Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File:                     QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier:          6d3l3Inj12OyWOnGMGmAwHweac/dYPqD0vCvph/P5vM=
Subject key identifier:   04:55:2F:C2:33:C9:51:01:7A:26:5C:7F:24:B0:8B:07:B0:2D:32:8F
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer:       /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial:       019FAA19C6ECF5FA20D8109A7D0922FDF427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number:          1530
Signing time:             Tue 28 Jul 2026 19:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:43 +0000
Files and hashes:         1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
                          2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
                          3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: eaWPctA/HpT9Ue87DLIhYKgZ1uD05Fo6ScdDSlVdxn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:c6:ec:f5:fa:20:d8:10:9a:7d:09:22:fd:f4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
        Validity
            Not Before: Jul 28 19:00:43 2026 GMT
            Not After : Jul 29 19:00:43 2026 GMT
        Subject: CN=04552fc233c951017a265c7f24b08b07b02d328f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:20:9d:ae:8f:3b:7e:e1:81:12:91:19:c1:
                    c7:a9:23:41:5a:4b:a0:ab:e1:d1:06:da:c9:07:23:
                    f8:9f:8f:f8:b8:92:14:65:f6:49:d7:82:3e:f7:39:
                    53:40:e3:09:e9:64:b2:c7:d5:44:45:b8:5c:06:a8:
                    b8:60:ec:d0:53:ae:59:cd:6d:90:f3:f2:da:2e:30:
                    4d:da:be:dd:44:8a:2f:ff:a0:cd:00:6f:98:de:20:
                    80:5d:c5:d5:dc:7d:d2:81:2c:ad:ac:31:9c:e1:37:
                    7c:82:b8:cd:d1:eb:ac:37:b4:86:6b:2f:42:cf:bb:
                    f7:77:47:f0:7b:84:2d:23:d5:fc:15:8d:98:75:d6:
                    44:a8:29:95:0c:4a:99:62:b3:84:db:5a:b2:ae:ba:
                    4e:66:76:73:85:6a:45:5d:6e:29:a8:eb:68:59:1c:
                    e6:60:55:1d:1b:9d:95:02:ba:dc:ea:8f:0c:7c:fb:
                    23:a6:8a:19:dc:01:95:9c:4a:3b:0d:2a:b2:b8:32:
                    77:ee:28:d8:22:1c:48:f3:84:44:6c:42:16:3c:25:
                    a5:63:d6:7b:e7:d2:9e:39:6e:0d:89:35:05:53:68:
                    42:2a:8b:11:86:8a:58:9a:d8:c3:bc:f5:6d:8c:06:
                    d6:57:96:26:ed:25:58:46:05:30:41:3a:d6:c6:b9:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:55:2F:C2:33:C9:51:01:7A:26:5C:7F:24:B0:8B:07:B0:2D:32:8F
            X509v3 Authority Key Identifier:
                keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ff:9d:3e:0e:1f:15:5c:5c:58:e2:e4:d6:46:e6:b1:a0:bc:
         83:ff:a7:81:34:b4:70:34:52:66:d2:07:c8:fb:b6:1e:da:bd:
         94:9c:6d:a3:07:34:38:91:4c:24:7f:86:a9:69:48:e6:05:7d:
         e3:b3:bd:62:f0:a7:f2:43:16:17:e0:b6:ca:59:b3:84:88:ed:
         c8:79:e0:0c:b1:52:c1:e5:60:4f:72:83:e5:14:e1:e0:71:d4:
         bc:36:59:8e:69:9f:2b:30:c2:2c:fb:9c:84:4d:ce:88:d9:c4:
         91:8c:f0:f4:5f:03:da:e0:49:16:c0:65:a5:fe:f9:ce:b5:fd:
         79:17:8e:07:b0:80:a0:f2:bc:18:bc:5d:13:f0:ea:56:6e:9d:
         db:b6:5c:7f:9e:36:35:22:03:9e:06:65:f7:96:8e:f1:fb:a0:
         a1:46:36:03:3b:45:47:c2:a6:9d:d3:88:52:36:24:46:2d:18:
         3b:31:22:1e:8e:03:25:4c:9b:d1:a1:fa:cb:e3:aa:e0:ab:da:
         59:d6:c1:43:b8:29:20:2e:5a:47:e5:b7:3b:55:97:ec:8d:95:
         4c:e0:69:0f:a7:1b:53:cf:ae:70:3e:1d:2a:aa:9e:f3:3e:9c:
         1d:f6:ad:35:30:35:b0:68:85:03:25:a6:8d:82:14:aa:b5:c8:
         3f:46:6b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:28 2026 by rpki-client