Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File:                     QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier:          mD9l06QnyPm5/sQpTdbGg+EbB/cunnx0WC/Y2qxs3ns=
Subject key identifier:   4D:A3:1C:93:B1:16:82:F6:60:29:FB:47:66:AE:3E:9B:0F:FC:2F:0D
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer:       /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial:       019FA899EE7C735587364C7D8E7362812290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number:          1767
Signing time:             Tue 28 Jul 2026 12:01:28 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:28 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:28 +0000
Files and hashes:         1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
                          2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: QPjraF2vMQGf/cjvv2Ux/QMPmgF+84vJtVGQCrCrQ8Y=)
                          3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
                          4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:ee:7c:73:55:87:36:4c:7d:8e:73:62:81:22:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
        Validity
            Not Before: Jul 28 12:01:28 2026 GMT
            Not After : Jul 29 12:01:28 2026 GMT
        Subject: CN=4da31c93b11682f66029fb4766ae3e9b0ffc2f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:90:4c:65:83:13:e4:a3:3e:45:04:c4:4e:
                    e9:94:ae:6f:94:e7:5e:7e:9e:40:3c:88:3b:b2:44:
                    52:6f:ed:31:8d:9b:b9:b0:e3:b3:d0:09:e9:d4:4c:
                    6d:e9:0c:79:40:33:ac:7c:3a:b5:5e:45:f3:dd:c2:
                    8d:ff:b0:c2:22:9f:1a:6b:e9:fb:37:0d:9f:7f:81:
                    1d:98:12:81:43:63:73:af:bd:fc:32:67:3f:75:60:
                    81:26:a4:9d:f4:78:f3:41:9e:0a:52:50:54:88:ee:
                    e4:d7:14:6a:5c:c9:3e:ef:c2:ec:a2:7f:0b:66:cb:
                    46:58:8d:3d:22:28:26:1b:e2:9c:44:4e:88:45:98:
                    f3:5e:1b:d2:53:f5:b3:6b:6c:e1:97:b8:04:56:3d:
                    f2:ce:2a:b9:5a:32:3e:b5:a5:5a:a1:b5:0d:42:5e:
                    5c:33:a2:0c:40:63:23:f2:68:e1:cd:40:08:ac:25:
                    df:bc:02:8a:b5:7c:68:d4:db:2c:6b:94:94:62:a4:
                    be:6f:02:fc:14:53:60:df:88:32:5a:19:96:45:3a:
                    27:5c:c0:7a:5b:e8:85:35:76:53:54:ae:95:73:c4:
                    a1:b9:dc:a1:f1:33:11:fa:e7:bb:93:88:fc:51:47:
                    a0:76:9b:5b:d8:29:0b:2d:b5:b4:93:d2:d3:b9:19:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A3:1C:93:B1:16:82:F6:60:29:FB:47:66:AE:3E:9B:0F:FC:2F:0D
            X509v3 Authority Key Identifier:
                keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:f1:7c:4d:10:5e:82:31:ad:02:71:2c:b8:56:f0:66:a2:
         5c:c1:da:b7:00:92:22:7f:c9:f6:ee:4c:4e:b7:f3:72:24:be:
         9d:fb:db:1a:21:c1:87:a8:9e:16:9f:d8:89:4b:11:f4:37:42:
         5e:a3:c5:38:f4:73:53:ac:0f:9e:d7:1a:61:42:0e:8a:fe:d6:
         56:05:a3:fb:43:c6:53:11:10:c1:8d:13:25:be:ff:45:09:83:
         cb:cf:2c:d4:1f:22:7c:14:2c:84:25:67:c2:ea:3c:3f:17:a8:
         f1:d0:d1:ee:79:fb:31:14:b5:86:db:fd:d9:ab:44:39:9b:6d:
         83:bb:7f:0c:ea:6c:1b:ba:8a:b4:49:49:b4:d0:13:d3:fa:8a:
         1c:69:f6:0f:5e:3c:05:7f:a6:a0:f7:4f:92:e0:f4:77:47:ea:
         5b:d4:9c:5b:ba:78:0b:e8:ea:3a:b1:f6:98:db:2e:5c:a9:b2:
         02:59:15:06:38:a6:16:43:66:02:fa:ef:2a:aa:57:b7:ec:25:
         a9:0e:ad:3c:8f:44:52:56:ac:b6:8b:6c:d8:eb:19:5a:98:86:
         fe:f0:ce:76:ad:d1:ca:46:87:bb:51:af:22:6f:e9:0c:a3:80:
         a6:42:98:e5:ca:31:6d:1e:a4:cf:e8:29:29:91:ef:d5:32:a1:
         33:a8:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:02 2026 by rpki-client