Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          HclywPhE8lVNbRqYru7megCcJdm6ZUp+Ay2WE5Z7P6g=
Subject key identifier:   C7:9F:38:73:1C:74:E6:EA:63:09:2E:45:A3:E4:39:BF:01:61:67:FB
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       019F90C788A072B26D36D0AADBABF8F77F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          19D0
Signing time:             Thu 23 Jul 2026 21:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:23 +0000
Files and hashes:         1: 6HLmOIlw0JJlLfNpuVhkS5VevII.roa (hash: duraaLF3+tphpAPz7hcD0W+ai9uSm22QFtqEemAzlOs=)
                          2: cgiCnDdXt2ZfV4gQ6f64Txzv9UI.roa (hash: Epq0AQtf5gLEvFkohacS+3j5hF97hS/AEpHSVuOJB9w=)
                          3: nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa (hash: KTNFAJc/6ueKlLn/0ANsYJWuRw0+1gFif+avYpTFJp4=)
                          4: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: SwUfxJ0xBoJURSabovnxXIatG+NaJPejSHmrJXRcxzY=)
                          5: qfWUaAQNlV9wKmB2U3853Bl8uNA.roa (hash: rOp4emJoeO5JknR894vKgNsr/vggi5P0L+PXDJf8JnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:88:a0:72:b2:6d:36:d0:aa:db:ab:f8:f7:7f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Jul 23 21:00:23 2026 GMT
            Not After : Jul 24 21:00:23 2026 GMT
        Subject: CN=c79f38731c74e6ea63092e45a3e439bf016167fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:39:95:7e:f0:bd:63:c2:16:f6:68:8e:ed:
                    a4:de:b7:43:c0:eb:07:85:39:62:55:77:86:02:f1:
                    f7:ca:67:2d:fe:56:57:61:3a:dc:b7:ab:14:ff:4e:
                    db:8a:ab:76:6e:bb:e6:be:1a:63:ae:f5:08:02:fa:
                    21:5a:8e:5d:8e:ac:0b:e2:79:68:3d:c9:80:1c:9d:
                    42:e2:d3:29:fb:7a:13:84:96:ff:25:3d:ee:f6:f3:
                    d0:83:0f:7a:e0:91:de:67:df:c6:fd:61:ab:3c:52:
                    f4:69:cc:6a:c5:4f:05:69:cc:e8:3d:ff:09:08:06:
                    5a:87:6f:7c:74:70:51:a4:06:50:4e:16:4b:ab:f0:
                    78:a9:a5:eb:e5:b1:dd:72:01:dc:cd:b7:be:26:a8:
                    8f:b1:c9:df:b3:c9:eb:fc:90:7f:01:3c:f6:26:d9:
                    ef:91:94:6b:2b:71:ca:52:ef:9e:f2:0e:1f:b7:2d:
                    3b:ef:eb:59:71:1a:99:7c:60:f6:92:a5:74:1a:a6:
                    72:f8:b1:1b:fa:82:33:e7:d2:e2:c9:8d:96:2e:bb:
                    5d:37:55:dd:22:b1:01:f6:79:4b:c7:62:ee:6c:ec:
                    66:c3:ce:29:52:d1:dd:13:04:d1:8d:b9:5b:34:ec:
                    e8:a1:ee:0d:77:1b:4f:95:84:7f:33:90:3e:a7:24:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9F:38:73:1C:74:E6:EA:63:09:2E:45:A3:E4:39:BF:01:61:67:FB
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b9:44:f1:57:57:b8:bd:84:b5:64:72:49:50:30:d9:52:d7:
         31:ac:be:51:29:db:cf:e5:48:47:54:ed:14:31:a5:43:86:18:
         e6:5e:ba:60:0f:42:9d:21:37:9c:c2:01:cc:7c:73:7d:c5:bb:
         e2:cb:30:9d:cc:7a:b1:2f:1c:1d:aa:18:8a:d5:aa:07:79:5e:
         ee:04:7e:5e:50:84:a9:96:70:fa:13:58:c1:fc:54:b4:c2:9e:
         0a:20:9e:e1:6b:54:b5:d5:5f:88:4c:dd:b8:de:8f:ba:b8:d7:
         f4:a7:d7:d4:90:f4:9b:54:8b:69:00:4a:0c:24:c4:16:e5:7c:
         99:46:20:f0:c1:91:c8:87:bf:d0:44:f8:a3:66:f7:d8:60:f8:
         07:bd:af:e0:fb:1f:41:1c:9d:96:40:6d:11:d3:8f:e3:b3:8d:
         de:43:8b:33:a6:34:a5:b2:4e:ba:3f:e3:74:50:ed:1e:c8:89:
         d1:85:f9:4a:9b:2c:3b:98:d8:ec:cc:5a:47:77:89:76:2f:54:
         9a:c8:41:89:5c:5c:c7:e5:8c:2c:2e:c8:c3:2d:43:97:8c:43:
         cd:6e:8b:ea:c1:39:8d:79:ae:e1:08:81:9a:66:69:4d:c4:6a:
         1f:00:5e:83:a3:41:7a:0e:96:eb:86:ce:90:1c:f2:63:b6:87:
         1d:78:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:48 2026 by rpki-client