Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
File:                     qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json)
Hash identifier:          WiCgVp5BZtOrObis+twP5dfL3O4yrMiMinoc0MPQjdE=
Subject key identifier:   E5:4A:9D:95:83:81:DA:CC:93:FB:9D:E0:30:29:B1:21:58:9F:AE:81
Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
Certificate issuer:       /CN=ab19000781c183366cba55416fd75b57dba0e4bb
Certificate serial:       019FAB2C2733EFF03801CF6EE5673997E94F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
Manifest number:          06A4
Signing time:             Wed 29 Jul 2026 00:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:25 +0000
Files and hashes:         1: UBF65ckkUeTb5TbQD9-moIuJwLc.roa (hash: RrSAA6sqxIszGdOffmEq9g8ZmL1cSXwchcGnATyPrPg=)
                          2: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: shpMDSdGWn6ggrE+zmzIqqz8NA/3skomd25/cRKiJns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:27:33:ef:f0:38:01:cf:6e:e5:67:39:97:e9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb
        Validity
            Not Before: Jul 29 00:00:25 2026 GMT
            Not After : Jul 30 00:00:25 2026 GMT
        Subject: CN=e54a9d958381dacc93fb9de03029b121589fae81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:e1:6a:ae:b9:a1:01:51:e0:95:e2:a1:d3:
                    a9:71:e7:a2:9f:9d:0f:a4:a7:4b:9f:67:8f:e7:8a:
                    71:45:7d:e1:47:0c:01:44:16:ef:42:75:17:89:93:
                    25:17:6a:e2:6f:e7:3b:e5:13:50:fc:fe:cf:37:e3:
                    17:75:cb:80:d8:ae:d1:ec:75:75:49:0d:f4:d2:08:
                    e4:08:34:30:81:74:60:db:17:aa:a0:b1:4e:be:8b:
                    c2:47:45:4d:e4:e9:5a:b4:3b:f5:f7:85:c1:a1:a1:
                    ab:34:84:a4:82:2a:b6:d0:3a:c2:7b:ad:3e:21:4d:
                    16:cc:46:cb:2a:bb:a3:26:73:59:4b:74:4e:57:e7:
                    64:ec:b5:5b:70:07:67:27:9f:43:d4:bd:b0:17:b3:
                    71:5a:33:4a:6a:a0:46:a7:d7:cd:3e:26:ce:76:67:
                    47:5d:f6:3c:8b:a3:4b:0a:8f:e3:3d:13:4c:b9:c0:
                    b1:68:8f:4c:a2:cd:b8:df:f1:9a:9b:54:69:d6:74:
                    59:1a:4f:93:3c:b8:b8:55:3c:53:9b:19:8a:ce:3e:
                    cc:d4:e7:82:eb:08:a1:59:22:4c:7d:60:d6:ea:f0:
                    ef:88:d0:43:15:34:bf:1e:4a:60:0a:0a:86:39:14:
                    b4:bd:d8:e2:25:b5:cd:dd:a2:19:5c:80:59:7b:4d:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:9D:95:83:81:DA:CC:93:FB:9D:E0:30:29:B1:21:58:9F:AE:81
            X509v3 Authority Key Identifier:
                keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:4b:8a:a7:f6:d9:8b:e2:5d:65:13:0b:3d:09:e1:4a:cd:
         22:e8:ab:e5:4d:e3:0e:01:f0:58:7a:ba:b0:37:4e:04:e7:8c:
         0f:4b:71:1f:f5:83:b2:ba:b5:a8:94:19:32:ef:0f:1a:11:36:
         46:ab:18:6a:99:a0:69:ad:fb:20:21:2c:ec:64:80:90:83:80:
         8e:87:ee:b6:40:e0:1f:17:e8:16:30:8e:53:9c:51:ef:1f:c1:
         66:3f:74:83:9e:54:d5:e4:1e:19:f5:43:25:98:d6:c2:cd:f8:
         d3:67:8d:c4:d7:3d:65:34:92:2a:10:df:00:dd:c7:f4:ad:a1:
         1b:c7:cb:b8:be:e6:80:6a:eb:d7:a8:40:71:2e:63:71:be:a6:
         b9:3d:8b:2a:7a:42:f5:dd:d4:3e:8f:7c:ec:36:75:41:8b:aa:
         89:bc:84:85:e2:9e:d9:2e:9e:aa:52:ed:f9:11:3d:8f:01:70:
         98:9f:42:ec:cc:51:60:1c:e3:d0:18:30:87:00:3d:e7:21:1a:
         d4:53:67:08:50:f6:3a:3e:2f:69:87:7d:e1:5b:00:06:d3:e8:
         9b:e2:e4:ac:e8:8d:f7:1b:07:d8:85:d0:90:e4:8f:8a:c8:5a:
         80:79:67:1a:fb:a2:32:88:13:46:27:c9:ad:ec:c3:95:d1:3c:
         9e:eb:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:49 2026 by rpki-client