Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
File:                     qXJG_EMZM_Cyggztllx4URgLFe4.mft (raw, json)
Hash identifier:          +6NBwyASbQvZKjIL+B1lZMjIdCO1IJLJt6abwkaPy6E=
Subject key identifier:   90:19:89:0C:88:9F:8E:99:F5:C4:D3:56:27:21:D7:F3:69:23:88:FC
Authority key identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE
Certificate issuer:       /CN=a97246fc431933f0b2820ced965c7851180b15ee
Certificate serial:       019FF6B56B18DA8568086DD7D770FF9CAA2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
Manifest number:          0DA3
Signing time:             Wed 12 Aug 2026 16:01:52 +0000
Manifest this update:     Wed 12 Aug 2026 16:01:52 +0000
Manifest next update:     Thu 13 Aug 2026 16:01:52 +0000
Files and hashes:         1: qXJG_EMZM_Cyggztllx4URgLFe4.crl (hash: 5Q/c5KXPT26Qqd0bRVy1U0XuniQ901h9qN/bpcnzs1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:b5:6b:18:da:85:68:08:6d:d7:d7:70:ff:9c:aa:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97246fc431933f0b2820ced965c7851180b15ee
        Validity
            Not Before: Aug 12 16:01:52 2026 GMT
            Not After : Aug 13 16:01:52 2026 GMT
        Subject: CN=9019890c889f8e99f5c4d3562721d7f3692388fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:9c:c9:16:4e:d5:db:f5:49:af:fe:51:23:
                    da:0f:40:94:e0:4e:d1:2d:79:27:5e:46:57:83:f8:
                    a4:5c:c5:32:01:58:33:e0:34:52:c2:af:26:2e:9c:
                    72:f9:ef:11:9d:10:2c:f8:67:80:26:1f:9b:60:34:
                    b7:81:e9:44:bf:2e:99:26:23:6f:bb:1e:6e:99:4b:
                    b1:93:6f:bc:8c:ce:44:aa:09:f3:c1:69:43:86:4a:
                    9f:41:21:1a:af:19:2e:19:31:34:98:d5:75:57:dc:
                    19:7c:cb:91:fb:c5:16:18:09:cf:05:81:28:29:b0:
                    32:fd:2e:92:eb:01:cc:e6:fa:b8:1e:7c:8c:5d:e8:
                    0a:e3:82:e7:b2:83:3a:28:8f:86:de:58:78:15:94:
                    d4:cf:ce:cc:4c:b4:15:d3:de:b3:7e:ab:a8:71:db:
                    16:f0:a4:c2:83:d9:6e:79:03:21:b5:7f:5a:da:a5:
                    b6:11:0c:20:86:c8:b2:1a:0d:6a:14:cd:13:c9:17:
                    cb:c1:62:c3:e5:e4:b0:87:15:2d:c7:b9:e0:31:cf:
                    ca:51:56:e1:a6:15:8a:a0:f9:ce:31:f3:b2:7e:b7:
                    81:17:7b:32:74:6a:1d:00:3a:fd:89:f7:da:e9:08:
                    05:b6:ac:00:c6:ce:5a:31:48:79:e2:1b:bb:79:ea:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:19:89:0C:88:9F:8E:99:F5:C4:D3:56:27:21:D7:F3:69:23:88:FC
            X509v3 Authority Key Identifier:
