Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File:                     1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier:          pNozGSD7N4l4nT4uw4uoD5aRyMMyGsyqUiqlRP0Wy9k=
Subject key identifier:   2B:61:68:35:B4:B7:82:4C:38:65:35:84:32:6F:4D:95:B7:01:0D:94
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer:       /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial:       019F9EBAB20D0E430404107007CD2AE634E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number:          0C16
Signing time:             Sun 26 Jul 2026 14:01:02 +0000
Manifest this update:     Sun 26 Jul 2026 14:01:02 +0000
Manifest next update:     Mon 27 Jul 2026 14:01:02 +0000
Files and hashes:         1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: G/368uA4PLc/RmrkSS/5mz7zsOyE2rQxx400biNkW4g=)
                          2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
                          3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
                          4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
                          5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:ba:b2:0d:0e:43:04:04:10:70:07:cd:2a:e6:34:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
        Validity
            Not Before: Jul 26 14:01:02 2026 GMT
            Not After : Jul 27 14:01:02 2026 GMT
        Subject: CN=2b616835b4b7824c38653584326f4d95b7010d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:c6:d1:c4:c9:45:6e:84:57:21:ad:03:08:
                    1c:45:c4:1d:01:ec:f7:8c:fe:f3:1f:72:c2:be:dd:
                    f4:09:78:7d:55:5b:4d:a0:4c:ac:df:a2:25:c9:cb:
                    6a:2d:01:52:89:66:5c:d1:3c:02:76:c3:47:f0:e3:
                    7c:98:46:46:06:a8:ee:31:54:9b:c7:38:f7:1c:51:
                    e1:71:d3:cd:76:d2:0b:4e:0d:e1:6e:de:1d:6e:77:
                    f3:e7:de:c9:50:0e:b9:a4:24:67:01:98:c5:fa:07:
                    b4:ba:a7:65:4b:f3:e2:64:2d:e4:65:ab:db:b9:e6:
                    92:e2:2e:71:78:81:9e:0c:fa:0c:68:74:7f:ff:36:
                    45:c4:e4:ef:c7:43:62:1d:94:c8:73:94:ed:74:2f:
                    9c:9b:cf:4a:8f:96:10:ba:b2:a6:b0:3e:0e:5a:76:
                    29:a3:ea:81:f8:ea:e3:b0:95:af:9b:3c:22:c7:51:
                    06:6b:e3:db:9c:a5:db:8c:4f:42:7f:ec:36:97:35:
                    6f:39:79:b3:35:f8:80:08:2f:b4:48:80:a6:f5:53:
                    ed:08:fc:48:47:d3:19:b3:c7:0b:be:e1:24:65:2a:
                    94:9d:7f:82:b0:59:a1:5d:50:40:0a:ae:f6:78:f4:
                    89:5d:fb:93:5c:db:49:bb:2f:52:d9:fb:45:03:4b:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:61:68:35:B4:B7:82:4C:38:65:35:84:32:6F:4D:95:B7:01:0D:94
            X509v3 Authority Key Identifier:
                keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:8e:3b:89:e3:1a:8a:f5:27:43:a4:c9:7e:4d:df:eb:3c:
         a4:5b:60:6b:07:5e:39:31:27:db:1b:cb:99:f0:e9:82:5e:8b:
         61:ac:a7:12:19:89:45:33:74:20:51:f0:b9:a3:3b:e7:bf:da:
         cd:5d:e5:39:9a:e5:8e:ee:62:11:d6:23:23:50:38:74:3d:34:
         37:62:df:99:df:51:0e:a4:91:51:00:58:83:69:25:e6:fb:60:
         81:f9:1c:e3:43:f7:3a:f1:7d:79:42:12:c9:61:bd:6d:ce:f3:
         91:1c:0d:ab:49:22:3c:82:a5:44:35:75:10:77:78:c6:33:7c:
         62:8d:72:4f:7c:83:4e:02:cd:71:a1:71:f7:b9:34:52:e7:77:
         c7:be:a0:3e:d7:39:6d:80:c8:e3:3a:a3:26:03:9c:1b:63:01:
         cf:a8:df:c5:33:a3:5c:c5:08:06:98:d7:a7:90:84:3d:84:42:
         59:c7:a8:bd:66:91:9d:11:73:d2:fc:c2:aa:3b:20:a9:00:11:
         8d:b6:43:3f:db:97:72:0b:85:2f:5d:6c:9c:23:60:ed:6c:ca:
         31:f9:82:d3:cc:df:87:0c:46:0d:0e:bc:10:88:83:43:d5:68:
         f7:ca:e5:4d:ec:68:a1:5a:11:5c:92:cc:0f:1b:43:5a:90:c5:
         0e:09:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:00:43 2026 by rpki-client