPw=)
                          2: QBVvQVEZlQ_FtBHlQ6LkxII5X7Y.roa (hash: is6gKcJbbow/p4d83+z8Fk6rRj/Sh2SQuegCzSpgZjg=)
                          3: RH3gRlxhVGrL9P1FAsxvNcZGcKg.roa (hash: BUrryx952cBQrnyyvdxiH2Hn6rJcg6+93M8bhY0hK8s=)
                          4: Rl7efdhYeXftFwvFAmfRH2As_rs.roa (hash: Fkewx2otKYj7NOwHTF8pWpF8lfCLVjfeAiN9uWh62QU=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: 4jc4IFsQBTuV7874y50R8blRLH31e7RxNW3HCLCHDD0=)
                          6: ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa (hash: /O4pxVo1nhy254bmusK8i5RqU2c/+1dTlDhCRL7gqs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:5f:35:61:d9:3d:58:88:e9:20:65:ea:8c:17:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Jul 29 08:01:15 2026 GMT
            Not After : Jul 30 08:01:15 2026 GMT
        Subject: CN=a3044ea883ba0346cb51e0eccc032d69943e9e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:64:b2:ac:0b:aa:7a:58:80:21:36:95:16:
                    e7:03:b6:5d:4d:98:36:84:a9:eb:26:15:fe:2f:1e:
                    50:3f:53:98:f8:85:e1:82:a3:d7:a3:f3:98:d7:8c:
                    26:4d:e1:83:c2:9b:68:11:8c:66:b0:af:21:ca:ee:
                    74:7a:92:58:cc:43:08:00:c7:14:90:50:a8:db:e4:
                    cc:58:52:de:d0:13:19:a8:bd:d5:04:e0:6d:1f:bc:
                    5f:bc:1f:ef:2f:9e:5c:18:44:6a:cf:1a:fe:ad:87:
                    34:78:17:ed:47:0b:33:4c:e3:23:d1:67:99:63:16:
                    88:3c:41:3b:e6:b4:e6:fc:5d:05:7b:a7:d3:9c:01:
                    b9:71:37:fa:b4:5b:b3:c7:d6:d4:ce:55:1b:58:1c:
                    1d:2d:49:fc:45:05:5e:78:40:60:fe:be:69:2b:b2:
                    33:22:a4:c7:97:6a:21:6d:49:bf:08:29:41:e6:eb:
                    09:5b:d0:82:b9:3f:ea:7b:1f:eb:ab:c6:39:fc:c3:
                    25:3d:5e:a4:a0:15:03:03:ca:39:14:71:e3:dc:d5:
                    c8:2f:d0:fd:44:54:9e:be:3e:14:7b:fd:14:f6:de:
                    19:75:db:12:30:0f:90:2b:21:b8:e4:15:09:f2:63:
                    d1:55:f3:07:f9:be:0a:24:2d:c7:d8:f7:af:26:5b:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:04:4E:A8:83:BA:03:46:CB:51:E0:EC:CC:03:2D:69:94:3E:9E:7D
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:be:e9:1a:e1:cc:b2:43:15:04:3c:32:8b:bd:ce:bf:a0:fd:
         91:6c:92:cf:bf:83:12:63:93:e1:f3:82:21:fb:47:b0:04:77:
         c6:08:7a:85:98:9d:a9:3e:f1:81:75:a6:6a:a7:42:2f:2b:8e:
         75:36:b0:81:86:f7:0f:42:f2:28:d0:bc:25:dd:20:3e:03:2a:
         dc:a3:b8:9a:5b:ba:17:b9:e6:aa:c4:5e:35:51:36:fe:b4:c7:
         5e:0a:a7:b6:b7:ed:07:11:e2:ba:21:e6:5a:25:46:31:2c:79:
         05:cb:b4:8d:be:79:a3:f5:7c:82:63:c6:b9:7a:f8:20:9e:24:
         fe:c7:49:d5:d4:5c:98:81:3f:d7:a2:87:fd:9b:c6:e8:e8:9e:
         4a:9c:be:48:5b:34:df:fe:d1:d7:00:98:04:d0:03:d9:56:34:
         6f:b9:e6:aa:e7:c7:f0:d4:4f:84:9f:6f:ce:54:5b:78:8c:74:
         3e:58:16:e9:51:00:d1:37:95:9e:71:42:d9:26:be:d7:80:20:
         71:6f:1a:6f:0f:f0:3e:bc:18:c1:18:dc:c6:84:c0:a4:c8:61:
         57:b3:43:a8:9b:f1:61:f8:11:2c:23:b1:ff:f8:81:e7:66:be:
         0a:e2:34:49:9e:a6:89:44:2d:77:c8:86:66:9e:79:7d:29:54:
         9b:cd:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:50:21 2026 by rpki-client