Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
File:                     QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft (raw, json)
Hash identifier:          rAYyRgV+4Dgr7xiNLrOdweajFXN0tbZ3un1xbLNoipQ=
Subject key identifier:   0A:3D:23:CE:24:B3:01:3C:67:BA:20:CD:00:6E:0D:E1:8B:1B:33:E6
Authority key identifier: 41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
Certificate issuer:       /CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Certificate serial:       019FAC7680C1B2DB4B2500A975C82BF56D33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
Manifest number:          0174
Signing time:             Wed 29 Jul 2026 06:01:15 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:15 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:15 +0000
Files and hashes:         1: QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl (hash: aC903Ikfhrwh6i2Y4AjQHupV7LO8J51yPUpBVX2z8Fg=)
                          2: qWIzmVr_aMvnz8_UVm4flIAA-A0.roa (hash: s3nWLOdDzZcWov+Frxv6A1ZD6t4lQ0e8G2c/DIWlHD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:80:c1:b2:db:4b:25:00:a9:75:c8:2b:f5:6d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415c5b3544b18c2ce577847bc1b2ada539385b19
        Validity
            Not Before: Jul 29 06:01:15 2026 GMT
            Not After : Jul 30 06:01:15 2026 GMT
        Subject: CN=0a3d23ce24b3013c67ba20cd006e0de18b1b33e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:fc:87:0a:e9:05:b8:74:5f:b9:ae:2a:cc:
                    1f:8b:4d:23:f3:44:97:60:31:f7:d9:31:bc:35:a9:
                    b6:bb:11:2d:94:aa:13:e7:cc:bb:4b:84:76:b8:42:
                    85:e8:64:f8:ba:53:6d:c9:f2:bf:31:c0:52:88:af:
                    36:cb:c0:20:ec:99:27:aa:2e:65:f8:7a:d2:45:5f:
                    1a:8a:78:2e:7f:8b:09:78:52:93:26:cb:bc:18:bc:
                    08:b2:6f:3e:27:1f:30:28:0d:a2:d5:ce:8a:91:4e:
                    08:ab:6d:be:27:40:8a:50:6d:07:2d:c3:47:53:ef:
                    33:51:26:df:63:62:36:54:65:9b:e2:00:21:44:1e:
                    dd:ed:e6:64:f5:0c:0d:30:23:97:25:48:d7:a1:f2:
                    d1:20:4b:36:de:5f:2b:a5:5a:b0:dd:69:87:8d:90:
                    6a:0a:00:e7:7f:40:53:38:b8:18:d1:8c:43:0a:0a:
                    3d:50:94:6d:cb:77:ec:a0:c3:1a:49:d7:c5:b5:ac:
                    12:63:c8:8a:e1:10:85:b2:f5:18:92:38:1d:c9:fe:
                    77:e6:3d:bb:14:50:17:d8:2b:7a:ea:4a:45:56:dd:
                    7e:d1:cf:ca:ec:4f:77:2c:d1:9e:db:5a:6b:5d:2c:
                    6d:23:37:be:66:2b:8c:9f:95:cf:96:a9:a0:2e:b7:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3D:23:CE:24:B3:01:3C:67:BA:20:CD:00:6E:0D:E1:8B:1B:33:E6
            X509v3 Authority Key Identifier:
                keyid:41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:55:d2:7e:1f:ab:3b:8f:5a:e2:00:a1:f5:4a:78:1c:9d:9a:
         4e:b6:31:b0:24:bc:47:02:68:2f:39:de:5d:a8:f9:33:23:e5:
         ae:95:bd:68:e9:c4:f8:2a:80:bb:78:89:ef:e7:ba:30:03:82:
         e5:3b:55:80:a5:a0:c6:81:35:b6:2f:a2:07:ba:d2:e6:8e:c1:
         27:cd:6e:5a:24:12:af:b8:8e:94:db:c9:83:f4:da:62:b8:4b:
         a5:5d:dc:47:35:49:7f:71:98:16:ba:9d:67:99:d7:83:5e:02:
         04:66:4c:31:96:a3:6a:23:c1:60:4a:70:6f:2d:63:5f:02:02:
         73:af:3e:92:bf:51:f3:58:86:fb:18:d7:0a:54:fa:e4:0a:6a:
         a2:07:07:c9:05:a7:9d:25:ef:8d:ab:c8:37:76:8a:d2:38:ae:
         d3:73:e2:7c:5b:f8:68:d5:c7:c1:8e:79:3e:3c:f3:8e:32:4a:
         db:2c:e5:d6:7f:2b:df:5a:d8:d8:fd:ee:72:b0:9b:2b:c0:fa:
         04:d6:15:7c:d1:b8:b5:30:95:a0:29:3d:53:22:f8:3a:39:08:
         f6:e1:23:f3:62:f4:cb:ec:0a:b5:54:c5:c5:9a:53:44:5e:10:
         9f:87:c7:bc:ee:00:cf:98:2a:65:dc:9b:28:2a:7a:0a:2f:cb:
         28:70:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:43 2026 by rpki-client