Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          Mxk2Z6BiwMuJYs4bX9jya+jkupIVE55R/QZ/q/8DO/Y=
Subject key identifier:   E5:EB:0F:39:6F:73:21:FB:4E:C0:8B:21:68:FB:1A:0D:F6:96:F3:25
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       019FAB2CADDEC12A286C23A2D1AE2D8B49AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          108F
Signing time:             Wed 29 Jul 2026 00:00:59 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:59 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:59 +0000
Files and hashes:         1: Nl-NwJXgg_mKvSjTnftPWLYBToY.roa (hash: UM5uAdr1m30XVEMiULWnarxQCPhDPuMKS+lBMXBG4Ls=)
                          2: Rohs0EQIAoIUkwGS6XtjnDouO8g.roa (hash: EcZk5ZFiNKSus0TYnUyIuUuGvRBAlAnVxdbmm6ttv7A=)
                          3: ihu7RSF9d_o474O74_XHNiBLq8Y.roa (hash: zWFbywvFotfCwUcEIQ2DvsebZNFghPy/L/dQzBScQnk=)
                          4: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: zbSrRWJa4DBo6OgDEhdK4iZsliXcXsNnP0bn9xetpbc=)
                          5: yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa (hash: bp0xhjE5IUPvG68ZkNNK1uC8wEizknIYbPwTcDbU+cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:ad:de:c1:2a:28:6c:23:a2:d1:ae:2d:8b:49:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Jul 29 00:00:59 2026 GMT
            Not After : Jul 30 00:00:59 2026 GMT
        Subject: CN=e5eb0f396f7321fb4ec08b2168fb1a0df696f325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:64:68:c2:90:cb:68:fb:62:0d:d3:6b:2c:ee:
                    ca:5c:f7:3d:b1:4e:55:0b:00:89:87:8c:91:d5:36:
                    05:9c:76:77:0f:15:be:47:ba:77:8d:6a:03:c1:f1:
                    aa:1e:6f:78:96:bf:b7:9e:1c:a3:cb:fd:4a:31:21:
                    53:9a:c9:af:93:68:84:f7:0d:d5:a1:bc:76:ca:db:
                    53:e9:bf:1d:24:a0:7b:da:e8:b9:5e:1d:04:2f:0b:
                    fa:bd:a5:2a:54:26:d6:ac:34:96:bb:1a:09:58:f7:
                    dd:1b:a3:75:f9:41:40:84:b0:90:f1:83:66:ba:6e:
                    29:31:3b:98:b5:b9:72:42:98:8a:d0:54:7c:40:72:
                    df:b4:da:d7:85:9c:49:97:ff:a9:f3:15:71:02:d5:
                    bb:01:18:00:69:83:c3:db:9c:5f:3b:32:36:0d:7f:
                    8b:c2:a2:34:2c:cb:69:87:83:07:3c:58:b8:ec:f0:
                    c1:25:c3:3e:d7:7a:81:89:a4:36:22:1e:48:0e:25:
                    46:5c:b1:b2:4f:6b:e5:87:f4:48:53:71:d0:6f:f2:
                    70:f2:c5:b5:7c:da:d1:60:54:c6:0b:da:af:18:aa:
                    6c:eb:d0:a2:e3:96:8e:78:54:b4:d3:44:81:ef:cc:
