Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
File:                     QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft (raw, json)
Hash identifier:          Xvk5cZLbNlSAHqDsLnzZYMexRQXtKfxGApLbFVuAZj8=
Subject key identifier:   60:9E:BB:BC:74:96:99:68:FD:8B:35:57:D1:23:AF:D8:55:9A:37:A0
Authority key identifier: 41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
Certificate issuer:       /CN=41b88e42f28836df48310dda05636457fa3f70db
Certificate serial:       019FA898F4F8B46B9E5267D9CD8C872A787E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:24 +0000
Files and hashes:         1: QOOZOBByVqkZ1q-PE7NPKaD3qjM.roa (hash: j3zyeDdIrn6hRAovoXAWbgDk2QQtVM5UJCCkBnNNH2c=)
                          2: QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl (hash: 7fiNxAAsDvCESGawTu6uWgEMcU3ik3ek5fcJCX9o9Qw=)
                          3: YLCy61Ou1zu1s3hFCdXrN8zxFx8.roa (hash: C5m7c8v9LmMLSFllgUHl58+da2eRITwPf82h4xo+2Hg=)
                          4: _IZwkSjVpsGYUCpsT_3H3DGbcvE.roa (hash: XM2CFOnMNjMebcmabtVzVZNIRk0m9XFh6SHcd/OBs2c=)
                          5: axX5r8eaQye8To66RIedWeq-294.roa (hash: fUIngIaGdB7VvY50561K9uaMvhKcfZcXxu4SnSzFzxk=)
                          6: t_CLdGRtuv21b3am-0AwhPDoKdE.roa (hash: GUnrReq5hn+z9h3wrQvoEHhII45JvrCuAZjVIFDFnVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:98:f4:f8:b4:6b:9e:52:67:d9:cd:8c:87:2a:78:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b88e42f28836df48310dda05636457fa3f70db
        Validity
            Not Before: Jul 28 12:00:24 2026 GMT
            Not After : Jul 29 12:00:24 2026 GMT
        Subject: CN=609ebbbc74969968fd8b3557d123afd8559a37a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:45:89:e4:8a:67:29:3a:93:43:17:8d:60:
                    7c:f9:13:8a:fb:24:65:25:fd:15:96:22:c2:59:48:
                    67:f6:ec:13:10:ad:74:f9:6d:84:2f:e8:2f:15:52:
                    6d:ea:71:59:74:76:a8:7e:08:2b:b8:96:6e:de:8d:
                    37:28:29:45:78:07:3d:6b:bb:be:64:2a:0e:1e:ac:
                    b5:d7:34:12:a8:0f:5d:d0:e9:79:5f:f7:e5:18:26:
                    5e:4f:ba:7a:a4:32:6d:f5:5b:79:3c:df:97:91:b9:
                    ae:7e:8e:43:b6:52:c0:28:37:06:a6:aa:e9:14:20:
                    ac:01:51:33:c9:9d:82:6a:04:77:a2:ea:e3:18:40:
                    55:ce:96:0d:f9:02:c7:bd:36:20:06:88:ac:39:20:
                    13:c9:ad:df:c0:c1:8c:08:20:83:0d:f6:ef:d7:77:
                    19:f2:e0:af:ae:ff:d5:3f:a6:5a:75:f1:a8:6e:20:
                    5f:c0:2f:e7:7e:d1:53:51:f6:1d:d7:06:73:ed:29:
                    b7:d0:ce:e4:4a:90:c5:e4:61:a7:da:9b:c4:6b:a7:
                    8a:e4:79:73:77:fe:0d:ea:51:b3:2a:2d:34:05:a0:
                    dc:2c:51:7f:dd:36:18:8f:a7:26:53:cc:b3:d1:74:
                    93:4a:09:98:0b:2d:a4:91:b9:9d:57:4f:43:4f:4d:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9E:BB:BC:74:96:99:68:FD:8B:35:57:D1:23:AF:D8:55:9A:37:A0
            X509v3 Authority Key Identifier:
                keyid:41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:bb:28:b8:69:bf:6b:cb:44:b2:39:9e:e8:ef:3f:c1:d9:
         02:78:ab:f5:d3:b8:8d:f0:eb:dd:63:6b:f9:29:33:fb:56:0d:
         29:0b:91:80:05:6f:bf:8f:e2:1e:2f:a3:9a:fa:98:02:c8:b2:
         e1:7c:39:01:cf:3b:77:3a:a1:ea:14:81:0f:47:6e:3e:0c:54:
         b2:ae:66:14:e9:fe:2a:b9:4a:53:d1:8e:d5:79:ba:a2:b6:10:
         17:e3:94:b8:0d:04:50:e4:83:f8:31:20:37:dd:2c:63:ac:08:
         b3:d3:ef:dd:6f:9b:a4:d0:3f:36:e7:62:ec:ad:ec:fd:75:14:
         59:85:0a:83:29:be:d2:f8:73:db:e3:e6:ba:43:6f:da:8d:90:
         18:35:3c:6a:75:e8:01:f3:ee:59:47:7a:86:ca:d8:8a:0f:fb:
         37:90:15:61:38:62:cb:15:c3:79:0b:dc:b7:b9:39:3d:39:ba:
         a6:1e:fd:d6:ae:30:f2:7b:d4:29:cc:2b:84:6f:08:e0:ad:91:
         71:43:45:2f:47:6a:6d:da:7f:2c:7a:93:d2:e4:bb:28:5b:90:
         30:ec:15:38:8e:07:59:22:dd:83:46:bf:66:d5:43:4c:89:f0:
         2d:2c:15:23:28:70:6f:bf:ab:8d:45:79:a4:8c:81:8d:1f:f8:
         48:ed:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:58 2026 by rpki-client