Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File:                     q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier:          jlbuCx+1ng+2t4G3VebbezuO0pwYlFZzZ4z89eMeu3g=
Subject key identifier:   DA:1B:8B:50:BF:B3:3B:85:D8:51:02:5E:0F:B0:5D:21:13:82:02:52
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer:       /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial:       019E2926D09C93D569C2CF0BFC10BE0D2F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number:          0787
Signing time:             Fri 15 May 2026 01:01:10 +0000
Manifest this update:     Fri 15 May 2026 01:01:10 +0000
Manifest next update:     Sat 16 May 2026 01:01:10 +0000
Files and hashes:         1: DYsiQqVjAuJI8byUG8mKd0jSQh4.asa (hash: YMrGSqc7KqHO4j1lgZTxY1WoFwm99rirLTct3gzShT0=)
                          2: UMfLn4hPH5R_1hQD4UOLCtDtmiU.roa (hash: gXIOBSbjWI6IVjh8IXmjFidTPNW2xP/m42MptHiY2Wk=)
                          3: ZLPqhzCBZnWKf6Ejj9mHPZInK0A.roa (hash: fDVxJt+eTWzb1YGH406MqF2UxgyF9iK3BrieNaTLjIM=)
                          4: _HpIO26oTlp3ah6eb8LpZJn4sZU.asa (hash: rNwAJLoUrEajetBo8sWHQzmyDtFszLMTuAjSH9z1rL4=)
                          5: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: qJzy2+muIDnEZrXslpoQJ4HA0mP4/LNA/uLsqg/+qFg=)
                          6: sIrL6b_di1kxEMzg3ieNCdw3WJ4.roa (hash: Wu+8arEyxXYyHRsQgH9EF3izIIcpQmHoeba8OxIgES4=)
                          7: yfQb9AlKC_r1qbW7JgUEAWbb2SE.roa (hash: V6bi9bW+gyxZUdO/fUkn/b7FLfhAgD7Kio8Z4leJS74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:d0:9c:93:d5:69:c2:cf:0b:fc:10:be:0d:2f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
        Validity
            Not Before: May 15 01:01:10 2026 GMT
            Not After : May 16 01:01:10 2026 GMT
        Subject: CN=da1b8b50bfb33b85d851025e0fb05d2113820252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:94:cf:96:9a:32:f6:f4:18:e4:11:62:3c:
                    b2:c3:1f:c7:c2:e1:43:fa:fb:05:58:1e:40:ed:a3:
                    b4:5a:17:2f:66:87:cb:ab:6a:fe:8f:52:26:88:59:
                    2a:a9:35:34:33:a0:b7:0e:9d:e3:86:bc:3d:23:14:
                    3b:00:5f:57:91:84:43:7d:9a:36:51:79:c3:68:4f:
                    66:ed:dc:91:7b:e8:23:ea:6a:f7:2d:e5:db:d1:ae:
                    ad:9c:73:5d:bb:b2:29:4a:23:df:76:49:12:d4:1d:
                    8f:44:57:51:ff:3d:89:c5:9e:69:2b:84:ae:52:02:
                    3a:3b:77:8e:82:69:20:b9:c8:4e:ef:f3:56:c0:51:
                    2e:54:a4:59:74:09:2a:77:94:03:ed:ea:27:b7:c7:
                    b0:f2:e6:c0:ac:70:40:ce:81:d6:36:67:7a:65:3e:
                    2a:4b:69:8f:25:a4:04:82:08:04:aa:d0:60:ae:06:
                    86:ff:0f:c9:11:91:f3:21:36:4f:f7:02:cc:4e:4f:
