Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File:                     qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier:          6UNOwlPeOdYnih4UWh7ZFGzglYA2DHjmczwCK8nQgz8=
Subject key identifier:   91:2F:EF:81:DA:EE:04:AA:2B:F1:F5:06:F2:67:AC:14:23:34:FC:34
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer:       /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial:       01A041612DDCF893C2BB51BC8BB0D2903208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number:          1243
Signing time:             Thu 27 Aug 2026 04:01:22 +0000
Manifest this update:     Thu 27 Aug 2026 04:01:22 +0000
Manifest next update:     Fri 28 Aug 2026 04:01:22 +0000
Files and hashes:         1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
                          2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
                          3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: orh22I5ugYjh6xhE+Cmfy83d0J8yDI/CKunXm8wyY+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:61:2d:dc:f8:93:c2:bb:51:bc:8b:b0:d2:90:32:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
        Validity
            Not Before: Aug 27 04:01:22 2026 GMT
            Not After : Aug 28 04:01:22 2026 GMT
        Subject: CN=912fef81daee04aa2bf1f506f267ac142334fc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fb:94:a3:b5:f7:ee:34:cd:2c:66:81:b1:80:
                    52:17:90:c5:02:b7:99:73:84:4c:bb:97:6a:bb:c3:
                    0c:aa:cb:96:93:44:a7:96:e9:f4:0e:f1:96:96:e8:
                    50:b4:ad:00:40:f2:73:dd:1b:2c:a2:d1:e9:58:a4:
                    3e:88:59:a2:55:cc:43:c3:9b:68:ed:19:ea:c4:f6:
                    ca:c7:8a:47:e3:30:a6:68:9d:bf:9b:fa:a0:9b:fd:
                    49:52:72:31:68:e5:5d:2d:76:3f:c3:6f:0a:3c:0a:
                    51:78:17:45:b0:6f:8a:a6:94:29:98:48:5b:18:39:
                    35:b1:d4:3b:6e:b7:bf:23:1b:32:a6:ba:67:f0:fb:
                    9e:2a:21:d0:4b:21:fd:68:e3:2a:8f:8a:2d:fc:30:
                    f2:52:08:0d:a3:3a:80:5e:7c:1d:d8:6d:89:39:ce:
                    90:64:0b:27:ee:2a:1d:d7:15:83:e4:b5:0e:83:48:
                    6f:99:1f:43:61:38:45:70:5f:aa:c8:53:da:7c:3d:
                    5a:43:66:47:4c:c1:42:32:ac:33:28:01:5a:85:57:
                    bb:a1:e6:8a:a2:3a:18:ee:b2:7f:a2:f7:eb:a1:fe:
                    af:98:6a:0d:11:95:b5:1f:18:25:35:58:6e:21:5c:
                    1a:75:61:86:6c:5c:0b:47:72:37:aa:6c:af:94:64:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2F:EF:81:DA:EE:04:AA:2B:F1:F5:06:F2:67:AC:14:23:34:FC:34
            X509v3 Authority Key Identifier:
                keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:78:0d:2f:ce:47:55:49:91:93:fe:08:7f:e1:73:54:a2:76:
         f1:c6:69:da:75:24:20:e1:6a:fe:db:7f:f6:57:db:ce:84:b9:
         b4:dd:fd:43:82:e6:97:b7:02:41:43:9a:47:67:cc:b0:4f:8c:
         ad:89:a9:23:e9:82:1b:b9:6f:ab:bc:2b:4d:22:4e:81:c0:47:
         a1:7f:e7:e3:45:a8:5f:3e:c4:ee:88:81:3a:16:91:f3:0f:cf:
         5c:de:35:c7:71:a6:10:83:df:99:a2:18:62:ae:68:1a:77:97:
         20:91:dc:2c:5c:d8:aa:78:00:1a:6e:75:51:69:b6:0e:99:9b:
         62:af:78:f3:bc:ee:1a:d5:ea:36:7a:1b:67:1b:b3:a1:6f:11:
         41:7b:eb:6c:f6:83:31:a2:5c:bc:24:1f:55:8c:04:5a:d7:9d:
         52:e5:2c:94:07:a7:20:85:a0:e9:ec:d9:78:34:ef:bd:c8:30:
         9a:01:92:a9:f8:04:14:75:af:8e:d2:1e:56:c0:2f:8d:79:f3:
         1b:7e:6d:e8:78:34:33:ce:2c:54:0c:8c:3e:2e:59:71:db:ed:
         ab:f6:a4:17:36:eb:46:c6:ef:da:3d:ec:61:28:28:9e:67:d8:
         f1:89:00:2d:93:92:f8:79:e1:c8:9d:ea:97:3d:a4:5a:e1:f8:
         50:3a:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:52:05 2026 by rpki-client