Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
File:                     QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json)
Hash identifier:          p5USiF7ekA9abdpntOL8S+g/Fd3yDxLwX2ymJ4WZxBk=
Subject key identifier:   0B:07:05:D0:EC:16:F5:BD:93:1D:DF:85:23:C9:BF:B9:C4:70:35:D6
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Certificate issuer:       /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial:       01A0021424166F75F389E1FBF2EB3E35495D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
Manifest number:          0CCA
Signing time:             Fri 14 Aug 2026 21:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:09 +0000
Files and hashes:         1: M2qWTH73NkMquwfzQJVxK2FVK8I.roa (hash: 5PswSRa1E9ITddc7NsFeNUg4nkAmj5HsnCX0ziwfNao=)
                          2: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: A6Uilei4wwAwjpOeOLfgTfJ3dwT0ESVCavXYqeB3124=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:24:16:6f:75:f3:89:e1:fb:f2:eb:3e:35:49:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
        Validity
            Not Before: Aug 14 21:01:09 2026 GMT
            Not After : Aug 15 21:01:09 2026 GMT
        Subject: CN=0b0705d0ec16f5bd931ddf8523c9bfb9c47035d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:35:96:0a:23:9a:f0:ed:05:b5:66:0a:e8:3c:
                    ce:a4:e2:79:be:53:b6:0b:53:28:ff:9f:f0:df:1d:
                    c6:cd:71:68:5c:1a:fa:90:c7:b0:3d:99:b6:d7:72:
                    be:c7:c0:eb:ce:92:62:af:a6:77:4e:e9:b3:06:bb:
                    af:4e:26:f3:c9:5a:39:3d:02:dc:61:0d:64:87:8f:
                    f0:31:a2:18:71:7e:45:16:f8:7a:a5:6a:44:55:c8:
                    5c:50:65:68:d4:7d:34:5f:34:6b:c9:7d:2d:5f:70:
                    8a:32:ba:0b:be:d5:b5:d6:2e:d9:94:6c:51:a1:66:
                    f1:dd:7b:af:c6:31:4c:af:a5:2a:5c:8a:d5:59:db:
                    2f:96:96:23:a4:61:55:a3:a0:f3:8c:54:c8:fb:06:
                    5a:35:0f:db:c7:4f:a1:b9:3b:e3:43:a1:06:62:11:
                    1c:22:b7:b0:5f:a5:53:4d:f0:c1:ad:b1:28:e5:d1:
                    d9:f0:e4:6a:ef:cd:77:5c:ba:16:3c:83:8d:55:d5:
                    02:1c:f1:ab:8a:04:c0:43:a5:f5:37:83:ff:37:79:
                    ad:3c:82:f2:cf:ac:b4:4d:8c:2d:ac:6a:24:6a:d5:
                    9e:e0:1e:c1:de:f7:53:10:67:e9:2c:b8:9e:ec:53:
                    7a:a0:7c:ff:7c:e6:70:2e:7c:ca:8f:6d:3e:49:29:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:07:05:D0:EC:16:F5:BD:93:1D:DF:85:23:C9:BF:B9:C4:70:35:D6
            X509v3 Authority Key Identifier:
                keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f4:d0:97:21:35:57:4e:d8:21:6b:8b:b5:7c:a9:59:0d:56:
         ab:69:65:c3:4c:3a:81:38:0a:82:d2:42:a4:02:0e:e2:12:98:
         cc:9c:fa:24:4e:95:03:5b:f1:92:45:10:89:46:3f:13:0d:ac:
         00:ad:9e:f3:e1:82:02:b8:02:00:a9:d7:86:d3:fe:eb:07:2f:
         02:fc:5d:a0:64:68:a6:b7:8f:31:69:1e:d0:20:21:5e:b1:32:
         1d:9d:6b:29:0f:c2:a8:b8:e0:20:44:44:7f:39:b2:0d:b6:f0:
         de:45:f9:c2:ec:0d:e4:5f:43:3b:58:f5:54:76:88:9f:ec:e5:
         a0:55:98:e8:ce:4e:e1:95:eb:3e:e3:cc:d9:91:e8:86:90:9b:
         e8:92:73:b8:62:ad:b9:07:90:bb:4a:29:5f:88:da:52:1a:68:
         00:83:67:a3:0e:22:46:31:c3:16:82:d3:ca:da:5a:fc:78:6e:
         9a:2c:d4:03:6a:0f:37:ba:3f:9e:e0:23:60:ee:c1:51:69:8b:
         3a:f6:ed:04:c9:cb:c3:90:1d:84:3e:9b:3b:8e:67:d3:e9:1f:
         c6:57:9c:fd:a7:62:50:50:01:81:e6:1a:21:ba:7d:41:53:cc:
         88:69:6c:6f:4b:b7:de:7a:ed:db:28:a0:e2:a5:35:41:ce:c0:
         33:a2:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:30:42 2026 by rpki-client