Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File:                     qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier:          wVe0AljdQiNaz3iORhTpRJYkdY8FMw933WydVASLEDk=
Subject key identifier:   D0:03:88:4E:3F:45:60:81:23:2D:63:86:F5:B4:4A:1E:13:FD:B5:0F
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer:       /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial:       019FC4B5A97EE0EFDDCC0F73604C3C0761D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number:          08AA
Signing time:             Sun 02 Aug 2026 23:01:07 +0000
Manifest this update:     Sun 02 Aug 2026 23:01:07 +0000
Manifest next update:     Mon 03 Aug 2026 23:01:07 +0000
Files and hashes:         1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=)
                          2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: KUedC4pr7XYeeiRIeMfqYq4VOmA+IWgRwu3C0njJXLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 22:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c4:b5:a9:7e:e0:ef:dd:cc:0f:73:60:4c:3c:07:61:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
        Validity
            Not Before: Aug  2 23:01:07 2026 GMT
            Not After : Aug  3 23:01:07 2026 GMT
        Subject: CN=d003884e3f456081232d6386f5b44a1e13fdb50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:dc:c8:7f:a4:0f:57:c8:58:c8:08:94:4e:
                    ca:1f:d0:33:f0:30:dc:5c:1d:a8:0e:3f:41:a2:51:
                    33:9c:54:a5:1a:42:ba:fd:80:21:28:28:3f:b0:38:
                    4a:e4:b2:60:37:af:02:9a:fd:f6:c5:d6:e8:8f:e5:
                    fd:43:d8:89:ab:b9:76:e0:78:84:cc:c0:aa:d5:e2:
                    0b:4c:d7:00:9c:a3:c7:a9:11:9e:b0:ed:36:9c:79:
                    3c:6c:1c:54:f5:a4:08:1a:04:a4:44:10:44:c7:79:
                    61:d4:dc:1d:41:6e:a7:93:16:cb:f0:ba:25:12:4c:
                    69:67:93:15:3e:f8:54:76:99:24:76:32:af:f9:70:
                    4d:13:ac:3a:83:b1:1b:fa:2a:2c:21:77:d7:21:45:
                    57:23:2d:4b:10:b0:7b:88:7c:7a:08:c2:89:f0:19:
                    7a:cb:38:ea:40:6d:35:b6:d0:21:99:e6:80:56:bb:
                    6b:84:e7:cb:ab:a2:92:06:23:b7:56:a3:d9:1e:4f:
                    e8:ee:3f:2a:23:2f:90:c2:0e:08:5f:91:91:c2:cd:
                    a2:62:ec:ed:52:d5:60:96:1d:75:c0:29:53:d0:21:
                    3c:95:53:59:a5:56:b3:6b:72:ea:21:68:fb:eb:3a:
                    ea:c1:93:12:24:41:de:12:7e:ce:36:eb:10:b9:f2:
                    1b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:03:88:4E:3F:45:60:81:23:2D:63:86:F5:B4:4A:1E:13:FD:B5:0F
            X509v3 Authority Key Identifier:
                keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7e:e8:f6:44:1d:16:4d:c0:b6:30:24:47:ea:9b:b8:27:67:
         b9:74:73:d1:39:8c:8d:ad:ef:2f:c6:27:39:92:0c:11:06:84:
         2b:5c:70:84:36:29:53:b9:ec:d3:21:fa:91:1a:4a:8d:90:f6:
         ec:03:97:27:b6:da:f9:fc:54:50:5a:7b:a8:43:f6:68:58:79:
         80:54:a4:69:d3:84:0b:3a:06:83:68:49:59:6a:6a:db:d6:33:
         1c:aa:11:f3:5b:f2:4a:4c:d1:d1:f0:29:a1:73:8e:37:ce:50:
         8e:6e:b4:5e:77:27:83:85:23:a7:da:a3:2a:d6:44:00:e7:21:
         3f:51:f9:30:6e:33:f9:76:fe:14:69:af:3a:5c:e3:99:ed:5b:
         a2:ed:74:70:bd:76:17:f4:eb:74:0e:77:36:87:b7:bc:c3:00:
         7f:6d:a1:1a:75:b9:38:d1:6f:77:21:4f:97:42:f5:07:4b:34:
         71:15:8f:51:bb:66:80:52:84:e2:8e:06:6f:6c:f1:ad:c9:68:
         2a:3b:89:bd:18:24:92:9a:ba:09:e6:f3:65:f5:97:7a:eb:2c:
         d4:05:8c:83:fb:71:78:91:68:1c:0d:68:ba:2e:a7:39:38:ca:
         86:a1:1c:82:30:06:d0:33:99:b4:7b:bc:c9:85:29:5f:8d:c5:
         b8:d9:5d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 00:42:35 2026 by rpki-client