Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          jvoYAzAAVBakVDeMC4FmMM//ffGIW4FEMtQezUf1VN4=
Subject key identifier:   54:BC:84:BA:C6:84:2B:40:72:A9:E3:AB:11:06:BE:26:95:66:8B:C2
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       019FAA87D81C9B499A28D927FD96717C3A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          1965
Signing time:             Tue 28 Jul 2026 21:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:57 +0000
Files and hashes:         1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=)
                          2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: umhUL7xmRYS1bLy7ZUt4/j7ekRjL5mfGlrrQ+06oE+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:d8:1c:9b:49:9a:28:d9:27:fd:96:71:7c:3a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: Jul 28 21:00:57 2026 GMT
            Not After : Jul 29 21:00:57 2026 GMT
        Subject: CN=54bc84bac6842b4072a9e3ab1106be2695668bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:3d:f9:f0:f7:69:74:e5:8d:68:d8:f1:fc:
                    ec:1a:ee:79:cc:b6:41:c4:b6:a3:a7:24:46:07:f8:
                    4a:ae:0b:f1:9f:1a:47:69:f7:c1:f6:a8:c9:b7:ef:
                    7b:e2:e2:c1:f9:b9:23:16:b8:ba:ce:69:80:3e:fb:
                    c0:73:f7:80:5f:97:54:97:1d:87:7b:2b:06:04:dc:
                    3a:33:0a:11:77:a3:fe:20:ef:c9:8f:d8:1c:9d:95:
                    75:e6:e1:b8:b6:13:d3:18:5a:32:57:94:87:05:3c:
                    6c:36:0f:e5:2e:84:d1:56:81:7d:50:54:40:2a:8a:
                    2d:bc:90:e0:ce:a8:cc:47:46:f8:89:05:23:81:88:
                    cd:a6:e1:7c:64:a4:60:20:8c:5e:24:ba:29:7b:81:
                    20:42:87:6d:f1:2a:1c:39:67:63:ce:ee:f7:14:37:
                    93:3f:a4:3f:24:de:1f:9c:bd:48:6a:05:0f:fd:dd:
                    43:29:7c:b8:a4:24:73:b5:7b:31:6d:6b:8f:01:e9:
                    24:24:38:51:92:79:96:33:4f:36:9e:97:c0:af:e6:
                    97:46:c0:6c:1f:24:57:8f:d3:8b:ad:80:58:dc:c2:
                    ba:c0:ff:d5:20:a2:14:f5:45:7f:c8:5f:e2:ef:0f:
                    05:ac:f8:7e:7e:a5:28:7f:be:5e:4e:9c:12:7f:6d:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BC:84:BA:C6:84:2B:40:72:A9:E3:AB:11:06:BE:26:95:66:8B:C2
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:02:79:c7:50:29:8e:c4:4e:50:0c:38:4f:20:70:15:9b:48:
         ee:79:ed:72:0e:dc:96:32:cf:14:e9:ca:9a:13:06:36:92:4f:
         3f:bf:57:46:9d:7c:46:a9:f6:6f:3a:57:5d:da:dc:5c:8d:d1:
         5f:d3:2b:9a:be:2c:28:b3:3c:60:b1:af:04:f6:34:61:f8:48:
         94:66:52:37:28:0a:ac:04:fe:a1:a0:ec:f4:c3:ce:23:34:66:
         f7:36:43:f1:aa:5d:7c:62:c6:25:fe:9d:4d:ff:92:fe:02:bf:
         95:78:c3:e9:51:0a:31:ee:d8:43:9c:3b:3c:71:4d:e7:fb:13:
         02:67:ba:c5:b0:a0:1c:94:7c:fc:3f:f1:c0:dc:98:40:0f:31:
         d6:56:d8:6a:b9:bc:15:bd:fa:dd:7a:d7:5a:d5:3d:84:88:f1:
         4b:98:ec:80:84:da:99:94:e2:88:95:16:ea:99:aa:dd:3d:df:
         ea:2e:1d:ba:c2:ca:e2:65:ad:a6:71:2a:81:7e:a9:f8:8d:59:
         62:7f:5b:02:d7:62:65:23:29:8c:40:a5:f6:1b:01:f4:1a:14:
         55:0d:96:15:3a:13:78:05:b6:af:b9:db:a9:5e:ac:c1:85:98:
         2c:dd:1e:96:c3:2a:5d:45:f0:88:3d:da:aa:7d:e8:1b:2e:d0:
         11:8b:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:22 2026 by rpki-client