                keyid:A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bc:9f:f9:6b:65:7c:9c:a3:96:4b:6e:67:79:90:95:1a:1b:
         b0:4f:c2:f1:4f:df:c0:92:69:83:65:5e:c4:d8:87:dd:11:34:
         f4:fb:77:59:44:4e:5c:2c:21:bc:ac:94:8a:26:42:ed:de:fa:
         45:78:96:92:fb:d1:ef:6e:45:8c:3c:fe:bd:74:b3:86:9d:29:
         04:4b:42:e6:5e:cc:40:a2:b8:d7:f0:26:6a:05:8c:01:32:9b:
         ce:ba:cb:e9:fd:f9:58:a8:dc:73:65:f6:45:b8:ea:d7:73:37:
         53:1a:16:bf:40:0a:9b:b5:c6:7b:07:a7:51:4f:8d:c5:9f:24:
         78:0c:10:81:fa:f4:c8:f3:c6:1e:27:bf:c5:11:15:1e:dc:ed:
         e7:85:cd:f5:7a:76:bd:82:94:d8:17:78:ed:66:27:df:b4:05:
         e0:c5:7b:8d:10:da:2a:eb:52:1d:c8:2d:42:9d:2b:ac:d2:04:
         e5:e5:e4:ee:be:e1:a4:d1:4a:81:e0:ba:28:41:a8:15:4e:48:
         4f:49:9a:b8:b9:23:bc:9a:88:40:36:d3:e5:fa:ed:8c:7a:48:
         3f:1e:3c:2b:e6:db:ca:3f:a1:a9:7f:69:dd:34:f2:86:91:95:
         0e:94:8f:2c:fb:57:3e:3c:77:19:1b:f9:61:31:c7:a4:8e:86:
         70:21:ba:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/2tWsY2oVoCG3X13D/nKovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NzI0NmZjNDMxOTMzZjBiMjgyMGNlZDk2NWM3ODUxMTgw
YjE1ZWUwHhcNMjYwODEyMTYwMTUyWhcNMjYwODEzMTYwMTUyWjAzMTEwLwYDVQQD
Eyg5MDE5ODkwYzg4OWY4ZTk5ZjVjNGQzNTYyNzIxZDdmMzY5MjM4OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ6cyRZO1dv1Sa/+USPaD0CU4E7R
LXknXkZXg/ikXMUyAVgz4DRSwq8mLpxy+e8RnRAs+GeAJh+bYDS3gelEvy6ZJiNv
ux5umUuxk2+8jM5EqgnzwWlDhkqfQSEarxkuGTE0mNV1V9wZfMuR+8UWGAnPBYEo
KbAy/S6S6wHM5vq4HnyMXegK44LnsoM6KI+G3lh4FZTUz87MTLQV096zfquocdsW
8KTCg9lueQMhtX9a2qW2EQwghsiyGg1qFM0TyRfLwWLD5eSwhxUtx7ngMc/KUVbh
phWKoPnOMfOyfreBF3sydGodADr9iffa6QgFtqwAxs5aMUh54hu7eepRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAZiQyIn46Z9cTTVich1/NpI4j8MB8GA1UdIwQY
MBaAFKlyRvxDGTPwsoIM7ZZceFEYCxXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVhKR19FTVpNX0N5Z2d6dGxseDRVUmdMRmU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ODYzMTktZmY1Zi00MTJmLWFhNzQt
Y2FhZDUxNjk0ZTk3LzEvcVhKR19FTVpNX0N5Z2d6dGxseDRVUmdMRmU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83ODYzMTktZmY1Zi00MTJmLWFhNzQtY2FhZDUxNjk0ZTk3
LzEvcVhKR19FTVpNX0N5Z2d6dGxseDRVUmdMRmU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbyf+Wtl
fJyjlktuZ3mQlRobsE/C8U/fwJJpg2VexNiH3RE09Pt3WUROXCwhvKyUiiZC7d76
RXiWkvvR725FjDz+vXSzhp0pBEtC5l7MQKK41/AmagWMATKbzrrL6f35WKjcc2X2
Rbjq13M3UxoWv0AKm7XGewenUU+NxZ8keAwQgfr0yPPGHie/xREVHtzt54XN9Xp2
vYKU2Bd47WYn37QF4MV7jRDaKutSHcgtQp0rrNIE5eXk7r7hpNFKgeC6KEGoFU5I
T0mauLkjvJqIQDbT5frtjHpIPx48K+bbyj+hqX9p3TTyhpGVDpSPLPtXPjx3GRv5
YTHHpI6GcCG6Bw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:41:19 2026 by rpki-client