Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File:                     1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier:          HSO+QmuOglVfFi5B9yQ4hhqTPckAzvN9YtZpL1YVS6s=
Subject key identifier:   26:03:30:36:D3:E2:2C:CA:B3:62:55:35:B0:27:FD:59:86:81:53:22
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer:       /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial:       019FAABE26361775AE420971AB51F55D0F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number:          0C39
Signing time:             Tue 28 Jul 2026 22:00:16 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:16 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:16 +0000
Files and hashes:         1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: gTy6gs/gbySJI+aeqolsK5blCuxONKVLY0eRpPdXnQ8=)
                          2: AKAYJxK55ho0_-tu4n3xkwEVy0E.roa (hash: CwiOEuZ5WNXcf/WHMc8X4C6V6miMKO5JICnCl7N0bT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:26:36:17:75:ae:42:09:71:ab:51:f5:5d:0f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
        Validity
            Not Before: Jul 28 22:00:16 2026 GMT
            Not After : Jul 29 22:00:16 2026 GMT
        Subject: CN=26033036d3e22ccab3625535b027fd5986815322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:47:da:30:75:bf:72:50:0b:95:e8:be:60:
                    43:de:91:91:16:8c:ea:d6:c4:c7:ed:3b:d5:7b:e6:
                    6f:a0:9a:7c:26:23:ba:a3:c8:19:19:73:35:e0:0c:
                    e3:34:f8:72:b2:2f:93:97:53:aa:1f:af:a2:e1:08:
                    cd:a6:da:68:30:e1:c7:aa:c3:36:bc:98:be:08:c1:
                    6f:19:46:4a:5c:79:15:f2:03:0c:b3:c6:6a:19:82:
                    1b:1c:29:b4:28:a5:9e:44:76:cb:b4:30:19:77:73:
                    54:5a:34:06:ef:2e:ee:66:50:5a:e0:a6:e8:93:eb:
                    76:c4:e8:44:8c:93:13:38:0f:f4:02:35:b5:bd:b4:
                    c1:37:50:f3:49:0b:cf:31:72:26:77:01:56:81:a4:
                    6a:ff:e3:e0:d4:dc:b4:e3:3d:aa:75:41:9f:84:a5:
                    54:2b:61:6e:36:ce:73:13:af:08:f9:12:a3:34:98:
                    5a:8f:e1:0c:eb:fd:8c:fe:cf:c7:6f:31:cb:9f:be:
                    fb:b7:e1:cd:5c:b0:d6:05:c1:1f:63:3a:c0:fb:43:
                    be:67:05:b9:1e:8b:5d:4f:a9:47:2b:d6:e6:c3:c5:
                    50:01:fe:b4:0a:3f:1e:61:99:56:62:d9:b1:5f:b3:
                    b9:b1:eb:a7:c7:20:3b:f0:e6:89:a3:32:7b:b4:3e:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:30:36:D3:E2:2C:CA:B3:62:55:35:B0:27:FD:59:86:81:53:22
            X509v3 Authority Key Identifier:
                keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ed:78:cc:0f:95:9f:52:1d:61:00:31:73:e7:db:1d:04:4f:
         e1:e5:53:59:97:6f:78:66:f1:7a:a3:54:28:e0:37:5b:b1:0d:
         d5:a7:76:ad:49:6d:a5:60:7c:f4:4b:58:84:26:e2:8d:24:6d:
         2e:d4:b1:00:b5:fa:a8:44:07:38:bc:2c:42:f4:3e:14:70:92:
         67:f5:49:10:e9:68:0d:ea:5f:ae:62:82:2d:b0:95:f6:6f:79:
         70:da:66:1a:65:0c:8e:fc:3f:51:be:a1:f3:69:a0:87:b8:b1:
         13:40:aa:66:91:28:0c:be:dc:94:28:a8:fe:3f:93:cd:1e:8b:
         31:6d:7d:d9:8e:93:1d:42:25:39:ef:fb:6d:7f:51:26:87:a6:
         ac:e6:2a:62:89:82:97:ea:6c:cc:58:ae:2a:3b:38:e8:d2:e6:
         85:60:43:5e:32:1e:21:cf:6c:cb:f2:e6:13:0e:d4:a4:e8:99:
         4f:43:63:66:14:bb:f8:de:e4:5e:c4:46:e5:e1:60:22:7a:14:
         ac:77:5e:61:92:10:f3:5d:2e:e1:f7:01:2a:e8:39:82:d8:e3:
         71:97:49:d7:4e:ea:b6:fe:11:0d:87:80:ba:38:32:d5:42:4e:
         17:1c:5b:32:f0:e3:ba:38:d0:3b:d4:b7:18:e5:f8:a0:46:2a:
         37:c6:fd:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qviY2F3WuQglxq1H1XQ+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NjQzM2ZiMGZiZGRjYzk3ZWIwMTU2NjkyOGQ2MDcwNmNj
YzY2MjMwHhcNMjYwNzI4MjIwMDE2WhcNMjYwNzI5MjIwMDE2WjAzMTEwLwYDVQQD
EygyNjAzMzAzNmQzZTIyY2NhYjM2MjU1MzViMDI3ZmQ1OTg2ODE1MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe5H2jB1v3JQC5XovmBD3pGRFozq
1sTH7TvVe+ZvoJp8JiO6o8gZGXM14AzjNPhysi+Tl1OqH6+i4QjNptpoMOHHqsM2
vJi+CMFvGUZKXHkV8gMMs8ZqGYIbHCm0KKWeRHbLtDAZd3NUWjQG7y7uZlBa4Kbo
k+t2xOhEjJMTOA/0AjW1vbTBN1DzSQvPMXImdwFWgaRq/+Pg1Ny04z2qdUGfhKVU
K2FuNs5zE68I+RKjNJhaj+EM6/2M/s/HbzHLn777t+HNXLDWBcEfYzrA+0O+ZwW5
HotdT6lHK9bmw8VQAf60Cj8eYZlWYtmxX7O5seunxyA78OaJozJ7tD6LfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYDMDbT4izKs2JVNbAn/VmGgVMiMB8GA1UdIwQY
MBaAFNZkM/sPvdzJfrAVZpKNYHBszGYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDkt
MDVkMmNkZmExNmE2LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDktMDVkMmNkZmExNmE2
LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvu14zA+V
n1IdYQAxc+fbHQRP4eVTWZdveGbxeqNUKOA3W7EN1ad2rUltpWB89EtYhCbijSRt
LtSxALX6qEQHOLwsQvQ+FHCSZ/VJEOloDepfrmKCLbCV9m95cNpmGmUMjvw/Ub6h
82mgh7ixE0CqZpEoDL7clCio/j+TzR6LMW192Y6THUIlOe/7bX9RJoemrOYqYomC
l+pszFiuKjs46NLmhWBDXjIeIc9sy/LmEw7UpOiZT0NjZhS7+N7kXsRG5eFgInoU
rHdeYZIQ810u4fcBKug5gtjjcZdJ107qtv4RDYeAujgy1UJOFxxbMvDjujjQO9S3
GOX4oEYqN8b99g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:20 2026 by rpki-client