Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File:                     q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier:          DrWqdcyL7DTTCEnDqp5VX3cozQ9fc+1DcPvlOEqzQQM=
Subject key identifier:   81:32:B5:45:93:9A:5D:60:81:67:03:9C:CC:8F:6A:0C:FE:1A:BE:DD
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer:       /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial:       019FAD1AA280D969D36A2BE8C4151378B884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 09:00:31 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:31 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:31 +0000
Files and hashes:         1: Nx1ZmF0LLUBVNb7pg5SUQFqkEEo.roa (hash: 7h8Dusgv5GisCOAGKVB6gWNCmRgBLzLbZbpY03tENm0=)
                          2: jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa (hash: nFOTFG+7OrEIpqu+RBWcBN5R7HeTDegtuQdJz0N3Rss=)
                          3: q-cmnczAq_R4WQig-JxyBCeiu3E.roa (hash: QW62YPpx0nobzbNY1r86LME0OVZNaU0nQ5C4usrbmMM=)
                          4: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: 35jAK7kD889yAqyHlmQLrYlPLCA91E01Ykoy3JvKbTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:a2:80:d9:69:d3:6a:2b:e8:c4:15:13:78:b8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
        Validity
            Not Before: Jul 29 09:00:31 2026 GMT
            Not After : Jul 30 09:00:31 2026 GMT
        Subject: CN=8132b545939a5d608167039ccc8f6a0cfe1abedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:2e:4a:a8:e3:34:a3:04:c4:62:d3:a5:d7:
                    0d:69:71:19:b1:3a:64:52:74:21:11:1b:12:1d:a4:
                    7d:21:e4:a6:60:bc:90:20:1b:0d:0c:62:c9:25:a1:
                    38:e1:2f:b2:e5:7d:98:68:91:b1:01:97:1e:1a:4e:
                    95:9a:d1:6a:bb:19:04:50:b2:42:30:9f:89:fb:d1:
                    48:0e:79:43:8e:95:3a:7e:59:fa:1e:5f:66:b0:48:
                    d6:f0:50:7b:ee:56:f6:60:fb:7e:4d:ff:90:6d:12:
                    12:97:b4:cd:ad:1e:d1:ac:7c:e8:c0:8a:21:18:05:
                    6f:cc:1d:89:83:a7:30:4b:6f:be:f9:1d:9f:02:fa:
                    be:37:05:6a:28:e5:08:b8:b2:c5:2b:b5:8a:d3:d3:
                    b4:ee:cd:07:b4:36:3b:71:ed:46:67:5b:fc:ab:d8:
                    b8:11:32:94:ef:8d:b8:89:55:de:cb:a1:d6:f6:f7:
                    16:a2:c3:bb:95:64:e4:7f:97:37:0c:f4:e6:b5:9a:
                    34:e7:f9:33:82:b6:67:db:d9:5b:ad:b0:75:dc:03:
                    94:a0:83:50:20:ec:a3:f0:27:a7:be:1d:48:6d:29:
                    16:d4:de:97:32:54:1b:94:4c:96:e7:ad:45:35:72:
                    c5:6b:81:3d:2e:49:d1:0c:00:8f:f6:0e:3a:32:86:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:32:B5:45:93:9A:5D:60:81:67:03:9C:CC:8F:6A:0C:FE:1A:BE:DD
            X509v3 Authority Key Identifier:
                keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:cf:10:15:50:c1:24:42:8d:d0:ae:1b:12:d0:fd:84:7c:
         83:fd:40:a1:23:b9:36:78:ca:1e:5d:f8:30:ea:4e:68:1f:c6:
         de:9d:5b:be:ca:76:f6:cc:5d:de:9f:e7:ed:43:77:3b:03:4b:
         69:b2:2a:53:83:dc:28:8b:0b:ee:4f:15:0d:9d:54:e3:49:37:
         eb:bd:a3:41:89:4a:a5:4b:aa:8c:71:e3:7c:35:fe:a4:a5:0c:
         7b:b2:a7:e3:de:e6:1a:e4:9f:e7:e4:df:92:5d:6a:8c:41:ec:
         97:e9:b8:14:58:96:03:d8:67:bf:5b:51:c4:74:49:80:de:d8:
         4e:f0:3a:b4:18:e3:92:35:51:7b:e5:ca:95:5e:31:e1:7c:15:
         1e:72:52:08:90:2c:46:2c:d5:c7:a0:93:bc:f1:08:03:bb:ce:
         06:3c:1b:18:4c:8f:3a:a3:39:e1:6a:48:84:db:a4:72:34:c2:
         ee:8e:54:c6:78:b6:07:a6:bf:d7:ca:cf:84:b4:eb:3b:34:6e:
         8a:93:76:ce:39:64:85:e1:04:79:28:4e:af:0c:ea:de:b6:dd:
         df:ec:8f:da:60:3c:23:0f:db:d3:21:6a:e7:52:1a:b6:b2:db:
         20:ec:0d:e1:8a:03:4f:75:67:4e:5f:bc:e7:4f:95:0c:38:95:
         8c:ce:d5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:47:19 2026 by rpki-client