Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File:                     qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier:          GsgE88Y3TwgMZ357fntFyTeQrGJA5z9w3UUmGDX30ag=
Subject key identifier:   34:B8:86:53:27:77:43:D3:B1:F9:0D:7B:8A:42:FE:1C:1E:85:49:69
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer:       /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial:       019FC2C7D431A0129686BC0DE3A6896D4B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number:          08A9
Signing time:             Sun 02 Aug 2026 14:01:43 +0000
Manifest this update:     Sun 02 Aug 2026 14:01:43 +0000
Manifest next update:     Mon 03 Aug 2026 14:01:43 +0000
Files and hashes:         1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=)
                          2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: xAtrDqbo0fRz0VdLre/3cumxLCzDfbek6Xm5MZgASyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c2:c7:d4:31:a0:12:96:86:bc:0d:e3:a6:89:6d:4b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
        Validity
            Not Before: Aug  2 14:01:43 2026 GMT
            Not After : Aug  3 14:01:43 2026 GMT
        Subject: CN=34b88653277743d3b1f90d7b8a42fe1c1e854969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:7e:81:cc:b9:43:f3:ae:fb:dc:20:54:ce:
                    fe:e0:a4:7f:b1:34:b8:29:90:2c:33:2c:a6:2a:c8:
                    96:4e:fa:ee:3a:30:d0:70:4c:46:6e:eb:ed:3b:ca:
                    42:1e:bc:ad:7c:80:11:79:fb:26:5f:1f:07:df:cc:
                    a5:90:5c:4a:59:8d:af:55:47:63:48:15:c6:c4:83:
                    91:c8:35:0f:18:de:87:e0:3b:b8:14:3d:98:c3:47:
                    01:a3:90:01:e6:57:b2:b8:10:17:bf:73:72:3a:9f:
                    ae:d7:e1:5b:fb:e3:1c:9d:f8:b4:54:51:33:ba:53:
                    d6:53:2f:62:d3:45:91:0f:74:ce:43:a2:03:6a:d4:
                    40:fd:e0:d0:d8:db:07:a3:ce:72:19:3c:43:5d:61:
                    04:36:7e:24:ae:2d:61:94:84:a3:45:ce:c7:e3:8c:
                    f4:42:3c:8c:14:1f:1d:7b:7e:d1:c9:a8:3d:53:95:
                    4d:03:77:8f:bf:f3:21:d4:5b:3e:60:0c:bc:f0:65:
                    40:e7:22:ad:74:ed:ae:33:bf:33:5c:39:6a:12:6b:
                    12:ee:be:75:db:00:95:7e:b8:b7:00:32:9b:4b:38:
                    c2:d6:08:99:59:f8:92:05:f7:e0:fe:87:a6:d2:3f:
                    a3:79:2a:bc:5c:9b:c8:7c:0b:1f:44:ab:d5:6b:23:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B8:86:53:27:77:43:D3:B1:F9:0D:7B:8A:42:FE:1C:1E:85:49:69
            X509v3 Authority Key Identifier:
                keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:49:00:71:41:3a:7b:45:f7:ec:89:ce:8b:13:c0:24:eb:9e:
         1b:f4:5f:24:26:28:a0:ee:d4:ab:a6:36:ce:5c:46:b2:c7:12:
         82:8b:7a:a8:28:de:a1:8e:c7:53:d6:81:92:8c:35:02:09:2a:
         10:1a:29:da:56:67:79:89:b0:3e:e3:a9:17:9d:35:5a:bd:5d:
         c6:94:90:8a:d8:f1:78:25:b1:25:13:fa:1e:4c:66:e0:ba:12:
         01:f4:c6:2a:5a:ca:0a:a1:8b:00:cb:3a:12:dd:97:b6:ed:31:
         3c:f9:9d:a7:fa:e6:b3:55:60:43:7e:bd:99:f9:00:30:74:e1:
         ae:48:47:ec:f9:20:a7:77:56:04:f9:44:06:a9:9e:f2:a2:73:
         f1:f3:bb:94:d6:4c:ab:e7:e8:2c:c7:7e:1a:67:37:78:a9:f0:
         72:b7:cb:57:55:36:85:4a:db:21:39:f0:50:93:d5:4f:75:13:
         77:d0:62:4b:be:cc:c2:35:de:79:ab:4f:c0:ec:05:45:2d:7e:
         b8:41:9c:9d:29:94:a8:94:3d:92:1e:ad:92:2e:1a:f0:ca:dc:
         2a:3c:0c:08:2a:2c:bd:37:78:74:3e:f2:b2:ed:6b:20:86:19:
         a1:17:b2:38:49:eb:8f:4c:90:b3:ec:fe:0c:ca:e6:0d:54:a7:
         a6:63:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 23:26:58 2026 by rpki-client