Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File:                     qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier:          i3CnvVbI7EemxyuR0UWyRWJpwp/fMimoJ8dRKgvfuA0=
Subject key identifier:   78:92:66:91:BA:80:6E:B0:A6:B4:5A:8D:62:E1:53:84:A2:1D:93:D0
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer:       /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial:       01A03C713AE2A941FEFE18480026A9535B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number:          0529
Signing time:             Wed 26 Aug 2026 05:00:48 +0000
Manifest this update:     Wed 26 Aug 2026 05:00:48 +0000
Manifest next update:     Thu 27 Aug 2026 05:00:48 +0000
Files and hashes:         1: 0iYZfQ8-eqWQNGI1M9hFiEbSih0.asa (hash: eDrcHfgHO13vjitCh+CuiWxBfcYn7xGXg/GhkUlwEG8=)
                          2: Qaz9XAni_yIQ7F4V86TE-DUi4NE.asa (hash: rvt0cOfBmuzqjIWb11wj25KlP9Cx+dsTFZQsIbWyVbY=)
                          3: VU2LpNILYhS1I4lYnpe7oJedEdI.roa (hash: AqJWB4N76uKWpRoYnPeMZTvd8JXE1PEbm4JBEfEgFs0=)
                          4: VuDaNQQyX4M3Zzv_NUfm_z1bP40.roa (hash: QeHd8wUNciY03pcdxyX6N8nbC5Ds12SEf3AH2aDu73g=)
                          5: YTXG6CnnAgvZJ3YFpJTQNBcTcnU.roa (hash: f1vciN9OYhBL28ghvbq3Y2SRT30kue4PyCYN5BhDHAk=)
                          6: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: 4W1GwQS2/3bajc5nGpGXyfwranLmJiawMOhS0zF0Zj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:71:3a:e2:a9:41:fe:fe:18:48:00:26:a9:53:5b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
        Validity
            Not Before: Aug 26 05:00:48 2026 GMT
            Not After : Aug 27 05:00:48 2026 GMT
        Subject: CN=78926691ba806eb0a6b45a8d62e15384a21d93d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:52:ee:2e:95:26:75:df:c8:e8:1e:e1:a6:
                    34:97:6b:2f:f2:44:f7:52:10:74:65:66:a5:5b:6c:
                    9e:a6:4e:25:bf:cb:03:f1:97:1f:26:43:9c:e3:17:
                    05:6b:20:25:6b:c0:a6:dd:a7:28:55:9a:74:61:b1:
                    d9:a4:aa:98:e9:70:79:37:bf:73:cc:d1:a9:3d:fb:
                    64:68:63:af:2b:f8:b9:e7:9a:da:13:b5:ef:52:b4:
                    f4:a1:67:28:74:81:d9:d1:9a:31:e5:00:5c:24:67:
                    86:7b:d7:43:ba:2f:ff:f9:c3:74:85:e5:aa:1b:ae:
                    50:95:16:34:ca:c2:36:00:34:1d:60:02:74:b9:f0:
                    ca:64:4c:1a:01:f5:e6:6b:dd:f8:ec:26:0e:e6:34:
                    94:7a:a8:82:47:c5:39:4d:bf:92:af:1c:05:2f:7f:
                    0e:47:a0:75:c4:74:b6:4f:a7:75:bd:c6:cf:b1:1b:
                    e4:64:45:6d:a7:81:8e:dc:6a:69:4c:62:ef:94:f8:
                    17:ff:40:63:6e:43:50:c4:4a:70:24:d4:b7:c5:ff:
                    49:03:2f:5f:1e:cb:9c:77:dd:39:75:b1:c2:34:ca:
                    54:f8:30:02:4e:66:a2:6b:d7:51:0e:9c:f8:6a:e3:
                    37:34:a5:64:35:d0:78:56:fb:29:cc:f8:a5:14:00:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:66:91:BA:80:6E:B0:A6:B4:5A:8D:62:E1:53:84:A2:1D:93:D0
            X509v3 Authority Key Identifier:
                keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:9a:a4:44:8a:6d:a5:bc:67:25:b9:d0:bd:70:94:64:da:
         de:23:16:85:34:80:0e:2f:e6:ed:57:7b:f8:a9:ef:43:13:0b:
         89:99:e6:d2:93:79:ed:5b:e8:b1:90:e1:05:6a:fb:3b:3e:a0:
         de:fe:11:ad:f3:aa:0b:59:c7:a2:ea:77:96:55:48:d3:14:f4:
         83:a7:7b:92:db:1c:fb:72:cc:e3:7e:ca:c5:cf:8f:e9:28:39:
         3d:52:67:39:df:0b:57:73:c2:9c:56:9c:c4:ad:01:5a:82:68:
         95:bd:dd:24:94:f7:e7:a6:52:fb:2d:c7:e4:07:a0:bf:88:d0:
         81:5c:a8:44:8c:c2:29:47:f7:2b:16:2a:b0:b8:9d:58:04:00:
         80:7c:e3:15:7d:13:b7:1e:73:24:ed:96:aa:a1:ea:17:fe:8a:
         e6:da:f4:04:87:7b:ac:ab:7b:dd:a8:b8:d1:be:06:2d:c3:2f:
         af:60:d5:6c:fc:05:aa:76:36:d1:d3:3c:b2:c1:f8:f1:4d:9f:
         ed:5f:e3:bf:08:c2:29:9e:48:35:8e:45:1f:23:cd:aa:fd:02:
         86:fa:74:19:ab:47:82:97:80:31:8a:df:ec:ee:37:8a:13:3e:
         bf:9d:85:3a:73:f3:be:d5:9b:e1:10:a7:ef:87:19:7e:66:a4:
         8d:9d:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:03:50 2026 by rpki-client