                    fb:cb:ef:47:70:fc:bd:76:6e:d5:58:6f:7c:10:05:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:0F:39:6F:73:21:FB:4E:C0:8B:21:68:FB:1A:0D:F6:96:F3:25
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:52:e8:e0:bb:d2:85:11:a3:f3:6b:31:ca:14:b2:db:51:ad:
         2b:10:ae:ee:d7:7b:e9:5c:58:9d:e2:1a:3a:72:bc:a1:e8:cd:
         c9:2e:b4:eb:b0:05:69:ec:9a:b7:03:3f:f6:60:50:9c:c1:11:
         f4:62:e5:d2:c7:5a:12:3b:84:1d:c0:62:0e:12:27:2c:91:3d:
         92:0e:4b:d6:84:0f:03:a5:39:3d:45:28:44:c0:e3:af:d2:cd:
         18:1b:01:f9:d1:8a:6f:6e:6f:b7:ca:e0:cb:3a:94:73:d2:50:
         86:ec:0c:89:36:2e:8f:76:2a:d9:85:f5:56:02:1d:bd:a4:f8:
         b4:a6:1f:0f:23:9c:ab:c4:13:e1:6e:86:6b:22:71:ed:e4:2d:
         c8:02:87:3d:64:44:4c:d2:ef:5d:be:d5:a5:d9:e6:3a:9b:ef:
         06:ae:90:21:bb:33:23:bc:dd:51:4a:1e:26:75:0d:36:29:d4:
         aa:ba:f9:19:e6:3b:54:e8:1f:1f:15:02:9f:e5:69:2e:7b:24:
         e2:3b:dc:6d:94:66:8d:e6:9d:36:dc:6b:e5:3c:0c:7e:92:0d:
         3c:94:e7:85:ec:48:a1:f4:7a:e2:4a:45:a3:c5:61:c0:74:0b:
         f5:8d:c0:6e:f0:e3:4d:68:27:b6:cc:b8:f0:6d:72:63:6e:fc:
         78:23:97:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLK3ewSoobCOi0a4ti0mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWM4MDBhYTFiNzhhMTdhNDNlMTlmZDk5MzgzNTVkMDQx
MWU5NGEwHhcNMjYwNzI5MDAwMDU5WhcNMjYwNzMwMDAwMDU5WjAzMTEwLwYDVQQD
EyhlNWViMGYzOTZmNzMyMWZiNGVjMDhiMjE2OGZiMWEwZGY2OTZmMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GRowpDLaPtiDdNrLO7KXPc9sU5V
CwCJh4yR1TYFnHZ3DxW+R7p3jWoDwfGqHm94lr+3nhyjy/1KMSFTmsmvk2iE9w3V
obx2yttT6b8dJKB72ui5Xh0ELwv6vaUqVCbWrDSWuxoJWPfdG6N1+UFAhLCQ8YNm
um4pMTuYtblyQpiK0FR8QHLftNrXhZxJl/+p8xVxAtW7ARgAaYPD25xfOzI2DX+L
wqI0LMtph4MHPFi47PDBJcM+13qBiaQ2Ih5IDiVGXLGyT2vlh/RIU3HQb/Jw8sW1
fNrRYFTGC9qvGKps69Ci45aOeFS000SB78z7y+9HcPy9dm7VWG98EAWykwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXrDzlvcyH7TsCLIWj7Gg32lvMlMB8GA1UdIwQY
MBaAFKscgAqht4oXpD4Z/Zk4NV0EEelKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMt
NTBjYmNiNWIxOWMyLzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMtNTBjYmNiNWIxOWMy
LzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVLo4LvS
hRGj82sxyhSy21GtKxCu7td76VxYneIaOnK8oejNyS6067AFaeyatwM/9mBQnMER
9GLl0sdaEjuEHcBiDhInLJE9kg5L1oQPA6U5PUUoRMDjr9LNGBsB+dGKb25vt8rg
yzqUc9JQhuwMiTYuj3Yq2YX1VgIdvaT4tKYfDyOcq8QT4W6GayJx7eQtyAKHPWRE
TNLvXb7VpdnmOpvvBq6QIbszI7zdUUoeJnUNNinUqrr5GeY7VOgfHxUCn+VpLnsk
4jvcbZRmjeadNtxr5TwMfpINPJTnhexIofR64kpFo8VhwHQL9Y3AbvDjTWgntsy4
8G1yY278eCOX+g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:29 2026 by rpki-client