Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File:                     QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier:          sJktqQTlMi/T4S9gh8CjQIWepFhz8K1CEMgZU28FdYk=
Subject key identifier:   7D:60:4F:E6:E9:2E:F6:A5:51:E6:E0:7C:1E:A4:61:7A:EB:40:38:89
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer:       /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial:       01A0095FF9A359B9CF4761A4B4DD60FD1EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number:          12C7
Signing time:             Sun 16 Aug 2026 07:01:19 +0000
Manifest this update:     Sun 16 Aug 2026 07:01:19 +0000
Manifest next update:     Mon 17 Aug 2026 07:01:19 +0000
Files and hashes:         1: 6RTIAwrwJbLJ1fPq_cac7ZJtAcY.roa (hash: 2ERzYxNpNYyjAlD2AAScZj0ODsBHs3ahvyC6T+s+AbM=)
                          2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: BSJICfNiRxdYbcJSQokkyu6xvRxjh+cna7NWLCM5llM=)
                          3: oTRGw6Zs-d6bpDvQ-kL6ClRG4Ik.roa (hash: bLoXf9n41kaDI/ipYk9F3/X8uzxUQT3nnCgm1AJq7NE=)
                          4: oztBXyy3buPJ87mv28gbdNDGLjw.roa (hash: j94QmNmrVHRGHpcXkadwtbn926rIcrEUhkEOlIuoY3M=)
                          5: tGVxaOXkW7EuQqW9cKlE7ec1aac.roa (hash: muPN8zI+Nf3MgaQWzHsyyy2GZnIQWau/zxiVhyiqVlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Aug 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:09:5f:f9:a3:59:b9:cf:47:61:a4:b4:dd:60:fd:1e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
        Validity
            Not Before: Aug 16 07:01:19 2026 GMT
            Not After : Aug 17 07:01:19 2026 GMT
        Subject: CN=7d604fe6e92ef6a551e6e07c1ea4617aeb403889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:b5:cd:20:01:d6:f1:21:49:fa:3a:5f:2a:
                    1c:a5:81:b1:e9:b5:72:a7:e5:ef:b1:e7:db:7d:f1:
                    d6:38:01:7f:b1:d0:a9:42:3c:08:7f:6f:3a:1c:47:
                    20:36:27:bc:9e:7f:cd:06:4f:7e:80:a3:9c:6d:62:
                    40:94:41:a4:26:8f:c6:de:0f:92:19:e2:6d:61:db:
                    50:90:5a:0e:f3:42:a3:83:a3:ea:7c:60:5f:d7:ef:
                    4c:89:ad:1f:95:8c:db:59:99:75:ba:a0:5f:62:d7:
                    b8:d9:2b:d6:98:8d:11:20:5a:06:1e:f4:d2:ba:76:
                    a6:13:ee:2a:a1:b3:4e:47:cb:26:97:48:75:8b:6d:
                    94:6b:0e:0f:e0:91:f0:39:5d:4a:de:51:0e:24:86:
                    45:2a:95:ba:cf:80:63:44:fb:8e:0e:52:08:6f:20:
                    a5:0d:a3:7d:d2:87:1d:f3:b9:c1:50:a7:2d:b0:79:
                    65:ad:74:7e:9d:54:df:9e:b6:ad:cb:54:c2:a4:c7:
                    a2:2e:96:94:8f:a7:d0:41:c2:1b:54:27:d7:5a:fc:
                    1c:46:cb:6b:ed:32:e8:4c:72:b6:db:8c:9a:a0:81:
                    dd:e0:60:ca:13:87:7d:d9:a3:35:11:c1:83:75:89:
                    26:ac:43:93:c2:38:1b:01:8d:3a:84:84:eb:f6:01:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:4F:E6:E9:2E:F6:A5:51:E6:E0:7C:1E:A4:61:7A:EB:40:38:89
            X509v3 Authority Key Identifier:
                keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:49:f9:45:8d:47:9f:d9:3f:05:f0:34:a5:a0:9a:a8:24:e7:
         f5:56:2c:14:0b:1f:db:be:ef:36:28:95:83:25:d2:25:25:dd:
         ae:be:2c:d5:fa:f8:7d:2d:a7:d7:bb:4d:ca:32:04:59:47:9b:
         38:9f:df:60:08:83:37:0a:36:05:7b:c5:9d:ce:96:4d:7c:4b:
         b6:3d:21:b4:52:cc:11:3c:ed:c5:87:0e:40:92:eb:04:fb:53:
         30:18:4d:eb:cf:9f:be:f7:9c:fb:c2:1d:a7:9e:da:f8:1c:50:
         62:34:f1:dd:26:f8:fa:5c:56:2f:79:8d:42:c7:0b:c7:d8:6c:
         ad:5b:f8:67:6a:61:69:81:33:3a:26:55:bb:b7:b3:32:83:53:
         3a:73:45:5c:83:f3:46:58:64:e0:42:f3:0e:d0:26:c6:ee:1c:
         40:74:aa:6f:9f:88:62:f9:e1:e5:af:51:b9:61:68:72:ca:8a:
         e8:3a:04:03:ad:ea:96:0c:7c:b9:17:38:4e:8f:be:bd:d6:fc:
         39:53:2e:b0:09:04:b9:21:33:ab:20:77:ca:78:60:ef:19:fd:
         6e:10:4e:48:8c:f0:c5:0f:b0:de:26:82:5b:a7:44:3e:7c:3f:
         f6:ff:89:9a:7b:5a:e9:79:02:08:6d:52:1c:be:c7:4e:e1:65:
         22:e7:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 13:42:29 2026 by rpki-client