Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File:                     q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier:          aVwG2FvvXtOEhiQO+/k2I0xRAeBT3pMC+xd6k+YZ414=
Subject key identifier:   47:50:E1:66:53:6F:BE:C4:04:DA:71:90:5F:1B:96:36:E6:2F:CF:3A
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer:       /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial:       019F90C83BEF68ACB5123241170254E75B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number:          0F30
Signing time:             Thu 23 Jul 2026 21:01:09 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:09 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:09 +0000
Files and hashes:         1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
                          2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
                          3: Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa (hash: PhCalGp+MfsuVT1o+EaqpG+ubg4eyRCw+3C+dRQltm0=)
                          4: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
                          5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
                          6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: VQf/Q/H3SHpPMUJpQomTT0CAnGymX6YzqlI58xkJkfo=)
                          7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:3b:ef:68:ac:b5:12:32:41:17:02:54:e7:5b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
        Validity
            Not Before: Jul 23 21:01:09 2026 GMT
            Not After : Jul 24 21:01:09 2026 GMT
        Subject: CN=4750e166536fbec404da71905f1b9636e62fcf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:76:a5:9d:6d:a3:9b:d4:8d:05:29:49:69:
                    0b:0c:5b:0a:af:09:99:c3:c8:ee:08:39:26:fe:3c:
                    f2:c5:53:1f:00:7f:5e:34:08:7f:5d:a2:62:39:b8:
                    ae:84:e3:55:df:df:f5:27:22:f4:0f:33:6f:d9:a8:
                    d0:c0:a7:64:a1:3a:d2:59:9e:5a:0e:42:0b:a9:66:
                    f9:cc:8d:de:e1:c1:a8:b2:f3:18:67:4d:5f:f7:fa:
                    e6:ec:5f:8a:60:d5:15:0b:58:ac:a4:0c:43:6c:71:
                    36:09:96:b7:13:70:f0:48:bb:b2:29:83:11:b4:63:
                    ed:70:1e:88:11:a7:6e:04:31:5a:05:73:13:d6:06:
                    44:79:8c:94:61:88:63:3d:b6:7e:cd:a0:ca:81:8e:
                    d6:69:bd:4d:78:af:87:c4:87:70:4e:9e:36:58:2b:
                    29:a6:1d:f6:89:45:ae:66:e9:23:86:42:a5:ec:a9:
                    4d:c3:ea:5a:7a:f2:54:8b:6f:3b:3c:99:74:63:55:
                    4d:7b:be:4e:e6:b9:ab:9a:bb:b9:a4:ef:b0:2f:28:
                    9f:63:a7:59:f6:02:11:4c:fb:24:a7:91:2a:0a:a1:
                    9e:d5:85:8b:c4:70:bb:ac:06:a8:75:75:50:de:c0:
                    9a:88:b8:a1:dd:17:2b:64:f5:21:c8:9d:80:59:96:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:50:E1:66:53:6F:BE:C4:04:DA:71:90:5F:1B:96:36:E6:2F:CF:3A
            X509v3 Authority Key Identifier:
                keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cd:e6:25:d8:19:8f:4a:34:10:90:e8:06:50:95:75:ee:43:
         3b:14:af:59:ae:54:eb:9e:95:0d:86:db:a9:a8:4a:35:cf:8f:
         be:7e:75:06:b7:66:ad:b1:92:73:ed:8c:bc:78:09:75:37:06:
         9c:14:56:ad:e8:74:c6:95:bf:1c:ba:f0:1c:0b:77:85:d8:2d:
         5f:ac:b1:4a:e1:fe:80:40:32:54:4e:07:47:cb:50:37:d9:d0:
         70:a8:15:1f:06:2c:aa:b2:c2:0b:a9:66:77:22:8f:45:89:f6:
         1b:2d:36:56:e2:ef:2e:58:ad:b4:34:b5:f0:9d:1a:17:77:e9:
         55:eb:40:ac:6b:86:8f:2f:f3:52:49:6c:8d:d3:28:19:81:89:
         62:77:d0:bd:5a:c7:3c:5a:8f:be:67:7e:34:72:21:48:5d:e1:
         87:ad:f3:91:0a:bc:c9:40:ba:39:55:e0:57:a6:12:f2:92:fc:
         3c:2c:ef:8e:d4:62:d8:0e:de:34:53:51:e2:7a:35:11:89:f0:
         d2:ca:e9:47:cb:43:00:8f:7c:10:74:82:44:44:43:69:e5:09:
         6d:4c:b9:25:7e:3d:0a:03:3f:35:9b:20:d9:1d:ea:45:fe:4c:
         b1:23:63:c9:71:37:d1:fe:5a:71:90:a7:e1:41:4c:f3:15:73:
         d5:56:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:55 2026 by rpki-client