Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File:                     0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier:          DBlGyfjDDPr9Dq1seMxWcuKtitZu02SkMvzbYhrW890=
Subject key identifier:   DD:7A:62:5C:13:A4:93:42:9E:5B:BF:5F:14:8B:80:04:C6:90:89:CA
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer:       /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial:       01A0111967FCD296E2BC0260CA77E5316CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number:          1196
Signing time:             Mon 17 Aug 2026 19:01:12 +0000
Manifest this update:     Mon 17 Aug 2026 19:01:12 +0000
Manifest next update:     Tue 18 Aug 2026 19:01:12 +0000
Files and hashes:         1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: FDBBZP2WG06xMORbCv/qwTP6D2Bmhwrxibt9hTDv1sg=)
                          2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 14:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:11:19:67:fc:d2:96:e2:bc:02:60:ca:77:e5:31:6c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2abab75e746db1ecaa998759900399485093027
        Validity
            Not Before: Aug 17 19:01:12 2026 GMT
            Not After : Aug 18 19:01:12 2026 GMT
        Subject: CN=dd7a625c13a493429e5bbf5f148b8004c69089ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:bf:9e:f4:31:17:96:2d:42:2f:ba:31:77:
                    51:3c:13:52:99:99:f9:fc:60:a7:a0:44:c2:69:5a:
                    8c:99:30:16:01:e5:73:bb:f1:fe:0d:0c:e0:f6:40:
                    9e:01:f1:76:08:c2:bc:85:c5:a4:5d:36:75:98:96:
                    f8:85:c5:28:00:be:c9:d3:3f:c7:82:34:79:6c:5b:
                    ad:b0:cf:92:fd:9e:27:b4:3f:8b:7e:77:20:25:22:
                    cb:e6:eb:67:ca:11:f2:45:37:65:fc:44:20:93:8e:
                    46:ad:db:7e:96:0a:59:4a:e4:92:86:0b:28:e0:bf:
                    31:b5:cc:da:8d:f4:41:dd:ff:56:c7:92:5b:fd:d6:
                    49:f2:38:97:89:d5:62:02:b9:79:20:f7:da:1a:92:
                    32:9d:31:20:1a:17:c0:3d:1d:0c:94:a6:a3:73:d6:
                    8d:ed:2c:52:7a:a5:cc:8f:4b:aa:e9:55:7d:4e:f7:
                    87:ca:49:03:bc:a0:c3:0a:6f:b0:20:b2:2d:78:31:
                    dd:61:ce:cc:07:d1:6b:53:6c:80:2f:71:ff:99:a5:
                    53:c7:c9:95:c4:4c:22:9a:9f:03:8e:1a:a4:be:1a:
                    33:80:cf:ac:05:27:99:f6:1a:81:43:2a:a7:55:ad:
                    04:78:a1:f7:c1:9a:a5:aa:30:ef:57:8c:02:37:e2:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7A:62:5C:13:A4:93:42:9E:5B:BF:5F:14:8B:80:04:C6:90:89:CA
            X509v3 Authority Key Identifier:
                keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d9:88:e3:ea:1b:bc:fc:39:1c:54:69:ad:cd:fc:4b:d6:68:
         ac:cf:5b:2e:87:b8:9a:92:e6:88:ea:98:22:01:5c:07:e9:b4:
         79:a7:35:db:d7:d7:73:fe:1b:34:db:83:02:2f:be:14:3d:18:
         02:ea:89:90:2d:d8:14:a3:f8:05:67:bb:58:59:47:6f:b2:4d:
         01:08:10:be:62:61:2f:d3:c0:85:c1:6d:a3:d3:c6:e1:b0:63:
         43:95:0a:7d:f5:5a:f6:b6:cd:59:52:1b:08:5d:a0:4d:ee:ae:
         2b:ae:9e:ee:e9:69:77:f2:3d:e2:b9:97:8b:aa:83:bf:4c:4b:
         5e:27:e7:72:37:a7:32:8a:cb:72:bf:33:06:df:6d:f6:f9:52:
         79:62:03:e5:f3:91:6b:e5:7e:59:21:32:9b:7d:e8:88:cc:b8:
         1a:fc:c7:a0:80:50:2e:71:eb:84:23:65:6b:52:1f:fe:ab:1f:
         f1:5d:ac:44:75:5f:b8:2a:51:09:db:ca:dd:e8:b6:69:c6:c5:
         81:61:e7:9c:12:ed:c7:b5:c8:91:ea:43:03:d4:de:e3:31:90:
         fb:4b:b6:9a:35:1e:26:2a:48:d2:b0:4a:ad:72:f6:df:f6:1d:
         9b:92:05:7e:77:42:f0:8c:ae:e2:f8:44:63:4c:df:22:19:b4:
         34:15:1d:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaARGWf80pbivAJgynflMWylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw
OTMwMjcwHhcNMjYwODE3MTkwMTEyWhcNMjYwODE4MTkwMTEyWjAzMTEwLwYDVQQD
EyhkZDdhNjI1YzEzYTQ5MzQyOWU1YmJmNWYxNDhiODAwNGM2OTA4OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOO/nvQxF5YtQi+6MXdRPBNSmZn5
/GCnoETCaVqMmTAWAeVzu/H+DQzg9kCeAfF2CMK8hcWkXTZ1mJb4hcUoAL7J0z/H
gjR5bFutsM+S/Z4ntD+LfncgJSLL5utnyhHyRTdl/EQgk45Grdt+lgpZSuSShgso
4L8xtczajfRB3f9Wx5Jb/dZJ8jiXidViArl5IPfaGpIynTEgGhfAPR0MlKajc9aN
7SxSeqXMj0uq6VV9TveHykkDvKDDCm+wILIteDHdYc7MB9FrU2yAL3H/maVTx8mV
xEwimp8DjhqkvhozgM+sBSeZ9hqBQyqnVa0EeKH3wZqlqjDvV4wCN+J//QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN16YlwTpJNCnlu/XxSLgATGkInKMB8GA1UdIwQY
MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt
NTk1YWRjNWJmZDc0LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0
LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNmI4+ob
vPw5HFRprc38S9ZorM9bLoe4mpLmiOqYIgFcB+m0eac129fXc/4bNNuDAi++FD0Y
AuqJkC3YFKP4BWe7WFlHb7JNAQgQvmJhL9PAhcFto9PG4bBjQ5UKffVa9rbNWVIb
CF2gTe6uK66e7ulpd/I94rmXi6qDv0xLXifncjenMorLcr8zBt9t9vlSeWID5fOR
a+V+WSEym33oiMy4GvzHoIBQLnHrhCNla1If/qsf8V2sRHVfuCpRCdvK3ei2acbF
gWHnnBLtx7XIkepDA9Te4zGQ+0u2mjUeJipI0rBKrXL23/Ydm5IFfndC8Iyu4vhE
Y0zfIhm0NBUdTA==
-----END CERTIFICATE-----
Generated at Mon Aug 17 21:16:23 2026 by rpki-client