                    f2:4f:87:4e:6b:75:b4:60:5d:02:69:ef:84:d7:e3:
                    fe:e8:67:d5:00:72:7c:ce:b7:fa:89:5a:a2:99:af:
                    55:a3:ba:09:74:34:e4:0d:63:1a:0d:5f:fb:c5:6f:
                    24:1e:41:48:b1:fb:fa:f1:fb:73:78:71:e9:11:2e:
                    79:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1B:8B:50:BF:B3:3B:85:D8:51:02:5E:0F:B0:5D:21:13:82:02:52
            X509v3 Authority Key Identifier:
                keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:66:76:d2:a0:05:ae:37:6d:32:8a:96:15:8a:ba:3f:a4:65:
         d4:77:a3:49:d3:87:4d:22:24:01:7c:d2:24:1d:de:ae:84:80:
         da:b4:0e:5b:3b:88:65:89:d1:55:dc:d1:1b:47:37:cb:fb:26:
         82:65:de:86:d5:89:85:98:e1:4c:98:15:cf:58:56:0f:b0:66:
         7c:92:15:e5:56:fa:9e:4c:4c:53:e1:bc:d9:bc:82:9a:c0:07:
         9a:82:65:53:fc:16:20:1b:84:23:26:4c:82:a1:f6:4c:8c:ac:
         88:e9:c8:ed:d4:ae:01:99:83:7c:8b:0c:36:f5:6f:9e:7c:31:
         28:67:5c:7e:3c:58:f5:7b:90:bc:dd:e5:c8:8a:ff:e2:38:74:
         eb:95:45:50:bf:ef:b2:e2:50:a6:1d:88:6f:35:90:5d:14:4d:
         33:da:53:ed:64:b3:4d:22:2a:6c:d7:39:9f:d5:46:b6:96:8c:
         52:2d:ee:e7:db:cc:e4:eb:c5:37:e1:15:09:db:1b:0c:88:ab:
         86:0b:02:cb:57:16:3c:ee:61:a5:a4:fd:2c:1c:0d:08:92:88:
         d2:b0:ab:bc:60:7f:be:69:47:69:74:64:07:53:64:f5:02:23:
         fd:6d:b2:ed:fa:74:16:ff:12:75:44:ec:2c:d9:98:72:6d:f3:
         58:3f:33:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJtCck9Vpws8L/BC+DS91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw
NGI3YjIwHhcNMjYwNTE1MDEwMTEwWhcNMjYwNTE2MDEwMTEwWjAzMTEwLwYDVQQD
EyhkYTFiOGI1MGJmYjMzYjg1ZDg1MTAyNWUwZmIwNWQyMTEzODIwMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6qUz5aaMvb0GOQRYjyywx/HwuFD
+vsFWB5A7aO0WhcvZofLq2r+j1ImiFkqqTU0M6C3Dp3jhrw9IxQ7AF9XkYRDfZo2
UXnDaE9m7dyRe+gj6mr3LeXb0a6tnHNdu7IpSiPfdkkS1B2PRFdR/z2JxZ5pK4Su
UgI6O3eOgmkguchO7/NWwFEuVKRZdAkqd5QD7eont8ew8ubArHBAzoHWNmd6ZT4q
S2mPJaQEgggEqtBgrgaG/w/JEZHzITZP9wLMTk/yT4dOa3W0YF0Cae+E1+P+6GfV
AHJ8zrf6iVqima9Vo7oJdDTkDWMaDV/7xW8kHkFIsfv68ftzeHHpES55RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNobi1C/szuF2FECXg+wXSETggJSMB8GA1UdIwQY
MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt
NmJiNWZlNjY1NzUwLzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw
LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWZ20qAF
rjdtMoqWFYq6P6Rl1HejSdOHTSIkAXzSJB3eroSA2rQOWzuIZYnRVdzRG0c3y/sm
gmXehtWJhZjhTJgVz1hWD7BmfJIV5Vb6nkxMU+G82byCmsAHmoJlU/wWIBuEIyZM
gqH2TIysiOnI7dSuAZmDfIsMNvVvnnwxKGdcfjxY9XuQvN3lyIr/4jh065VFUL/v
suJQph2IbzWQXRRNM9pT7WSzTSIqbNc5n9VGtpaMUi3u59vM5OvFN+EVCdsbDIir
hgsCy1cWPO5hpaT9LBwNCJKI0rCrvGB/vmlHaXRkB1Nk9QIj/W2y7fp0Fv8SdUTs
LNmYcm3zWD8zeA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:17 2026 by rpki-client