Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          gW6Vl03NjZPLn9Sm48KJMglbvifcFxAesWZsENMGad4=
Subject key identifier:   7B:DB:62:A2:9A:2C:DB:64:61:31:C8:A9:04:7A:33:EE:BF:C5:40:51
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       01A002EFBF98C96F875C01AE56E1C581FD59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          0DD7
Signing time:             Sat 15 Aug 2026 01:01:01 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:01 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:01 +0000
Files and hashes:         1: F46yJZ1_ZtncXoXA1gqtcgSgxks.roa (hash: 4xB/U3VlaMjmD/USOo57UOd/gQlGLMP8wxFd8TZyukw=)
                          2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
                          3: MdEs2m-IrHBQCFgn-JlK3Bk7udc.roa (hash: Mo1ibwxe067q8YpdjNU7MlbnD4U4Cl8kB+EULAl5HTk=)
                          4: RBsCiDLoRPUa1sEuFbaN0WsP-WA.roa (hash: 2UgnVxLlLuAenOg0pXBuNFTqN4KE476l2bQbrokLRSM=)
                          5: SZxwFn-rv4YHYIn11rPhhdZalEE.roa (hash: qGdnGUtcjilIGvYv6gZqj/DBGuFNWX/5F8NZ1f7ELoQ=)
                          6: dQp1_bF-2hRgZhoSUp2j8-OiYAI.roa (hash: Ktp1XPuBOcTSPdwju+u+aKIoeTI5yi+j2Ty+pydNaPA=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: 1DMvxMu8ane4cBwSuCKPue2qT0LClNwWwPy3CZKcJzI=)
                          8: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:bf:98:c9:6f:87:5c:01:ae:56:e1:c5:81:fd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Aug 15 01:01:01 2026 GMT
            Not After : Aug 16 01:01:01 2026 GMT
        Subject: CN=7bdb62a29a2cdb646131c8a9047a33eebfc54051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:3d:e1:a3:67:33:64:33:50:35:b3:9c:24:
                    ba:6b:04:4c:c9:fc:62:1d:a6:b8:8b:6d:29:d6:e4:
                    00:a1:dc:01:40:3c:49:36:84:cd:8f:53:b3:12:ee:
                    f5:9f:cd:01:7a:3e:b2:1c:a0:26:80:02:f6:e9:e3:
                    69:05:8c:7a:96:10:e8:7b:d0:df:ce:bb:7c:82:ee:
                    70:79:5e:b1:32:22:93:a6:2b:c8:05:45:2d:81:de:
                    d7:7b:2e:89:71:d9:75:87:b7:f3:09:34:6a:49:53:
                    cd:f8:f5:bc:45:7c:f2:c5:cf:99:72:be:20:a6:51:
                    80:05:d7:a2:21:e1:04:1b:8b:40:03:fe:5b:d9:9c:
                    b0:77:c4:f2:6b:a5:00:36:ab:b4:52:db:f7:9c:d6:
                    d6:5e:df:34:9e:a6:6c:d5:42:b2:f0:3d:84:7e:61:
                    a9:d6:e5:fc:f5:bd:20:45:31:73:25:1e:76:95:b1:
                    b9:5d:2f:c3:2a:8e:0e:9a:c2:39:f5:6a:2f:8c:39:
                    a0:57:d1:72:3e:45:7b:6b:8a:c1:da:f3:95:1d:c7:
                    8a:0e:18:ab:9d:4a:22:b1:d4:88:e0:d5:8f:22:75:
                    87:0c:1f:8d:17:18:ca:40:b3:d7:7d:c8:bf:2c:24:
                    b3:f7:ef:a9:2b:35:7f:19:71:ff:6f:12:a2:1b:bb:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:62:A2:9A:2C:DB:64:61:31:C8:A9:04:7A:33:EE:BF:C5:40:51
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:58:57:ec:15:1a:63:6d:cc:2d:4b:54:4b:c2:4c:d1:c0:4c:
         b6:71:f2:20:49:ad:fb:34:ec:d9:5e:49:7b:72:5e:6c:7a:fb:
         6a:5f:95:b3:91:a4:6e:92:d8:09:05:92:f5:37:fc:9f:6f:a1:
         3c:09:98:21:e5:7d:9a:fc:a0:e8:dc:bb:9e:1c:7f:f7:31:e6:
         c0:0b:49:47:16:43:b5:0f:7c:1c:30:d5:d0:8d:e4:52:44:4b:
         39:99:60:d5:6a:e7:44:ed:63:29:5f:99:69:89:64:76:40:a1:
         5f:f1:62:cf:34:f2:6e:bd:c3:58:78:da:29:c5:c7:85:23:ce:
         3d:e4:2d:35:7b:a1:1d:bf:25:0a:c3:ab:cb:c5:22:d9:b0:63:
         8e:e5:b2:7b:9c:0a:b9:5f:50:b8:30:5e:cd:8e:56:ec:5b:28:
         ba:3f:95:83:b9:55:5e:8f:17:83:74:da:7f:fc:68:73:92:5a:
         2a:60:71:ad:d7:ee:ab:38:b1:19:bc:07:a0:c5:f5:15:b2:4f:
         85:39:97:04:00:fc:01:05:95:20:ac:b1:14:20:15:6a:c9:2e:
         17:bd:5e:79:97:7c:8b:df:b5:4f:4b:50:25:3b:04:64:f2:30:
         1c:05:e1:a5:a7:54:b8:44:58:c5:25:86:41:d8:2a:70:24:53:
         20:e9:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:40 2026 by rpki-client