Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.mft
File:                     Q2D1fFyV8mlM0dp8o8Axu5YuZCo.mft (raw, json)
Hash identifier:          M0Tupj2zq02gZ14XBSfDMVSroxRDppedoltk1e5qBq4=
Subject key identifier:   CB:B2:F9:7D:6E:8C:7F:80:04:34:36:FD:48:76:D3:E5:FF:F7:27:DB
Authority key identifier: 43:60:F5:7C:5C:95:F2:69:4C:D1:DA:7C:A3:C0:31:BB:96:2E:64:2A
Certificate issuer:       /CN=4360f57c5c95f2694cd1da7ca3c031bb962e642a
Certificate serial:       01A0035DBF70B886B88EA62A4248439C8DB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:01:10 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:10 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:10 +0000
Files and hashes:         1: 0rlwF8bzHYPoC8R-lM02lYukPa0.roa (hash: nxXWVpl4JSN5lCg1zrsiynOdO6zA26157ttNo2duhRo=)
                          2: Q2D1fFyV8mlM0dp8o8Axu5YuZCo.crl (hash: 1RPcgMbu6/Jv1C8RTYhy0JfvwjZdIQffpsoItYPgmD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:bf:70:b8:86:b8:8e:a6:2a:42:48:43:9c:8d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4360f57c5c95f2694cd1da7ca3c031bb962e642a
        Validity
            Not Before: Aug 15 03:01:10 2026 GMT
            Not After : Aug 16 03:01:10 2026 GMT
        Subject: CN=cbb2f97d6e8c7f80043436fd4876d3e5fff727db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:65:a7:77:2d:17:59:8c:66:98:4b:68:39:4d:
                    e0:04:60:df:1f:a7:a0:70:98:14:b5:de:d3:00:c4:
                    2b:78:4a:46:64:b9:15:52:6d:97:9f:cf:23:f7:72:
                    7c:a1:82:26:4f:96:18:4e:50:dc:4d:84:5a:b7:23:
                    5b:c9:58:51:c7:3c:74:40:d8:44:46:ac:48:6e:9f:
                    1a:4b:f7:c0:7b:47:72:bf:cc:3f:ea:2a:1f:fd:5b:
                    e4:4e:ca:b5:25:db:5c:da:78:e9:55:84:fb:d1:f8:
                    8a:38:9c:83:c3:2a:4f:34:5a:4d:94:03:8b:be:de:
                    ea:d3:5d:9f:9c:03:d7:b3:e1:2a:8a:89:27:8b:91:
                    8d:27:22:f1:58:ea:4c:cd:8b:a8:57:42:9a:06:a3:
                    08:1a:f7:e6:b9:54:f9:c7:8c:e7:5e:82:98:bb:1c:
                    3f:09:65:99:a0:ea:0c:17:d5:ab:8a:0d:e0:e5:27:
                    a4:db:4c:16:31:f5:d9:1c:14:a5:f5:2b:c3:7b:21:
                    21:96:36:e8:42:45:08:df:b9:53:d7:77:91:2c:b6:
                    0d:53:e5:a3:d7:d1:ca:c2:a3:12:3d:7f:df:e8:73:
                    c8:97:ac:5a:b0:90:1b:44:64:8f:bb:67:7a:d4:3c:
                    92:aa:bc:50:07:16:b9:0a:5e:b8:4d:31:5f:a4:47:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:F9:7D:6E:8C:7F:80:04:34:36:FD:48:76:D3:E5:FF:F7:27:DB
            X509v3 Authority Key Identifier:
                keyid:43:60:F5:7C:5C:95:F2:69:4C:D1:DA:7C:A3:C0:31:BB:96:2E:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:85:9e:af:b5:ae:70:ab:b3:91:f2:5d:d9:cd:3b:63:9f:a4:
         20:7a:99:a7:48:5f:1e:8a:3b:a3:11:f0:09:3b:2f:c5:c3:39:
         5b:e0:30:2a:65:26:b3:71:19:6d:1a:0b:a2:e1:3c:15:0d:1c:
         05:b5:5a:4f:7a:89:f2:1d:ac:f7:6f:85:cc:1e:1a:83:98:8f:
         96:1f:16:7e:93:91:8b:6f:2d:ae:00:a8:8f:e0:d2:f5:d3:0d:
         a3:1c:4c:7c:75:57:74:36:3e:c1:e5:35:36:5a:96:ec:73:73:
         29:d7:13:14:d9:5b:2c:65:d5:38:a7:06:3f:dc:d4:7c:2a:8d:
         84:9e:cd:7f:8f:a7:52:fb:5b:e0:74:78:6b:29:fb:73:87:08:
         b5:a7:8e:ab:18:1a:9c:cc:e0:6d:80:23:02:d8:da:38:db:b7:
         e1:8e:c7:f6:45:db:e8:4f:fd:66:36:f7:5e:38:c0:81:20:26:
         9e:7d:3a:b6:8b:4a:c8:38:6a:79:63:41:ee:e9:18:ea:2b:f7:
         cc:a4:0a:b8:9e:28:ce:f2:31:30:3d:22:be:72:a1:5a:8b:14:
         b7:d6:27:6a:32:4a:09:d9:0b:33:3c:e7:42:0c:72:f6:b3:df:
         c4:25:da:3b:ef:d9:b6:f1:74:f5:06:d6:20:27:7e:1d:3f:22:
         a0:91:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:14 2026 by rpki-client