Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File:                     q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier:          tQTA4L+ouuKgG6z33fZqFbTLAF7eY3gjPsALacKVAzM=
Subject key identifier:   3E:CB:EA:D6:F3:78:C1:03:3D:A6:2C:09:2A:5C:98:74:D5:D4:76:4C
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer:       /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial:       01A003942C67DDA690F6841DBD3205A111E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number:          1A01
Signing time:             Sat 15 Aug 2026 04:00:37 +0000
Manifest this update:     Sat 15 Aug 2026 04:00:37 +0000
Manifest next update:     Sun 16 Aug 2026 04:00:37 +0000
Files and hashes:         1: 1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa (hash: JDIIwJMIws7Yan/EHkT9Ljq/fUXQU7hpu1yjAvkm5mo=)
                          2: SATda0Q9JgLf7FNzUfrTDL5vnEQ.roa (hash: XGliMsZWtirHhZX2xfYpxBaxkmF1dTUTYWoC+BYAPKw=)
                          3: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: UUWpCvNhFYHyaiIcpRae5etgH3DVVTToHe+RBt7U5oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:2c:67:dd:a6:90:f6:84:1d:bd:32:05:a1:11:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
        Validity
            Not Before: Aug 15 04:00:37 2026 GMT
            Not After : Aug 16 04:00:37 2026 GMT
        Subject: CN=3ecbead6f378c1033da62c092a5c9874d5d4764c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:c3:6f:19:93:f6:8e:0d:59:ba:fe:9d:b2:
                    2c:02:18:23:05:37:9a:dd:51:d0:32:c8:f1:4f:fa:
                    84:88:f0:1d:4f:22:7f:bc:db:6e:b2:7b:b5:ef:a6:
                    35:ce:d2:61:d9:29:d2:99:2f:43:08:5f:b0:5f:55:
                    e9:e9:27:00:db:ea:7c:c6:86:d8:7a:47:72:ec:a7:
                    46:3c:b9:30:97:82:b2:a4:d7:64:0a:af:4b:b6:30:
                    9d:35:df:f3:43:1a:46:9d:41:93:2d:22:1d:6e:f1:
                    ee:51:97:c5:cd:e2:fc:4d:82:e3:32:dd:01:47:5a:
                    cb:b8:48:11:d4:52:a8:91:69:07:2f:1b:a3:5d:43:
                    41:ca:6f:12:72:33:58:11:22:0a:27:9d:31:44:5c:
                    33:7d:a1:b1:d5:09:6f:54:e7:27:b9:85:cd:bb:95:
                    bd:59:e7:38:a9:02:2c:39:b7:1a:71:e3:ac:0c:be:
                    e0:d9:97:41:f6:57:e1:1b:9c:53:88:98:66:d9:59:
                    58:1f:60:3a:21:c7:5e:79:fd:bb:d6:d9:c8:8a:be:
                    99:9b:f4:49:43:e1:7d:b5:ef:6b:92:64:12:8a:ab:
                    49:4e:89:df:63:38:55:18:2a:1c:78:bd:3b:13:c0:
                    16:af:c4:a7:01:11:22:4d:83:b8:90:ec:21:00:96:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CB:EA:D6:F3:78:C1:03:3D:A6:2C:09:2A:5C:98:74:D5:D4:76:4C
            X509v3 Authority Key Identifier:
                keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2c:72:ae:f9:ed:5d:3f:2a:a8:83:9f:1b:ce:aa:4c:e6:79:
         08:6b:2d:18:1a:7f:38:84:3b:0c:1d:09:cc:86:dd:c4:8d:96:
         bc:c5:70:42:98:69:20:b9:a2:5d:d9:e8:77:f4:8f:e4:eb:f5:
         9d:9b:61:9b:e7:71:e7:82:f6:be:21:cf:77:95:90:50:98:3e:
         50:f7:9d:36:15:d7:b5:ad:49:0f:ff:66:ce:52:76:a5:66:a2:
         8f:26:4a:1f:0e:95:78:d7:83:4d:a3:df:0f:03:ec:83:98:a9:
         0e:91:f5:bd:db:57:39:cc:47:b7:d8:bd:10:d0:30:67:e2:d2:
         68:00:b6:2f:ff:4f:bf:7b:b6:f5:0f:4b:ee:5d:df:0b:83:18:
         98:d1:67:36:2a:52:56:64:90:2d:ab:93:0a:39:14:dc:b3:d6:
         f3:80:d0:3d:5a:da:17:fb:29:32:20:96:bc:d4:a1:48:bd:9a:
         f6:8f:a7:4e:73:00:17:6c:0d:4f:ba:17:bf:44:f4:92:38:78:
         d7:03:f5:29:19:38:03:37:dd:1d:d2:27:03:c9:22:aa:6c:ca:
         6a:86:96:a6:46:b7:e0:13:80:f8:40:bc:f9:09:80:73:d9:c6:
         df:f7:3f:fd:09:5e:e5:c7:bd:e7:c9:3b:b8:54:42:d7:f5:b6:
         5b:3a:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:29 2026 by rpki-client