Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File:                     qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier:          zL/3uFVMyW4I5IMfpUc7Mr2lkGWSr+tzOZs8dzkUFeo=
Subject key identifier:   21:D4:6E:EA:7A:C8:CE:51:A4:7F:B9:80:78:AE:BB:8E:F7:82:28:18
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer:       /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial:       01A00213F0D75E4387DB44CDA7E6555C2AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 21:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:56 +0000
Files and hashes:         1: 8bGDeqOLEpqluLGnhA5OPPZlF4U.roa (hash: nyQFlbismgT+/vk7cKh4RxgsOCP+jQOON5dqP3fMM7g=)
                          2: E7RKatZ2-c0USqUVA50ejfPO_LA.roa (hash: Kbpm5sWk9Jg4XBpXaBujpM1V2VgMgPUNQUsGM4QI/6E=)
                          3: MduUx5hRjjKbLaSy2UDLe1Nxp4s.roa (hash: UqToIY/uIMk+vJNVcNlL0gMCWXoA/1adspZCvbwaa/A=)
                          4: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: kvgQ3B+2AXGoIOSk302LoCeZiJU49wkRckbmd0iQm8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:f0:d7:5e:43:87:db:44:cd:a7:e6:55:5c:2a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
        Validity
            Not Before: Aug 14 21:00:56 2026 GMT
            Not After : Aug 15 21:00:56 2026 GMT
        Subject: CN=21d46eea7ac8ce51a47fb98078aebb8ef7822818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:99:21:30:9f:b4:22:eb:bd:15:99:96:76:
                    cc:39:b6:dd:1f:61:53:28:dd:e1:f4:30:a2:4c:01:
                    00:c9:f6:3f:83:07:e2:6e:e0:d9:27:5b:86:15:a9:
                    3e:b3:85:3b:36:75:b6:2d:12:98:0f:f1:cd:c8:6e:
                    38:e9:65:32:e2:4b:04:dd:23:8f:5c:48:8e:85:08:
                    00:34:8b:21:67:31:fc:6f:8f:76:17:a9:ad:66:c8:
                    b8:7d:48:6e:74:03:b7:13:d1:94:ba:df:13:22:78:
                    72:33:0b:56:c3:15:d9:2d:7e:c9:fb:e4:89:bf:77:
                    54:c8:e1:b2:ef:f7:aa:46:1c:c6:1e:04:f3:94:2c:
                    fa:60:a9:29:61:c5:59:93:b2:6c:52:b7:c8:70:fa:
                    cb:0e:e8:d6:f8:9a:51:03:74:18:4c:8a:2f:98:8c:
                    4c:69:18:35:61:0f:b7:2a:83:9a:cf:63:77:56:c1:
                    b7:93:c7:b9:21:0d:42:b3:dc:f1:e1:51:ac:48:24:
                    91:5c:96:da:58:11:72:d9:24:48:7f:5f:8e:3e:9e:
                    7a:cf:ac:25:64:12:e4:60:d6:5f:59:0e:72:8a:87:
                    9c:d8:54:c0:4f:c2:1d:20:3e:14:0b:16:2d:48:23:
                    68:3d:63:ae:cd:33:59:72:33:19:54:43:60:d1:e4:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D4:6E:EA:7A:C8:CE:51:A4:7F:B9:80:78:AE:BB:8E:F7:82:28:18
            X509v3 Authority Key Identifier:
                keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f3:3d:78:18:3c:fb:5d:65:de:9e:e4:4a:7a:be:39:da:f4:
         8d:0b:72:40:5d:1d:45:e9:14:fc:b4:1c:f8:50:e5:0d:ef:c1:
         52:71:64:f5:36:c0:7c:37:25:2d:e5:2c:e1:46:d0:cb:a1:cb:
         96:5e:45:00:f7:80:78:b5:0f:c7:67:1f:bf:8c:b7:7c:09:32:
         1d:b5:ee:c6:26:ac:c4:a3:ce:d5:cb:8d:b6:93:9f:d9:d2:0d:
         3a:3c:15:e3:b6:f1:7f:b2:de:11:a5:fa:c7:68:16:98:12:7a:
         82:a0:29:d2:12:42:30:79:b7:43:e4:5b:78:10:38:bb:43:e9:
         e5:27:bb:70:a3:79:c0:f0:7a:58:52:c9:5f:69:41:46:87:61:
         48:38:a4:08:b7:3b:7a:27:d6:7f:40:7b:f4:63:30:b3:ad:03:
         bf:df:b6:a3:52:bf:f6:a3:08:1f:94:30:20:31:68:9e:2a:36:
         44:77:bb:38:9d:74:6c:3e:1d:5c:13:3d:fc:e1:1f:0a:f1:0c:
         75:19:14:73:14:3c:ce:c5:31:83:85:80:82:5d:35:07:93:1e:
         ac:d4:70:09:d4:5c:65:c5:cd:c6:0b:37:a3:39:40:72:85:bf:
         c9:6e:81:ed:cc:f7:2d:8d:07:85:78:2d:b8:a4:0a:47:ac:4c:
         53:87:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:27:15 2026 by rpki-client