Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File:                     1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier:          /xubNi9LwbuhaWQCRk3dj2HTSfm3a/vp2m9nNqekKkI=
Subject key identifier:   0D:51:7B:1A:E1:26:B6:0D:05:6F:C5:99:67:BC:33:C6:1B:91:24:6C
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer:       /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial:       019FA93E128EE68C836BE17C8D7266921DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number:          14C7
Signing time:             Tue 28 Jul 2026 15:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:45 +0000
Files and hashes:         1: 1j1sIxN7dokPMeqtWpa2O79IJ2E.roa (hash: curzmuQMCpShAx5Xjvb+jxSDTma4OGIGe6t1amKgW4Y=)
                          2: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: tnyvGEnvZKKp+AInIlfPBUh+65MLdGw1tloHR9zjbds=)
                          3: H41pXcA8VjDWzAOdUw8kJkHTePo.roa (hash: vd9X0KNO4KjRnGRSxo8WoFeqcJXdexnSKn3TUknAjFQ=)
                          4: og4k5qVFbhVmLtxHVp2XKWNx-Vw.roa (hash: t6ZkyRFXAOHZOC93uE5FiUdcUyb51CT48WJCdjiZU/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:12:8e:e6:8c:83:6b:e1:7c:8d:72:66:92:1d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
        Validity
            Not Before: Jul 28 15:00:45 2026 GMT
            Not After : Jul 29 15:00:45 2026 GMT
        Subject: CN=0d517b1ae126b60d056fc59967bc33c61b91246c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:0b:6f:60:41:25:9e:1c:92:60:e4:86:f4:
                    14:24:fc:90:23:77:28:08:6d:6b:46:fa:2f:d6:fd:
                    63:e9:84:35:96:9a:ee:fc:75:42:1d:60:09:ee:23:
                    eb:b5:0c:77:62:1c:f8:6f:87:f3:0a:07:be:5f:d8:
                    3f:1c:41:73:30:f7:cd:ed:59:aa:74:cc:5f:d7:30:
                    96:68:47:22:24:8e:ec:bf:4c:59:a5:24:f6:52:24:
                    28:90:c6:11:4b:5d:9f:9d:6b:6b:bf:3b:e4:20:01:
                    ab:1e:68:44:f6:e0:01:7f:3e:7e:c7:7d:ed:ec:7e:
                    c0:6a:49:b9:ca:53:1c:cf:84:a1:4e:9b:ea:f0:3c:
                    80:0d:6b:41:f2:87:52:a1:d4:5e:fa:4f:73:00:57:
                    7f:a4:10:44:0d:96:9c:ed:e7:cc:ab:af:e5:1a:4a:
                    c0:ee:7a:cc:2b:9e:d8:b6:88:0b:d4:47:9b:13:0a:
                    1a:e8:62:73:34:46:eb:c6:93:75:88:03:35:ba:6f:
                    db:94:61:7b:ee:53:ed:50:83:fd:5b:21:61:9c:9b:
                    25:55:d5:44:e1:88:9b:0a:1f:7e:6e:2a:26:a3:b3:
                    2a:e6:8c:6d:84:2a:13:60:13:ef:52:40:d1:83:a6:
                    ca:62:95:8c:c7:7d:82:65:59:93:14:34:a6:8e:c0:
                    e1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:51:7B:1A:E1:26:B6:0D:05:6F:C5:99:67:BC:33:C6:1B:91:24:6C
            X509v3 Authority Key Identifier:
                keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f9:e4:32:b0:7a:22:31:e6:a4:22:8e:af:58:93:3c:a3:ca:
         89:74:df:9e:d1:7e:28:42:29:2f:ac:4d:35:ce:dd:cb:99:7b:
         a6:83:60:82:f7:32:0a:51:37:77:e7:ad:d8:b5:44:b9:8e:bf:
         7a:ec:b5:1a:09:d9:f8:3e:76:f2:e4:79:26:44:c5:dd:b9:dd:
         ad:83:84:c3:bb:de:7c:36:ee:78:7a:c0:00:fb:f4:09:2f:3a:
         78:b0:b8:f5:ea:fc:cb:16:4e:b4:4c:c3:6f:11:d6:d5:ef:59:
         c6:bc:f4:1c:d4:d4:4c:d9:85:dc:98:21:a5:73:f7:44:e8:c3:
         ab:19:4e:01:40:57:f5:3b:07:e5:d8:3c:c4:f4:db:11:1e:34:
         91:28:a9:a0:fc:81:fc:42:b1:cd:12:ec:9d:20:b0:cf:4e:75:
         87:93:93:78:11:22:30:14:d3:05:86:c9:73:3d:fa:37:54:f6:
         37:48:f3:f7:c0:f3:eb:fc:85:32:24:14:17:26:e9:52:7e:e9:
         94:c5:65:37:95:61:db:5e:01:30:0f:26:e8:42:e9:a8:6e:6e:
         c3:69:72:8c:9a:c0:66:57:3d:f0:79:cc:a5:a5:2a:ca:84:6f:
         9d:81:93:ff:a7:fb:c7:4f:34:54:53:dd:4c:dd:d0:22:2c:8b:
         1b:e1:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:45 2026 by rpki-client