Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File:                     q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier:          WxspwO6wlfgb8yYYCUv4eG4KTKfXlvggZb6tO1hh6wQ=
Subject key identifier:   AF:A5:35:41:D0:B3:2A:A6:CB:84:C6:54:D5:25:68:5F:CE:79:F0:A6
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer:       /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial:       019FAC3F3E1D3E570325027845A9D7F24085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 05:00:53 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:53 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:53 +0000
Files and hashes:         1: 8TsXg-XUAk1JE35W5iwCEn8OxHY.roa (hash: wgiKwTO+cQ6amDFPE6cljiPgi+iGvWx/hXbXkD8CRAQ=)
                          2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: TAyskedTEiK/bpBoMQDBrk6Ttx5Mu3v2mbCStXxOJV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:3e:1d:3e:57:03:25:02:78:45:a9:d7:f2:40:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
        Validity
            Not Before: Jul 29 05:00:53 2026 GMT
            Not After : Jul 30 05:00:53 2026 GMT
        Subject: CN=afa53541d0b32aa6cb84c654d525685fce79f0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:9b:b5:12:73:12:8c:65:24:90:8b:dc:02:
                    dc:d7:10:0c:76:b5:89:f8:b0:8a:cb:6e:95:fe:fe:
                    19:91:cf:35:99:6d:97:2b:af:e1:2f:7c:f2:41:ba:
                    c3:ff:e1:27:c3:26:2b:2c:01:88:42:aa:2b:73:2b:
                    eb:09:21:d9:01:e8:71:3c:d9:e3:06:3e:28:3c:a0:
                    8c:fc:f5:60:d1:60:4d:64:05:69:6b:b2:ea:6d:85:
                    60:30:85:ec:4a:1b:b7:ca:0c:2f:54:6b:b4:f1:9d:
                    87:72:cf:6e:ad:d8:ae:da:fa:53:45:a5:72:ec:6b:
                    72:07:87:73:48:10:d5:99:9d:42:8b:e2:d3:c8:23:
                    de:70:c5:f2:43:81:42:9d:05:db:92:2a:cf:8c:f9:
                    81:92:90:e5:cf:33:03:26:c1:93:4a:26:96:f9:8a:
                    16:33:94:47:07:fd:12:8d:a3:c3:f5:c4:79:aa:76:
                    0b:b4:1d:64:1c:02:48:8c:4c:40:a8:4a:5f:98:d3:
                    cf:9e:6e:88:84:6f:4b:58:60:84:a6:70:9a:1d:d7:
                    30:1f:7c:ba:c1:42:f3:f7:32:31:53:aa:d8:33:c7:
                    00:29:d0:1f:d6:df:23:e8:33:6a:a1:77:6e:40:2c:
                    f7:77:ba:7c:46:65:20:73:55:6b:d5:7b:1d:7f:d5:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A5:35:41:D0:B3:2A:A6:CB:84:C6:54:D5:25:68:5F:CE:79:F0:A6
            X509v3 Authority Key Identifier:
                keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:58:81:3e:9f:4c:24:76:69:c0:e1:ef:d9:32:13:92:29:9e:
         ac:a3:83:fb:60:45:89:3f:84:40:0b:20:53:75:01:21:79:6b:
         b4:a2:1e:85:f6:6c:19:4e:f7:43:fb:8b:9a:b6:4e:ef:52:db:
         b8:26:a9:72:d8:4c:70:58:a7:0d:3d:79:bb:e1:2a:24:f3:bc:
         ef:9f:83:fb:b1:07:3f:35:6c:e3:cf:b8:e2:21:88:5d:d4:61:
         cb:17:74:23:53:f5:7a:48:2d:d6:dc:53:24:2d:0e:2f:97:3d:
         55:96:45:e2:ef:4d:b1:c4:f0:d3:4a:c9:e5:0f:0a:02:81:3e:
         da:85:aa:88:5a:05:c8:6d:07:19:44:71:79:b0:be:41:9c:7f:
         7d:09:67:4f:a1:92:bf:f6:3d:87:6a:1f:1e:11:f2:86:a5:d9:
         a6:19:67:eb:69:8e:01:50:d0:b1:07:00:58:30:da:a0:14:0f:
         2c:c9:db:a8:06:ba:87:57:cd:ab:9a:6a:a0:08:4a:b0:96:c7:
         18:b3:93:5a:76:5d:e9:3a:a9:77:60:6a:4d:8e:33:4d:5c:ac:
         5b:fa:91:07:83:21:31:ff:fe:5b:25:9b:a9:21:33:fb:2e:97:
         f0:25:54:91:07:7e:06:81:10:c6:bc:93:3e:81:d5:3b:d6:55:
         19:fb:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:28:09 2026 by rpki-client