Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
File:                     qHvIMvQSt59zAWbsV-s2waNbBok.mft (raw, json)
Hash identifier:          ql3uce7zp8Qz1l/H0p8l1Lfsp0mIXEMagIupPvnKKNk=
Subject key identifier:   AF:18:04:79:3C:69:06:03:FC:3E:6F:32:A7:ED:B0:EF:C6:BE:94:6F
Authority key identifier: A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
Certificate issuer:       /CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Certificate serial:       019FCD4AE4E3E11D723EC66228BC9E21B565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
Manifest number:          9A
Signing time:             Tue 04 Aug 2026 15:01:05 +0000
Manifest this update:     Tue 04 Aug 2026 15:01:05 +0000
Manifest next update:     Wed 05 Aug 2026 15:01:05 +0000
Files and hashes:         1: 3TZvjEfkPGnfb-tMF5tui2UzMj0.roa (hash: QOEhgl7wja/sJ10iRCnuW/2g1XbkedQKiYSWjxKqvZE=)
                          2: qHvIMvQSt59zAWbsV-s2waNbBok.crl (hash: qurLAQnmfaSHRCHxDnQDolIOoH9M3+0NAwKeLHLjBIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:4a:e4:e3:e1:1d:72:3e:c6:62:28:bc:9e:21:b5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a87bc832f412b79f730166ec57eb36c1a35b0689
        Validity
            Not Before: Aug  4 15:01:05 2026 GMT
            Not After : Aug  5 15:01:05 2026 GMT
        Subject: CN=af1804793c690603fc3e6f32a7edb0efc6be946f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:a5:9a:ce:ae:65:c2:80:0d:b0:22:0c:af:
                    25:09:3c:09:1b:90:56:64:65:f9:d3:7b:e9:0a:50:
                    19:4b:36:f4:78:11:c1:92:44:a6:72:35:62:c5:39:
                    7c:97:f2:23:fa:d2:4d:9f:e7:02:a6:cf:1f:c2:01:
                    7e:2a:b7:92:7a:29:3e:ca:16:1c:df:d9:97:ee:c0:
                    23:0b:8e:d7:75:b0:cd:3f:73:74:64:43:23:a6:b7:
                    2e:5e:57:1b:f4:4f:fe:a8:8d:dd:f7:79:a4:25:b2:
                    2c:2d:b2:94:a7:0d:ac:77:9c:fb:ca:e4:01:cd:97:
                    5c:7e:59:5d:55:ed:93:f3:40:52:b8:3c:57:11:64:
                    27:aa:95:f4:f7:91:a8:c1:df:59:95:d9:ae:d9:f8:
                    ff:b3:68:73:23:e9:cc:96:f2:89:7c:31:9b:d1:58:
                    9f:0d:55:f8:c4:f5:91:af:54:20:fd:e5:10:1e:7e:
                    5b:d7:61:18:57:6e:43:b8:e1:93:39:7f:ef:bd:e2:
                    09:14:be:c5:da:b7:9e:ec:92:6d:d0:98:60:5d:f4:
                    91:78:44:52:7d:28:36:51:47:2d:e5:ec:0c:4b:aa:
                    67:e0:9d:9b:f5:ea:80:54:6d:62:1f:ec:0f:7b:74:
                    35:2d:e1:be:7b:5f:47:ec:71:f3:22:0c:02:c2:9b:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:18:04:79:3C:69:06:03:FC:3E:6F:32:A7:ED:B0:EF:C6:BE:94:6F
            X509v3 Authority Key Identifier:
