Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File:                     q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier:          afPYyv1mhoLgi+Gbjbwgnv9Y9ijXBvBwAXsnnGP/yHs=
Subject key identifier:   63:D7:85:94:C9:D8:65:E1:3A:85:15:FA:E7:7B:6D:01:87:3C:C1:9A
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer:       /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial:       019F8F7DD0A1117BFEAE423872C36164A318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number:          1A0A
Signing time:             Thu 23 Jul 2026 15:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:14 +0000
Files and hashes:         1: 7QXSQMVR5e3PA33Tbe1jUFBiBtU.roa (hash: Fu/x5ydAHbzxjRuQ9kPsYtD1frLQkvc1el/MBrSoppE=)
                          2: D_nN_vPhKORNTjWjIas_aeL_fw4.roa (hash: 2kCeAo6j8PDX4i6BTYf7QZybuVQ19wHuoI+CXgfbp/g=)
                          3: NIWJ9b544URGWTLtmkZjvf2kxIA.roa (hash: DSfziWB0uqzODbT1D3jvb0WNAfepSpfXbax16O29J9U=)
                          4: e7dlLb1mQuulDFLIJIubZnzn92Y.roa (hash: pjhxvegNUc0jD9hr5mE16h6OsbQxuTM2Z8MfFLGcvIk=)
                          5: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: BQBFsnTKDTUg5cLrruVPF9ycKibmzqxIodxU7iv8UHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:d0:a1:11:7b:fe:ae:42:38:72:c3:61:64:a3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
        Validity
            Not Before: Jul 23 15:00:14 2026 GMT
            Not After : Jul 24 15:00:14 2026 GMT
        Subject: CN=63d78594c9d865e13a8515fae77b6d01873cc19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:3e:58:14:e2:02:e8:df:0c:e4:97:fe:4f:
                    98:1b:1d:47:4c:92:97:71:5f:9d:6f:7a:37:8d:31:
                    5b:90:28:79:0f:8a:4c:5b:88:65:5b:23:9f:16:61:
                    ea:13:5d:f8:d8:50:7f:9a:8f:a2:86:37:4a:19:26:
                    f1:a0:ed:c2:43:0f:fc:56:88:fc:f6:bd:56:f8:77:
                    cc:d9:e8:01:cf:64:67:96:e7:e5:4c:e8:29:32:15:
                    43:77:3a:04:fd:72:e6:59:42:6f:f1:01:74:55:13:
                    7b:73:d7:62:55:5b:5b:cf:71:df:75:ca:a2:65:45:
                    fd:b2:55:e3:dd:2a:52:78:f0:0b:8b:0b:bf:50:a5:
                    b0:5c:05:8b:93:d2:2e:02:95:a9:99:e7:71:0e:d6:
                    04:bd:39:19:50:fe:6a:fa:26:a0:11:c0:64:d2:01:
                    6f:07:cb:f7:67:c7:00:ec:9b:2d:18:35:3c:a1:c3:
                    bf:db:3c:55:4a:28:41:3f:88:31:9e:00:ec:fc:b1:
                    23:b9:fd:37:c7:49:9f:39:f6:95:3b:ed:1c:27:2d:
                    ef:f3:a3:a8:7b:88:e2:5e:0e:d4:a7:1a:0f:9e:6f:
                    c9:86:73:1a:c4:1a:ba:c4:d2:03:55:6b:db:ac:22:
                    85:e5:be:6f:78:bf:f4:62:ee:13:db:fd:98:2d:18:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D7:85:94:C9:D8:65:E1:3A:85:15:FA:E7:7B:6D:01:87:3C:C1:9A
            X509v3 Authority Key Identifier:
                keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:6d:aa:e7:54:c0:67:11:45:e5:f9:aa:a6:ff:97:87:a3:
         b2:74:fd:29:c0:38:58:50:30:f3:62:1c:25:9b:fd:a2:6f:e7:
         f1:18:6e:31:e9:7c:a9:0b:d7:52:94:da:53:bc:d8:6b:41:c1:
         f6:ac:8a:fb:f8:90:48:28:23:d6:9b:e7:41:70:84:92:a1:89:
         a9:1f:25:30:c6:7d:13:33:84:80:e9:c7:5a:26:bf:f4:dc:9f:
         ca:3e:87:bf:26:1b:bb:a5:2d:19:6a:b5:04:e3:71:02:76:52:
         c5:d7:4d:1c:8a:66:c9:8d:18:98:66:c5:74:6b:34:17:ba:47:
         12:9d:53:c6:e9:98:3f:34:ef:df:74:b0:fa:fa:e7:2f:e4:cf:
         6a:e6:1f:a8:f2:09:89:6c:af:29:f3:ae:c4:ea:56:4d:04:ee:
         e8:9b:0a:50:f2:0c:1a:f6:b5:8f:b7:69:7f:c9:b7:60:3f:8d:
         ee:08:ed:e2:7e:a6:29:c0:ac:cb:c8:6a:8a:ea:38:14:27:b2:
         a5:da:46:34:ef:3b:aa:3a:48:38:13:e2:4e:80:7d:e5:7e:fe:
         6d:04:31:68:84:f1:fb:5e:35:77:f3:02:bc:89:93:6e:48:f8:
         1a:41:61:3b:0c:36:c0:49:59:d1:d7:21:0f:79:fb:b1:91:79:
         8a:3f:0e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:18 2026 by rpki-client