Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File:                     qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier:          M4cAqRJQjQQI7+L9WF07UsAGMeiJMt3SbBZSy1Q02bA=
Subject key identifier:   97:2D:5D:C0:12:76:C4:53:EF:DB:B8:9D:6C:B8:F7:86:CC:0C:2B:BA
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer:       /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial:       019FA93DFDE1E8665081666840281DCA5583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 15:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:39 +0000
Files and hashes:         1: 8bGDeqOLEpqluLGnhA5OPPZlF4U.roa (hash: nyQFlbismgT+/vk7cKh4RxgsOCP+jQOON5dqP3fMM7g=)
                          2: E7RKatZ2-c0USqUVA50ejfPO_LA.roa (hash: Kbpm5sWk9Jg4XBpXaBujpM1V2VgMgPUNQUsGM4QI/6E=)
                          3: MduUx5hRjjKbLaSy2UDLe1Nxp4s.roa (hash: UqToIY/uIMk+vJNVcNlL0gMCWXoA/1adspZCvbwaa/A=)
                          4: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: 1XuWujDqm9VfobZj4APYIsw9mRRG0MKEPchAJt5uuaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:fd:e1:e8:66:50:81:66:68:40:28:1d:ca:55:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
        Validity
            Not Before: Jul 28 15:00:39 2026 GMT
            Not After : Jul 29 15:00:39 2026 GMT
        Subject: CN=972d5dc01276c453efdbb89d6cb8f786cc0c2bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:7d:67:bb:fd:79:70:b4:2d:b5:06:9b:b5:
                    65:a7:f1:a3:d6:c8:a6:df:0d:ae:55:31:cb:2c:21:
                    21:9e:42:5c:6b:e6:12:b3:ad:c4:5f:10:55:95:ae:
                    c3:7b:7c:3b:1c:2b:42:9c:8b:5f:31:b6:7d:5b:46:
                    b7:11:d0:34:56:98:80:74:ea:0b:26:ce:f0:73:36:
                    77:74:7d:5f:01:cc:ff:2a:19:29:d8:1b:67:08:98:
                    fe:33:da:3d:53:fb:94:49:b0:32:4c:69:93:79:af:
                    81:e2:dd:dc:46:13:1b:7c:88:46:aa:91:c7:9f:78:
                    30:28:a4:4b:e3:1e:3a:b2:a8:d3:16:f5:f8:db:da:
                    cb:b0:42:1c:7b:70:14:72:78:71:a7:07:24:25:60:
                    88:1f:9a:03:70:ed:e2:31:ea:1f:49:23:e5:42:b1:
                    47:67:8d:ae:2e:de:72:16:c9:d6:5e:e2:5b:3f:34:
                    46:ee:6b:5e:b2:1d:56:e0:c2:a8:9c:16:c5:dd:62:
                    10:2c:e8:51:54:88:fd:e1:ee:9e:a3:ed:ad:c1:c4:
                    29:3e:69:12:8f:e1:15:99:e6:90:47:c7:9f:8f:38:
                    bb:ba:cc:be:4e:55:dc:e2:6b:df:e7:dc:a8:b2:bc:
                    08:fa:7b:3e:69:8f:fc:43:47:85:79:d4:1b:e8:09:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2D:5D:C0:12:76:C4:53:EF:DB:B8:9D:6C:B8:F7:86:CC:0C:2B:BA
            X509v3 Authority Key Identifier:
                keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:fa:9f:87:ed:c2:df:3d:af:c1:ce:d0:be:eb:f6:60:16:
         6e:7a:ba:98:8d:0d:97:8e:e7:7b:f3:51:5e:49:3e:88:9c:f5:
         51:17:85:c6:35:6c:7d:fb:c3:87:c3:2a:d9:66:04:a4:d0:9e:
         bd:5e:98:9a:34:07:26:d9:fa:48:6f:b4:9b:26:bb:a0:16:d0:
         2b:13:98:13:c6:da:0f:15:b8:8a:bc:2d:2c:46:bf:e6:63:3d:
         ef:9b:d4:2d:fd:42:6f:2e:df:5c:5d:e8:5f:33:d0:11:c1:18:
         82:23:0d:f9:ee:60:70:70:51:e6:90:ba:10:32:e6:18:db:6f:
         3e:6c:59:40:ac:bd:ed:b0:90:f6:71:0f:2e:13:a7:10:ba:ba:
         b6:eb:a9:3e:37:4c:7b:b1:97:dd:fc:3a:e8:78:f5:1b:f2:18:
         f2:ab:08:4f:45:e2:18:47:53:04:1e:78:77:25:96:5d:28:da:
         e9:dd:a8:38:3c:5a:be:55:94:63:3d:11:ae:2c:7c:a4:67:6f:
         3f:47:a5:74:7f:44:15:dc:fd:75:ec:ac:04:0b:05:49:50:5a:
         12:89:50:03:e2:7d:3d:79:d5:0f:19:70:87:1c:62:2d:4e:16:
         da:4f:42:70:56:20:c2:4c:9a:bd:c2:0e:06:4f:f9:69:b4:7f:
         1e:e6:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:58:32 2026 by rpki-client