Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File:                     _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier:          dCGEs4JljP6xdUIsDEy71s7/ln43BQr7g/Y/068uvwM=
Subject key identifier:   2A:CC:07:3B:AD:0B:29:E4:A2:5B:CF:20:CF:78:F2:03:33:04:77:B2
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer:       /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial:       019FAD1AC8947353F771BAF9A3292691BB6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number:          1457
Signing time:             Wed 29 Jul 2026 09:00:41 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:41 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:41 +0000
Files and hashes:         1: DzshirtWicNrDuK0JWqKHNIqs0I.roa (hash: T2DQWKAIsgzJl63HpzB70Owqfsg5T+wUK5RjGOLK3uY=)
                          2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: LtDOogKYdwvTVwYJx7vRd4Lv+GUW/jNiq8MPrgkFNf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:c8:94:73:53:f7:71:ba:f9:a3:29:26:91:bb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
        Validity
            Not Before: Jul 29 09:00:41 2026 GMT
            Not After : Jul 30 09:00:41 2026 GMT
        Subject: CN=2acc073bad0b29e4a25bcf20cf78f203330477b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:df:11:cf:b4:d0:e2:7d:46:07:8e:aa:d5:04:
                    d9:33:36:14:3b:1d:64:78:c5:5c:21:e6:07:52:62:
                    ac:9a:1b:32:81:38:c8:b3:1e:5a:7e:f4:62:31:22:
                    4f:6d:17:84:0e:28:00:4e:66:5e:c3:d8:90:2d:5e:
                    f5:b1:90:31:04:e2:71:5e:5c:2e:e3:2b:1e:96:93:
                    9d:50:ce:f8:02:c0:2b:e5:f4:53:04:29:40:96:36:
                    fe:d2:1d:86:71:be:92:bf:b5:5b:39:ae:b4:71:46:
                    61:10:5a:2d:91:17:de:2a:2f:1e:29:dc:0e:34:0d:
                    c0:09:3e:92:8b:70:04:7b:9a:92:17:54:b9:02:aa:
                    f4:7a:1f:a5:53:fe:82:d2:43:d0:d7:91:1c:88:3b:
                    32:d6:69:97:65:d6:c2:d9:70:7d:09:e8:c8:3f:37:
                    87:93:17:42:8b:61:b3:7f:54:0c:c9:89:cf:06:47:
                    18:82:2c:39:aa:87:68:3d:d6:8a:7c:8f:50:f6:1c:
                    61:3d:8e:73:4e:44:3e:10:82:5c:d5:9f:96:4b:e5:
                    21:ce:c7:e2:12:ae:fe:8a:50:4c:46:f5:dc:84:6b:
                    c3:78:ab:aa:c6:0e:ea:cd:a6:fa:7d:5f:5b:26:58:
                    89:60:7f:d0:af:47:d8:43:36:06:b5:07:d2:1a:4b:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CC:07:3B:AD:0B:29:E4:A2:5B:CF:20:CF:78:F2:03:33:04:77:B2
            X509v3 Authority Key Identifier:
                keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:21:f1:00:0b:bf:06:20:43:65:1f:3c:e5:2f:ce:9f:ad:2b:
         16:43:db:37:cc:74:e5:6e:ed:b2:31:19:09:43:74:28:c2:47:
         5f:cd:15:1b:6c:5e:d1:0f:c2:12:ac:2b:e9:f5:99:d1:0b:da:
         6f:1d:47:62:1e:93:0f:da:c3:8c:09:14:06:64:e1:d3:69:48:
         0c:71:8a:54:a0:2f:73:70:93:5a:d6:69:28:3f:15:31:77:19:
         3d:fe:f6:02:39:70:ef:3d:68:0c:e2:ac:c2:2b:70:37:e8:8c:
         f6:c8:d0:a1:28:27:3c:7b:3e:39:4d:4d:58:b4:45:fe:ea:17:
         34:ee:9c:55:31:98:77:a7:af:9b:a4:c3:32:f8:7b:14:56:8d:
         7d:74:85:9f:ef:ca:bd:7e:56:6d:83:6b:d9:ac:4d:87:88:d4:
         a4:29:1b:f6:9a:17:71:21:72:a0:e1:eb:d3:83:f2:a6:fd:22:
         eb:57:87:23:95:49:46:c7:93:83:70:70:c1:4d:09:d5:46:d6:
         57:d8:4d:cf:96:9c:be:c8:03:b9:02:2a:12:94:d2:b2:7f:8b:
         6f:9a:68:7a:1d:86:89:65:2f:78:f6:13:5e:bd:ae:92:63:e8:
         79:c3:aa:72:59:0d:d8:42:cd:11:59:2a:55:21:e3:3b:b9:66:
         68:48:86:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:18 2026 by rpki-client