Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File:                     Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier:          0zRw4bU3uzMC2CHvMl1KAlMlbXXA5ESPU4UnE7NGUiI=
Subject key identifier:   50:C8:97:1D:FD:E5:13:1F:27:BF:0B:23:48:4D:32:11:59:59:FE:57
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer:       /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial:       019FAD1A7E85963B909DA421BB2775305574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number:          06ED
Signing time:             Wed 29 Jul 2026 09:00:22 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:22 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:22 +0000
Files and hashes:         1: C8KAjAmMo4zHOxPsP5u33kaFWlY.roa (hash: U4UKkIWDo1A35uGyB5LLNTGRRGiNn0SaaQUFdLefZ24=)
                          2: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: mpHg/dDi3YKE4xovo1flarSXtvBwz30H0CV5GBdmZt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:7e:85:96:3b:90:9d:a4:21:bb:27:75:30:55:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
        Validity
            Not Before: Jul 29 09:00:22 2026 GMT
            Not After : Jul 30 09:00:22 2026 GMT
        Subject: CN=50c8971dfde5131f27bf0b23484d32115959fe57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:e1:cf:32:06:6b:4e:29:e2:ca:0e:f0:d1:
                    60:06:21:ab:f6:36:4d:e3:11:fa:55:16:cf:43:93:
                    bf:6c:c3:56:0d:6c:60:e0:8e:c4:9b:2d:22:34:0b:
                    9a:a7:ad:e0:7e:5a:55:cd:02:fa:7d:c9:15:40:84:
                    30:5b:af:c1:21:44:a0:4a:33:e9:24:b0:f3:46:72:
                    25:64:be:dc:8e:d3:46:ec:df:3c:ff:43:69:ca:25:
                    e6:2f:1b:b5:05:98:f5:43:a3:7d:69:69:c8:c2:41:
                    13:4b:cd:d8:36:b7:ef:b7:a0:34:6f:9f:e6:81:22:
                    5c:13:d5:08:47:0a:b1:f1:c8:4e:92:27:c6:28:a1:
                    93:cc:98:43:54:71:a4:00:fd:de:2f:be:6e:de:3b:
                    01:a6:22:7f:09:0f:7d:d1:61:3b:cc:f4:60:75:1d:
                    56:20:48:1b:3f:7f:be:4b:30:21:5f:b7:33:05:27:
                    fd:bd:44:5e:c5:ae:9f:5f:d0:57:5b:dd:9b:e1:bb:
                    28:1a:35:fd:85:b4:9a:52:24:cf:38:2c:aa:75:49:
                    87:82:a8:16:77:e8:59:87:d8:7a:dd:cc:9c:10:06:
                    3c:59:44:c0:73:2c:2d:58:42:70:a6:ca:85:3b:8a:
                    f4:8a:9d:f3:f1:f0:5e:05:53:ec:cc:89:ce:32:5d:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C8:97:1D:FD:E5:13:1F:27:BF:0B:23:48:4D:32:11:59:59:FE:57
            X509v3 Authority Key Identifier:
                keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:91:e1:ff:3f:f1:f6:0b:07:4f:b4:b2:92:63:02:bf:bd:9e:
         29:8c:c2:6e:fd:6d:0a:9d:d0:70:41:97:f6:ab:2e:0d:01:5d:
         68:96:53:7f:ab:15:b6:97:eb:12:41:06:13:2b:74:da:65:a4:
         f3:b3:03:81:a3:d9:a8:cb:2b:79:93:27:9e:2b:e0:69:13:58:
         04:66:a7:53:8a:48:7f:4e:74:22:c6:1a:ea:93:b3:8a:65:0f:
         a2:07:86:d0:00:33:72:c2:c1:d6:db:0b:86:65:1d:9f:96:09:
         d0:d3:82:bc:8f:0b:e3:0c:b2:e3:f4:f1:54:8a:03:4e:76:1c:
         1e:6a:af:3a:8b:e5:40:79:76:a7:ac:da:65:10:23:c5:06:0a:
         52:5e:68:b6:13:ff:71:69:9d:81:72:43:05:16:56:52:62:7c:
         9f:03:bd:d3:be:e0:67:db:78:37:24:5a:a1:eb:98:3e:d5:9b:
         50:22:9f:66:b5:18:d6:7c:89:a4:32:f3:45:06:80:0c:8c:8f:
         26:ef:45:17:8b:2b:44:44:85:8d:85:0f:41:97:df:f9:32:2f:
         cc:a9:60:b4:9a:3c:e6:9d:1c:87:3c:ad:1b:ea:53:f7:5d:1b:
         12:6d:0d:a2:a5:bf:65:2c:8e:71:c0:26:ab:22:bb:1b:24:a9:
         f0:77:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:34:34 2026 by rpki-client