                keyid:A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3a:25:a7:f8:da:fa:fe:96:13:04:b4:35:20:51:4f:03:ba:
         09:b9:52:34:dd:cb:0b:91:29:b7:cb:db:f3:41:27:c3:5d:9a:
         01:e5:5d:78:48:a1:a4:64:f2:6d:dc:5d:47:71:a4:e4:13:8d:
         70:e5:91:b0:28:2b:e5:26:5a:18:ec:c3:59:fc:22:ed:25:57:
         fc:de:4a:84:23:91:41:6c:3d:b1:9f:f2:88:80:c5:60:48:80:
         3f:0b:2b:b0:56:98:4f:d1:de:1e:ce:11:1c:ca:89:f5:5e:7f:
         76:9c:a9:8e:b7:56:13:58:fc:41:13:8e:df:ee:6e:3e:51:44:
         e3:59:6e:58:dc:3a:ab:1d:2c:5b:e3:c3:65:b9:ef:f7:2e:55:
         a3:8b:56:57:d2:72:f0:5e:4c:51:fa:6d:75:98:f2:cd:ac:cf:
         71:89:83:9c:f4:8d:4b:06:97:63:ba:0b:dc:73:3e:ec:59:54:
         85:09:13:a9:55:1f:f3:21:6c:2a:0f:65:63:d7:f9:dc:2e:09:
         1d:8b:de:69:2d:f8:f9:11:05:8c:dc:1e:9c:11:96:bb:66:f1:
         c3:45:1e:f3:9e:49:21:c4:92:d3:03:7b:17:9b:45:3d:75:ed:
         bf:ce:4d:d2:5c:35:51:b2:f5:10:44:8f:44:ed:68:93:01:f2:
         ad:10:b2:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/NSuTj4R1yPsZiKLyeIbVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4N2JjODMyZjQxMmI3OWY3MzAxNjZlYzU3ZWIzNmMxYTM1
YjA2ODkwHhcNMjYwODA0MTUwMTA1WhcNMjYwODA1MTUwMTA1WjAzMTEwLwYDVQQD
EyhhZjE4MDQ3OTNjNjkwNjAzZmMzZTZmMzJhN2VkYjBlZmM2YmU5NDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nqlms6uZcKADbAiDK8lCTwJG5BW
ZGX503vpClAZSzb0eBHBkkSmcjVixTl8l/Ij+tJNn+cCps8fwgF+KreSeik+yhYc
39mX7sAjC47XdbDNP3N0ZEMjprcuXlcb9E/+qI3d93mkJbIsLbKUpw2sd5z7yuQB
zZdcflldVe2T80BSuDxXEWQnqpX095Gowd9Zldmu2fj/s2hzI+nMlvKJfDGb0Vif
DVX4xPWRr1Qg/eUQHn5b12EYV25DuOGTOX/vveIJFL7F2ree7JJt0JhgXfSReERS
fSg2UUct5ewMS6pn4J2b9eqAVG1iH+wPe3Q1LeG+e19H7HHzIgwCwpu3rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8YBHk8aQYD/D5vMqftsO/GvpRvMB8GA1UdIwQY
MBaAFKh7yDL0ErefcwFm7FfrNsGjWwaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUh2SU12UVN0NTl6QVdic1YtczJ3YU5iQm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wMzkwNTctZjFjYS00NmU0LTgyMzct
YTc2NGFkYThiOTVlLzEvcUh2SU12UVN0NTl6QVdic1YtczJ3YU5iQm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wMzkwNTctZjFjYS00NmU0LTgyMzctYTc2NGFkYThiOTVl
LzEvcUh2SU12UVN0NTl6QVdic1YtczJ3YU5iQm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDolp/ja
+v6WEwS0NSBRTwO6CblSNN3LC5Ept8vb80Enw12aAeVdeEihpGTybdxdR3Gk5BON
cOWRsCgr5SZaGOzDWfwi7SVX/N5KhCORQWw9sZ/yiIDFYEiAPwsrsFaYT9HeHs4R
HMqJ9V5/dpypjrdWE1j8QROO3+5uPlFE41luWNw6qx0sW+PDZbnv9y5Vo4tWV9Jy
8F5MUfptdZjyzazPcYmDnPSNSwaXY7oL3HM+7FlUhQkTqVUf8yFsKg9lY9f53C4J
HYveaS34+REFjNwenBGWu2bxw0Ue855JIcSS0wN7F5tFPXXtv85N0lw1UbL1EESP
RO1okwHyrRCy0A==
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:18:03 2026 by rpki-client