Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File:                     q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier:          CqPMGU4uZ6IwIVygZ12WqnVarBus1fYn2CTEp/8F9sg=
Subject key identifier:   21:28:95:40:60:D4:26:6A:88:9D:78:D6:BA:23:EC:BD:54:80:55:36
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer:       /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial:       019F10E4E374DC6A812C1E2DC8547868DE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number:          07FF
Signing time:             Mon 29 Jun 2026 01:01:03 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:03 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:03 +0000
Files and hashes:         1: DYsiQqVjAuJI8byUG8mKd0jSQh4.asa (hash: YMrGSqc7KqHO4j1lgZTxY1WoFwm99rirLTct3gzShT0=)
                          2: UMfLn4hPH5R_1hQD4UOLCtDtmiU.roa (hash: gXIOBSbjWI6IVjh8IXmjFidTPNW2xP/m42MptHiY2Wk=)
                          3: ZLPqhzCBZnWKf6Ejj9mHPZInK0A.roa (hash: fDVxJt+eTWzb1YGH406MqF2UxgyF9iK3BrieNaTLjIM=)
                          4: _HpIO26oTlp3ah6eb8LpZJn4sZU.asa (hash: rNwAJLoUrEajetBo8sWHQzmyDtFszLMTuAjSH9z1rL4=)
                          5: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: 5WoKvwckITFpUHsvaGGA/oRuJl3fNOlh2GZpC4XZOpY=)
                          6: sIrL6b_di1kxEMzg3ieNCdw3WJ4.roa (hash: Wu+8arEyxXYyHRsQgH9EF3izIIcpQmHoeba8OxIgES4=)
                          7: yfQb9AlKC_r1qbW7JgUEAWbb2SE.roa (hash: V6bi9bW+gyxZUdO/fUkn/b7FLfhAgD7Kio8Z4leJS74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e4:e3:74:dc:6a:81:2c:1e:2d:c8:54:78:68:de:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
        Validity
            Not Before: Jun 29 01:01:03 2026 GMT
            Not After : Jun 30 01:01:03 2026 GMT
        Subject: CN=2128954060d4266a889d78d6ba23ecbd54805536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:2d:c0:d6:82:47:6a:99:64:d3:b3:fb:40:
                    15:67:56:6e:37:73:c4:ac:28:c3:95:e3:30:08:4e:
                    a7:03:e6:1f:e7:d1:50:ab:f6:2b:6f:88:5b:51:c1:
                    31:a6:e1:f6:87:28:90:ff:88:a7:26:d1:9f:ce:46:
                    e2:b5:62:7b:f6:75:76:63:e8:f1:9f:23:17:00:a6:
                    24:1e:bd:ea:65:7b:90:f0:15:03:e1:32:d5:56:6d:
                    f8:da:0a:4d:91:17:35:9b:31:18:a3:ea:9f:10:99:
                    06:56:a2:9e:82:83:c3:52:98:c0:89:78:2b:f1:67:
                    93:56:ce:5a:10:cd:ee:2f:cd:be:09:f7:82:ed:a7:
                    38:0b:ee:67:0e:3d:ee:e6:89:ad:0e:20:fc:0f:06:
                    54:aa:e1:da:a0:56:9c:ac:d9:03:c9:bc:f1:d3:92:
                    a9:a4:13:91:35:63:9b:a7:88:ac:98:1e:00:2d:bc:
                    33:fb:da:7b:ed:5a:d3:54:35:19:54:92:10:54:d2:
                    37:3e:5b:b9:dd:87:0f:f3:0e:86:04:60:c0:07:f6:
                    5e:ab:56:36:8e:fc:7b:ca:99:f0:32:38:14:fe:01:
                    33:f1:47:4b:4a:5f:6c:bb:2f:11:ea:fa:6d:73:2e:
                    01:2b:db:7d:3b:84:0c:55:60:7b:a8:10:0b:48:f1:
                    0b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:28:95:40:60:D4:26:6A:88:9D:78:D6:BA:23:EC:BD:54:80:55:36
            X509v3 Authority Key Identifier:
                keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8f:2e:c5:f3:59:c7:4b:fb:99:75:d7:bc:e1:db:4e:cb:e7:
         77:d2:48:d4:9b:f5:c6:75:42:56:f6:50:e2:32:54:0c:0d:83:
         af:f2:45:e4:46:1f:77:20:0f:a7:04:83:76:05:59:5c:e5:4b:
         a3:c6:70:ae:74:7a:29:f9:6a:87:6b:b3:08:17:c9:77:10:2d:
         21:9e:4c:9e:5d:1b:2d:a9:28:4d:ac:bd:13:d7:61:94:ef:ca:
         70:65:75:e7:c0:8f:34:ba:3a:c0:ab:e5:c2:68:46:0d:05:d9:
         0f:b5:2f:a6:d4:94:83:cc:2f:ba:7d:a9:b6:b6:ec:e7:69:71:
         2a:e4:d4:cf:fd:67:0b:10:68:70:7e:3a:85:ca:7c:d4:a7:2c:
         5b:80:71:6f:6b:bb:2a:cf:de:8a:76:9c:0c:89:b7:5d:a4:43:
         91:aa:ee:0f:3d:48:0e:31:3a:cf:71:7b:d8:6a:1b:3a:53:b2:
         c2:86:86:47:c6:d7:c3:81:c0:eb:a9:88:c6:10:d1:48:5b:67:
         0e:27:7b:27:af:83:1b:be:e4:f0:db:2a:68:ad:63:ab:1d:c8:
         cf:f9:5c:01:31:fb:98:ef:40:97:2c:01:b9:8f:0b:1c:7d:62:
         26:07:03:b2:ff:5e:79:11:53:0a:f0:5f:4d:69:7e:86:28:fa:
         9f:ea:b2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:09 2026 by rpki-client