Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          yIQ2k8vFvi1jwRSbFzkwHyzU8T0utjvIvHux/Ffva9M=
Subject key identifier:   9B:18:AB:C6:EB:79:6D:48:EC:15:B7:66:71:85:0C:A1:43:55:C6:10
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       019F8720354A9510E2D2CBDCE9A441A3C5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          19CB
Signing time:             Wed 22 Jul 2026 00:01:02 +0000
Manifest this update:     Wed 22 Jul 2026 00:01:02 +0000
Manifest next update:     Thu 23 Jul 2026 00:01:02 +0000
Files and hashes:         1: 6HLmOIlw0JJlLfNpuVhkS5VevII.roa (hash: duraaLF3+tphpAPz7hcD0W+ai9uSm22QFtqEemAzlOs=)
                          2: cgiCnDdXt2ZfV4gQ6f64Txzv9UI.roa (hash: Epq0AQtf5gLEvFkohacS+3j5hF97hS/AEpHSVuOJB9w=)
                          3: nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa (hash: KTNFAJc/6ueKlLn/0ANsYJWuRw0+1gFif+avYpTFJp4=)
                          4: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: mQEOHVpNfGVRoTrcdssI9uGjfFaKNS2/tYdQ2mMgqdE=)
                          5: qfWUaAQNlV9wKmB2U3853Bl8uNA.roa (hash: rOp4emJoeO5JknR894vKgNsr/vggi5P0L+PXDJf8JnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:87:20:35:4a:95:10:e2:d2:cb:dc:e9:a4:41:a3:c5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Jul 22 00:01:02 2026 GMT
            Not After : Jul 23 00:01:02 2026 GMT
        Subject: CN=9b18abc6eb796d48ec15b76671850ca14355c610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:de:fc:68:b6:23:d6:f1:c7:ed:b8:19:56:
                    80:c4:97:cd:9e:85:05:61:56:7a:78:db:38:1f:88:
                    6c:8f:2e:8b:44:bd:4e:1e:bb:02:93:6f:20:6f:2d:
                    90:33:6b:bc:1e:95:b0:89:fb:fc:c4:c3:cb:b1:3c:
                    0c:31:31:a0:11:e4:93:65:91:6a:e8:9a:93:b5:a3:
                    3c:f8:b4:ae:1a:4d:00:d9:37:4b:4b:00:9b:f6:d9:
                    c8:72:ad:f0:a0:9d:12:87:38:29:7c:75:3e:56:a0:
                    4d:c6:df:27:ba:10:d7:d2:d0:f7:8e:27:84:73:0a:
                    e9:7f:d4:60:5a:13:f1:12:ba:47:38:85:c8:e8:34:
                    19:da:5e:dd:bd:f1:4c:c6:34:c2:33:d8:e9:46:6e:
                    e3:dd:52:5c:71:db:b8:74:6f:24:b6:48:8a:1e:16:
                    4d:74:a9:58:b6:dc:28:5c:81:87:4e:3a:18:4f:97:
                    e8:a1:21:56:5a:ff:ee:a1:75:75:e7:33:c1:56:02:
                    aa:2f:85:c4:e7:25:f1:03:61:1a:f7:15:a3:c6:82:
                    09:8c:87:bf:37:79:b4:9e:01:99:8e:61:15:f8:bc:
                    8d:7f:d5:82:5f:b4:ee:e7:be:7c:a1:c6:f8:6b:3e:
                    c9:a2:4d:70:28:5f:75:94:62:63:4f:6f:6c:84:5e:
                    24:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:18:AB:C6:EB:79:6D:48:EC:15:B7:66:71:85:0C:A1:43:55:C6:10
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b9:c7:2e:82:a2:35:47:f0:ba:af:8b:4e:b0:98:ee:66:cd:
         ed:6c:a9:d4:79:07:e9:88:26:f7:f8:38:28:2e:3b:c5:61:3d:
         f1:d0:90:8b:8e:85:28:9c:49:15:de:28:08:50:6a:9a:3b:bd:
         fa:f6:cf:59:3c:22:9e:a4:aa:39:bb:bc:ef:5e:5e:63:5d:55:
         97:7f:86:c7:74:b3:56:b4:9c:df:f1:9c:0b:49:49:45:44:2f:
         97:f2:57:b3:fc:11:38:a0:5d:af:b6:3f:93:3f:df:8e:91:08:
         08:03:96:c5:37:7d:7c:c1:b4:2c:49:e4:1d:5e:50:da:90:da:
         e3:48:51:44:fa:ea:12:c2:68:0c:19:c8:97:0f:31:7b:0c:f4:
         46:ed:21:ac:43:6a:a0:4f:ac:b0:ce:aa:3e:3d:c3:b1:b3:10:
         df:75:a6:57:07:f4:ec:23:59:c2:be:e8:66:2a:7f:e0:07:09:
         50:12:9d:53:37:2e:f5:bf:b3:3b:05:65:3c:74:b0:5b:27:24:
         63:90:dc:06:66:a3:63:c3:d0:85:65:84:67:57:1a:f0:10:0d:
         47:d7:d1:17:11:db:30:3a:d5:d7:4b:3d:1e:57:d5:a7:ab:b1:
         79:c4:4e:97:4e:38:71:2e:ea:81:d4:23:d9:7f:af:83:86:01:
         03:f9:e5:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+HIDVKlRDi0svc6aRBo8WmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi
NWU5MTgwHhcNMjYwNzIyMDAwMTAyWhcNMjYwNzIzMDAwMTAyWjAzMTEwLwYDVQQD
Eyg5YjE4YWJjNmViNzk2ZDQ4ZWMxNWI3NjY3MTg1MGNhMTQzNTVjNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y/e/Gi2I9bxx+24GVaAxJfNnoUF
YVZ6eNs4H4hsjy6LRL1OHrsCk28gby2QM2u8HpWwifv8xMPLsTwMMTGgEeSTZZFq
6JqTtaM8+LSuGk0A2TdLSwCb9tnIcq3woJ0ShzgpfHU+VqBNxt8nuhDX0tD3jieE
cwrpf9RgWhPxErpHOIXI6DQZ2l7dvfFMxjTCM9jpRm7j3VJccdu4dG8ktkiKHhZN
dKlYttwoXIGHTjoYT5fooSFWWv/uoXV15zPBVgKqL4XE5yXxA2Ea9xWjxoIJjIe/
N3m0ngGZjmEV+LyNf9WCX7Tu5758ocb4az7Jok1wKF91lGJjT29shF4kyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsYq8breW1I7BW3ZnGFDKFDVcYQMB8GA1UdIwQY
MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt
Mzg1M2QzNDBjOWE2LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2
LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7nHLoKi
NUfwuq+LTrCY7mbN7Wyp1HkH6Ygm9/g4KC47xWE98dCQi46FKJxJFd4oCFBqmju9
+vbPWTwinqSqObu8715eY11Vl3+Gx3SzVrSc3/GcC0lJRUQvl/JXs/wROKBdr7Y/
kz/fjpEICAOWxTd9fMG0LEnkHV5Q2pDa40hRRPrqEsJoDBnIlw8xewz0Ru0hrENq
oE+ssM6qPj3DsbMQ33WmVwf07CNZwr7oZip/4AcJUBKdUzcu9b+zOwVlPHSwWyck
Y5DcBmajY8PQhWWEZ1ca8BANR9fRFxHbMDrV10s9HlfVp6uxecROl044cS7qgdQj
2X+vg4YBA/nlig==
-----END CERTIFICATE-----
Generated at Wed Jul 22 09:47:46 2026 by rpki-client