Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File:                     QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier:          luQMiCYeiSg3nyS7p06SYqDtgD9cQEGQflWRfno78lc=
Subject key identifier:   4B:03:0F:FB:26:73:BA:86:E0:DD:AF:76:D2:F3:BB:E0:31:A2:C2:BF
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer:       /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial:       01A03E5F9214206B9809CF323CE19995C7B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number:          1A27
Signing time:             Wed 26 Aug 2026 14:00:45 +0000
Manifest this update:     Wed 26 Aug 2026 14:00:45 +0000
Manifest next update:     Thu 27 Aug 2026 14:00:45 +0000
Files and hashes:         1: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (hash: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw=)
                          2: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (hash: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU=)
                          3: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (hash: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA=)
                          4: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: JAd1KZ3fme6nhEX9HsTELK60+kU2ipLh+b8bgc6WiVY=)
                          5: zdUU6xh-U_UhQuIpzwDv3G1TgNc.roa (hash: Xcmlw4uYbZey4RR44rfO/TAhXzqgGs0gxnMsef5qoaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3e:5f:92:14:20:6b:98:09:cf:32:3c:e1:99:95:c7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
        Validity
            Not Before: Aug 26 14:00:45 2026 GMT
            Not After : Aug 27 14:00:45 2026 GMT
        Subject: CN=4b030ffb2673ba86e0ddaf76d2f3bbe031a2c2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:a1:0c:eb:8d:85:63:f4:c6:52:6d:f8:e6:
                    84:46:33:da:4f:dd:fa:76:b2:45:28:3e:a7:24:bb:
                    d9:da:81:1d:98:d7:df:22:ea:01:71:67:da:9f:96:
                    fc:bd:59:6a:38:98:45:92:08:64:a0:5b:ff:8e:c0:
                    d0:49:0b:b2:23:82:92:2f:1e:06:47:9d:5e:14:69:
                    32:cd:97:04:df:c1:38:fa:9e:43:d3:a0:ee:0e:b2:
                    5b:5e:f1:22:ab:78:1d:2e:94:54:f5:05:5b:b2:72:
                    b7:66:52:c5:3f:7b:72:9d:04:dc:ee:d4:ec:b1:7c:
                    6a:41:a2:21:ae:3f:30:98:a3:32:d0:9e:02:0d:92:
                    88:0d:e0:de:6a:9d:63:51:28:23:08:1f:dd:25:d2:
                    b5:9a:18:ef:63:2b:f0:52:4f:c1:fb:87:62:e3:d7:
                    eb:fd:8e:c1:17:14:82:12:00:b3:4b:2b:18:52:26:
                    24:d0:e8:bc:3c:12:1c:34:03:30:ec:a9:8c:60:c4:
                    b6:91:e8:eb:97:05:62:77:ab:39:57:a5:c8:2b:4c:
                    0d:3c:71:39:46:2f:f9:6d:52:85:39:19:46:de:12:
                    00:bd:39:8e:4d:a3:a2:58:e1:a3:27:27:3a:4c:e6:
                    d5:e4:4f:5a:27:57:38:a5:b9:11:8d:8e:26:e1:05:
                    99:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:03:0F:FB:26:73:BA:86:E0:DD:AF:76:D2:F3:BB:E0:31:A2:C2:BF
            X509v3 Authority Key Identifier:
                keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:20:1f:a6:c5:49:76:5a:d2:c5:b9:90:97:dc:3b:ac:e9:0b:
         69:8a:fe:22:90:d3:55:c5:5f:2d:98:26:e8:89:c7:7c:55:99:
         b3:98:2c:7a:02:81:a2:f7:48:92:56:59:33:2e:34:cb:b9:8e:
         ee:73:da:bb:b8:66:84:cb:5e:8c:14:ff:bc:9d:a7:c4:a9:4b:
         67:e6:a0:16:65:f7:ee:2b:0f:01:1b:38:ea:33:43:31:91:1a:
         50:1f:77:c7:10:cb:4f:d7:38:74:82:25:47:d3:99:51:81:e3:
         07:a7:04:7c:25:71:a4:91:84:c0:e3:12:bd:24:c1:e1:9a:87:
         4c:92:de:8b:03:62:e6:62:07:66:65:ba:b9:db:c2:3a:a5:20:
         7d:52:09:38:58:96:7b:ab:51:dd:74:81:ac:0e:07:42:31:90:
         5b:a0:c5:11:11:5e:8b:14:f6:27:4b:04:a9:27:a3:4b:a0:b4:
         ff:82:dd:71:14:0c:bf:1d:41:fe:51:9f:6d:66:47:34:5d:24:
         c4:51:d4:4e:c4:ec:10:28:e8:0d:d1:33:1c:6d:d5:6d:e3:08:
         0e:5f:38:e2:39:d6:42:a5:08:5c:94:90:c5:bd:8e:1d:ec:88:
         3a:e7:ce:3c:87:26:9d:49:41:96:fd:13:52:a6:e9:16:7b:ae:
         62:aa:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:17 2026 by rpki-client