Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          G+/iTJAitAYBB+xCH69eKxCAGdDQf1Z+b+PI8pnD3Bw=
Subject key identifier:   4A:CC:C0:CB:DC:61:17:B5:F9:D0:4E:41:2E:0F:CF:AB:92:AC:32:E9
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       019FCA80C909843CECE4383A051675C899C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          096F
Signing time:             Tue 04 Aug 2026 02:01:05 +0000
Manifest this update:     Tue 04 Aug 2026 02:01:05 +0000
Manifest next update:     Wed 05 Aug 2026 02:01:05 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: AeYd2Ku78bOtHn8rA6n1lSjS4qf338NbtrDAbbas4Qg=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa (hash: 2GFT3mSlK6Rmyp7D2HqdnfLGQtrA2O32IuamvEgn7Xs=)
                          7: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          8: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          9: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          10: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          11: IXAixtOPEsv7gt6BD6ensRZLEqw.roa (hash: 70EEAsdGTRKYckIJYi/F9RnlHwc1q+lU5rzi1Fys+zI=)
                          12: N9QQxg_R8io7DnlRj5HdQ23wfCk.roa (hash: T2NtuDZ7QgrXiMR/U8rf5cq5e47s3QzvGZo+eumc0Zc=)
                          13: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          14: PgCWANz5uY2I9lsHzhkPjqX39Kk.roa (hash: Wo051Tf/z54mBPHwIYi56RQup23Z7a/uY7Wew2Lpno0=)
                          15: SZtukkjRXiwa2MP-xz2orv9e2EQ.roa (hash: SI1p9E5oAtOUP1K3tQ3v2d/3208FkwLNQ2JaBJZUxeU=)
                          16: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          17: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          18: hchG7caJpD9W6F09IoEq2bxHBQQ.roa (hash: LWlZZ0rsDYxu7JbvD8MMa5SqnKcInLBcft31rsAtLnQ=)
                          19: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          20: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          21: r4xyNLWWmznvN8-2HQAUUtH8WD4.roa (hash: Yx0ueyL/bhm8eOCB3RdfcV15kiUt20hwbcXP4E9Y1js=)
                          22: vS7BVCvAnG0KF2NZJWhPCSw4Y9E.roa (hash: s2wURE5y1RzBDniFm1yyiSF2pZakk/teNC0g3kN9ZgA=)
                          23: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          24: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          25: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 02:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ca:80:c9:09:84:3c:ec:e4:38:3a:05:16:75:c8:99:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Aug  4 02:01:05 2026 GMT
            Not After : Aug  5 02:01:05 2026 GMT
        Subject: CN=4accc0cbdc6117b5f9d04e412e0fcfab92ac32e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:6b:07:ad:2f:fc:dc:5a:c7:57:b4:c3:25:
                    51:e2:e4:ce:f6:02:be:5b:79:9f:6e:83:85:bf:db:
                    42:1b:89:ba:ed:d4:82:ee:af:6e:e3:4b:54:cd:11:
                    dd:b8:90:c9:06:74:be:8f:08:b5:fe:d7:03:85:66:
                    51:3a:cb:37:2a:d8:fa:eb:da:02:b3:5e:0f:9d:23:
                    6d:80:91:d4:a4:a9:16:93:c1:9a:7f:c2:cb:98:6c:
                    bb:c3:45:3c:f2:40:89:35:93:f3:fe:3d:d4:51:59:
                    ee:7a:84:94:a6:83:c8:36:e4:43:4c:70:1c:f8:a2:
                    66:cd:9d:dc:40:27:14:15:67:db:ad:ee:9a:0e:bc:
                    1a:26:7d:8e:e6:3c:8e:b5:6f:d9:26:69:f5:5c:07:
                    03:f3:50:03:c8:e9:c4:73:88:88:a8:06:23:f7:9b:
                    a5:ce:25:08:94:0c:8b:63:8a:7a:59:ea:01:ce:6f:
                    ef:47:7e:f2:7c:cf:f0:a3:fd:8d:84:04:eb:8a:5e:
                    c8:50:8b:d4:34:a8:e9:d5:0c:e7:77:8e:8d:05:46:
                    b5:47:51:dd:a2:bd:bd:45:5f:89:bf:21:c5:64:f4:
                    32:6c:b6:21:06:2c:44:67:1a:28:7d:d7:b4:2d:65:
                    7d:d2:de:e3:c5:a6:21:51:2f:1e:14:a6:0a:78:f5:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CC:C0:CB:DC:61:17:B5:F9:D0:4E:41:2E:0F:CF:AB:92:AC:32:E9
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:7a:c7:d1:50:b9:3d:1e:90:a8:ea:1e:35:75:30:ba:78:ff:
         9e:34:63:70:8f:44:88:2f:9d:dd:f8:f4:57:30:97:50:60:e8:
         02:f1:28:51:8d:31:08:53:ba:98:69:4c:a2:e6:95:ac:32:a9:
         47:05:ce:b1:53:aa:fd:a7:cc:eb:39:43:c5:da:f1:88:00:74:
         9f:cd:18:5b:13:08:82:53:11:26:0f:2a:19:44:d5:18:15:5f:
         77:d0:f7:42:c2:df:e5:09:e9:f3:f7:44:02:61:2b:80:64:4d:
         18:1c:01:56:8f:8e:db:60:86:a5:19:a0:c7:9b:07:af:3e:65:
         1c:ce:18:67:28:56:1a:29:e3:6e:c2:e2:01:10:a6:a4:2f:f2:
         03:8e:83:12:a5:28:6e:fc:2f:32:43:d6:9d:6b:99:aa:a4:a3:
         de:37:9d:cf:64:0e:ba:21:27:1c:2f:df:6a:6f:30:2f:59:f8:
         6f:31:a1:84:dd:20:8d:d8:9a:12:f2:00:8c:50:1c:e7:2d:7b:
         c7:2c:a5:8c:69:e2:d3:f3:bc:f2:fc:99:7e:e4:dc:af:fe:95:
         50:dc:0e:28:43:06:c4:f8:14:bc:f5:18:8b:25:3d:6b:af:87:
         66:c9:fb:6c:59:fc:82:d1:5a:89:1b:be:5d:ad:ba:a2:33:01:
         f6:17:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:21:34 2026 by rpki-client