Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
File:                     1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft (raw, json)
Hash identifier:          5gJ9ACi3CO9/uFHefxViS56mFtcsd0fWaIfTFNyma6M=
Subject key identifier:   B4:3A:F5:5C:32:06:D1:34:90:85:83:9F:1A:F2:8D:BC:20:BA:05:05
Authority key identifier: F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
Certificate issuer:       /CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Certificate serial:       01A03D4D0C57F86BCEAEDD38C1329D15F4D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
Manifest number:          99
Signing time:             Wed 26 Aug 2026 09:00:54 +0000
Manifest this update:     Wed 26 Aug 2026 09:00:54 +0000
Manifest next update:     Thu 27 Aug 2026 09:00:54 +0000
Files and hashes:         1: 1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl (hash: jvq119Y7eZ9dZchHtgBxnSOC1eyOnckNCkKTX/rzj1w=)
                          2: AzVaz8Wv4zmV7ZBOoRzO4yPctdE.roa (hash: yYSVYxBpq8wewCw4ExeSk//aRdqOHQHDWwbP/VWRcds=)
                          3: BE9SKr84ZzNinvDUOtQsxIus1PU.roa (hash: NJy50Gb8QXCb9hwDocalr71wywFzdVxA+AKgOp5RhCQ=)
                          4: ahzg2jU7lSLG85BOWPO2OuHFuyM.roa (hash: 23XmMooSM5bQ9DLWo9+BnbvwrzjkG4Q/VmbGV0tBXvU=)
                          5: hBVf0oSR64lXEURMC_6uWoVydG8.roa (hash: PmOQkDBponpodSJxyDx+cYvEIwxcLnkIXOwcqmg5y5c=)
                          6: ylDBTYX9mMbZPrIC82FbSWOlE0Q.roa (hash: VerZxxF2BuwJmE0kidxiI2BSXlIpBlA7x46UriSXoUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:4d:0c:57:f8:6b:ce:ae:dd:38:c1:32:9d:15:f4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
        Validity
            Not Before: Aug 26 09:00:54 2026 GMT
            Not After : Aug 27 09:00:54 2026 GMT
        Subject: CN=b43af55c3206d1349085839f1af28dbc20ba0505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:9d:eb:29:d7:6a:1f:b3:b3:28:0b:a8:8d:
                    ac:9e:f2:fc:27:50:bb:a8:5e:7e:9a:63:8d:91:85:
                    e6:80:af:7a:93:b5:eb:03:84:8b:ba:bb:5f:8f:6e:
                    1b:cf:4f:e7:3d:bc:e2:9b:94:6a:aa:fa:3a:d1:ba:
                    5a:c3:41:9d:28:36:1a:9f:df:ce:68:d1:4c:3f:bf:
                    ec:3a:67:c7:d6:50:78:9e:c6:cc:d1:25:e1:01:60:
                    79:47:b1:7b:2d:3e:21:eb:15:55:7a:2a:7d:c4:1a:
                    4e:0d:e2:16:32:d3:92:5f:bb:c1:99:b4:af:0d:0f:
                    a0:4f:ac:22:df:f5:05:eb:2d:10:47:6d:0f:6b:13:
                    27:e9:2c:53:1a:91:35:0b:7c:cc:6b:bf:c5:f2:d7:
                    1a:76:47:51:ff:1b:ac:8e:1e:6d:b7:5f:4a:67:02:
                    0b:89:ed:ca:cf:44:2e:30:06:53:4e:58:f9:bd:d0:
                    47:ad:73:02:d4:fd:f2:39:59:6e:86:d4:27:fc:1c:
                    cc:fd:51:24:6e:fb:d4:3b:f0:df:4a:11:fe:ec:bd:
                    39:30:cd:90:0a:98:0f:e4:d7:49:2d:3b:54:62:e0:
                    6a:b1:90:bd:29:e2:c4:98:f8:b6:69:62:07:ed:90:
                    63:26:6f:76:12:38:46:27:2f:fe:f7:e7:02:ea:a6:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3A:F5:5C:32:06:D1:34:90:85:83:9F:1A:F2:8D:BC:20:BA:05:05
            X509v3 Authority Key Identifier:
                keyid:F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:14:a6:ec:9e:f3:b7:cb:c4:b3:c7:1e:b1:77:cb:14:24:a7:
         37:5d:db:80:4e:fb:d8:d7:93:ed:51:88:3c:bc:67:fa:00:7f:
         dd:9f:86:80:9a:17:2a:8e:dd:48:a6:be:0e:53:61:68:b7:c0:
         54:1d:83:34:ad:96:49:2f:80:02:38:8d:53:db:64:f0:10:58:
         d2:23:50:bc:37:d5:5b:0b:5f:c3:7a:92:ab:67:51:69:53:1c:
         19:5a:35:93:4d:d4:9f:6e:8d:9a:c4:06:bd:18:af:8d:60:e9:
         ed:50:8b:ee:1c:2c:8e:04:bf:4e:52:22:7c:2f:f8:41:da:df:
         fb:06:81:ae:70:74:bb:8a:fb:db:6c:94:6c:79:e7:43:21:1e:
         28:75:ba:25:0c:fc:17:b7:ad:c6:2e:a0:35:4f:ca:11:a3:16:
         35:8f:cf:06:97:e2:7b:d3:bb:9b:02:0f:6a:f4:24:56:f8:66:
         16:68:83:8b:60:02:ab:86:c2:05:4c:60:5a:e7:08:b3:93:87:
         ab:25:b1:89:66:a3:37:af:eb:0e:57:89:b9:69:ef:94:3e:13:
         c0:e9:07:8c:d9:24:77:31:01:55:71:5f:e3:9a:06:de:ee:f0:
         52:63:e1:9c:ca:e3:05:7d:52:46:d2:48:3b:8b:08:35:79:a7:
         31:20:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:07:35 2026 by rpki-client