Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File:                     qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier:          NmHOI620AntZQHvxlYTMIwPaXeGaY2KnIm9wGTesDvE=
Subject key identifier:   63:35:82:9E:F8:F3:06:6E:2A:BA:85:BF:F7:6E:3F:B2:91:5C:B8:C1
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer:       /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial:       019FAC3F3A592E8B8A79B7FC18395968996A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 05:00:52 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:52 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:52 +0000
Files and hashes:         1: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (hash: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA=)
                          2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: nHrT380vaqlG/zrk+7c/uXKUpKFcj7N1XEBibeiwd+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:3a:59:2e:8b:8a:79:b7:fc:18:39:59:68:99:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
        Validity
            Not Before: Jul 29 05:00:52 2026 GMT
            Not After : Jul 30 05:00:52 2026 GMT
        Subject: CN=6335829ef8f3066e2aba85bff76e3fb2915cb8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:e9:4d:64:af:50:84:f9:b0:8c:2d:cf:70:
                    24:d4:c1:fa:1a:90:a2:65:4b:50:23:34:a8:3d:20:
                    64:49:83:50:66:fd:d9:d0:0f:5a:f0:61:44:dc:3b:
                    a1:f8:d0:fc:7f:e7:50:b9:67:a0:59:a7:42:38:80:
                    3c:d1:74:31:bc:02:19:a5:63:91:97:1b:8c:ca:cb:
                    3f:4c:01:f9:26:69:ae:b4:25:a7:4e:a1:d6:4c:58:
                    77:e7:d7:20:5b:96:c6:ab:51:e9:40:b5:b6:c1:29:
                    a3:c5:e3:f9:c7:a7:8a:1f:6e:ad:c8:c9:2e:26:f7:
                    96:38:90:64:9d:b0:1e:88:7d:ef:d2:9c:12:d0:9a:
                    9a:6d:c9:65:65:b2:05:83:9c:26:26:5b:e1:80:12:
                    60:5e:d2:aa:21:01:0c:67:6a:63:9f:ac:f5:46:59:
                    77:bb:05:a7:b6:d6:a1:fe:b8:a7:45:62:e1:f1:ac:
                    0c:ac:48:55:1e:7e:a9:d5:29:55:09:b4:4b:10:2d:
                    c5:b3:ec:07:28:f9:5b:98:03:4a:15:04:6d:d3:94:
                    fe:bc:33:64:e2:3c:e6:3c:f1:a4:2d:2f:86:0e:07:
                    fc:9f:1d:6f:3e:37:3b:b7:54:3a:a9:f6:97:4a:ad:
                    4f:d6:1c:9f:56:04:93:9b:32:f1:3b:be:6f:d5:13:
                    c0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:35:82:9E:F8:F3:06:6E:2A:BA:85:BF:F7:6E:3F:B2:91:5C:B8:C1
            X509v3 Authority Key Identifier:
                keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:01:a6:52:ae:d8:3a:66:f9:b7:40:17:e2:a5:21:2f:31:85:
         c9:eb:96:ec:2f:31:ef:28:4d:ce:58:a0:6c:f5:d4:d9:40:09:
         94:67:b4:85:fe:54:47:b8:0d:9c:c0:cf:89:b9:13:68:66:56:
         a5:14:22:11:0d:9d:57:e6:8c:61:09:bb:e6:c7:14:5a:63:49:
         16:4d:56:1f:b3:6f:6d:9e:41:34:2d:4c:78:02:2f:85:9e:0c:
         aa:5d:a4:c1:ca:82:71:45:dc:66:6d:3f:c6:14:8b:9c:d2:d9:
         b6:b3:f6:9e:0a:c9:5c:a7:30:09:ca:67:74:0a:56:1f:ea:52:
         94:29:29:2c:27:79:d8:ad:49:d9:33:04:56:7a:83:86:4b:20:
         d1:4e:63:08:75:4a:e8:cd:d1:1f:81:f3:5a:8a:71:9e:48:fa:
         d3:80:c4:17:ae:23:02:f4:e7:75:2b:46:34:28:fa:5c:1b:8f:
         cc:8a:72:a3:32:29:db:22:9b:2c:17:9c:0d:ee:f1:d4:d6:05:
         da:f3:bc:3d:65:1e:cc:fa:2e:c3:2a:d9:fc:0e:1e:e1:6a:55:
         14:d1:82:42:d4:4e:10:13:96:e9:25:0e:30:12:3d:ff:fa:15:
         ae:b9:d5:7a:dc:93:ea:53:f5:84:e7:a3:84:9b:76:7c:90:6c:
         8f:07:6b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:49 2026 by rpki-client