Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File:                     Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier:          Ppa+yfTjvmtpD+YhckuI1Pbz8lcazsYYvQsivZCfxks=
Subject key identifier:   8B:81:A5:1B:5A:85:92:E5:84:21:B4:34:8F:95:CB:D5:DD:40:24:65
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer:       /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial:       019F86E8DE7262241C49386B6FA6D56FAE94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number:          08C7
Signing time:             Tue 21 Jul 2026 23:00:35 +0000
Manifest this update:     Tue 21 Jul 2026 23:00:35 +0000
Manifest next update:     Wed 22 Jul 2026 23:00:35 +0000
Files and hashes:         1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
                          2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
                          3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: zFlO+4ocvSBB7Oy5NoxRIIVEXLleWEAnq+yrWlS8ZNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:e8:de:72:62:24:1c:49:38:6b:6f:a6:d5:6f:ae:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
        Validity
            Not Before: Jul 21 23:00:35 2026 GMT
            Not After : Jul 22 23:00:35 2026 GMT
        Subject: CN=8b81a51b5a8592e58421b4348f95cbd5dd402465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:24:5e:62:88:66:5b:ba:33:8e:b7:eb:cd:
                    6f:96:28:d5:f4:77:44:a4:d7:b3:31:c2:d3:b6:ad:
                    a9:a1:02:c9:3b:63:e6:1e:aa:68:c4:87:b1:73:ba:
                    4c:b5:50:87:34:99:6e:d1:60:6f:b3:13:bf:f9:08:
                    54:b8:9a:7c:dc:38:ce:7a:cd:d8:6b:76:55:3b:3b:
                    02:ae:8b:42:e7:2b:0b:a9:c3:7e:18:4a:ab:d6:4c:
                    8d:30:bc:7e:8b:05:60:2d:fd:c7:28:89:a7:df:c1:
                    48:e1:ed:d9:7d:5e:0b:e7:1c:66:d5:e8:60:69:75:
                    41:0e:21:70:f4:8e:a8:0a:ca:cb:10:72:a5:6f:d3:
                    a5:bb:af:a3:9a:7a:01:b4:0e:70:98:5b:a9:58:59:
                    21:c6:7a:26:62:d8:1c:82:b7:ee:ff:f4:2f:59:5d:
                    b3:22:3f:ea:07:38:c0:64:06:48:a7:27:00:c3:b7:
                    83:c6:11:49:47:a6:4b:2e:7a:2c:dd:f6:72:24:8d:
                    b9:e4:35:1a:a8:09:d6:d7:10:fd:11:9d:52:16:8f:
                    0e:b9:81:c5:04:37:a1:1d:be:8a:6a:fa:5a:f3:98:
                    c3:0b:8a:36:ae:f4:87:a0:80:46:0a:41:f5:3d:1b:
                    43:62:e6:1e:3b:b9:17:6f:64:65:ce:0d:4d:41:97:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:81:A5:1B:5A:85:92:E5:84:21:B4:34:8F:95:CB:D5:DD:40:24:65
            X509v3 Authority Key Identifier:
                keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:92:85:7d:9f:35:b3:99:37:58:1f:21:03:67:18:f5:ac:e5:
         84:ef:b8:9a:fa:a6:40:20:ee:78:17:67:44:16:93:57:5e:83:
         d9:82:bf:32:3c:8d:20:97:59:08:c0:bb:2a:ab:1e:48:1e:9f:
         9b:e0:84:fc:37:bc:eb:ae:e1:cd:61:f4:6d:64:ae:91:76:ad:
         c5:c8:7f:1b:53:68:31:8c:53:c1:49:29:ed:f8:94:6c:ca:e0:
         b7:fa:50:a8:e3:0c:df:c8:e4:09:af:3d:bf:b8:f9:b3:c0:f1:
         e1:9b:14:d4:60:c6:44:38:90:bd:d7:e5:46:48:45:31:c5:9f:
         b0:66:dc:fa:e9:28:75:b6:61:a2:2f:73:93:71:1e:72:13:05:
         bf:6b:d6:5b:39:1c:72:45:26:a3:e5:23:0e:52:4f:ec:e6:5e:
         80:d8:82:c3:59:e1:35:8a:54:88:dd:50:b5:84:1f:cb:ea:a9:
         5b:ad:5c:51:22:70:29:8c:da:aa:cd:e3:f9:8d:13:43:c3:c9:
         5f:69:74:5b:3d:b2:00:a3:13:56:ca:2d:48:16:ca:65:1f:fd:
         71:9d:ba:4f:ba:06:8e:09:d6:d1:8a:ff:8d:69:99:73:59:f1:
         f6:96:b0:c0:d2:bb:28:7b:ac:ab:fe:72:3c:f2:27:b9:84:c6:
         18:ce:84:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:21 2026 by rpki-client