Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File:                     qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier:          2KKgEx+FgMhOLPl5VkYCJTISCHr1V+hPuBB3x+lPqaU=
Subject key identifier:   F8:6D:D0:41:75:73:1D:5A:DF:F5:7E:FB:76:E6:68:0F:EA:DB:9A:E2
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer:       /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial:       01A00394F20EEC07B121FE2EF6AEA10C6ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number:          1A01
Signing time:             Sat 15 Aug 2026 04:01:27 +0000
Manifest this update:     Sat 15 Aug 2026 04:01:27 +0000
Manifest next update:     Sun 16 Aug 2026 04:01:27 +0000
Files and hashes:         1: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: ZywtzkvdxsBXZDRW2yKO2mt7XhFpx5aoL8TS+s0jM1k=)
                          2: tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa (hash: oFn0sS2KIEC+fcfgS1boOcIBmwWzk50WRGkvZp+ryXo=)
                          3: wga_WdR_8QvLv6SYCAFbkFgE4IY.roa (hash: 1WShRNTFDIi2o5zhM9Z4CcfauIXDzI1Kphz/pH1YsqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:f2:0e:ec:07:b1:21:fe:2e:f6:ae:a1:0c:6e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
        Validity
            Not Before: Aug 15 04:01:27 2026 GMT
            Not After : Aug 16 04:01:27 2026 GMT
        Subject: CN=f86dd04175731d5adff57efb76e6680feadb9ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:7e:d0:4c:39:ef:3d:e4:fa:02:ba:7d:61:
                    f3:6b:ec:1e:45:2e:2d:ea:d8:a2:6a:14:42:e4:56:
                    aa:cd:76:8f:f8:b8:b2:f6:ae:b9:55:15:92:5c:09:
                    93:37:31:b6:0f:e9:db:a1:6a:56:ae:6f:1f:00:48:
                    fd:51:9e:da:1e:1b:24:f9:a6:58:f5:5b:54:05:87:
                    8a:49:66:44:63:c1:2f:61:74:34:a2:c4:14:7a:f9:
                    60:71:b7:d3:8a:3d:ef:e0:58:8d:93:65:0c:70:f0:
                    2f:ed:50:e0:de:0a:c5:53:e6:9e:08:41:7f:43:0d:
                    ef:ac:f2:36:1f:ba:be:99:e3:bd:2b:c5:b2:ac:26:
                    d4:c4:32:62:c2:35:4e:02:04:31:a8:3f:b6:fc:ee:
                    14:10:2e:08:48:1d:75:74:f8:d0:b3:be:51:71:1d:
                    0c:b8:43:fd:d2:cb:de:c8:d1:df:f5:99:a3:a8:e7:
                    45:be:d1:6b:2e:7e:a8:fc:c4:30:df:14:38:5c:37:
                    e0:d9:6e:e2:e3:19:c7:7f:8c:5c:4f:be:ae:5c:a3:
                    03:e2:89:ae:0b:6e:e6:c6:fb:75:36:66:fe:d2:b5:
                    ee:9f:8b:ed:61:88:31:68:ed:3c:25:fe:cc:0d:5c:
                    e3:e1:c9:e9:f0:d3:1e:3a:22:8a:d6:60:85:f4:90:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6D:D0:41:75:73:1D:5A:DF:F5:7E:FB:76:E6:68:0F:EA:DB:9A:E2
            X509v3 Authority Key Identifier:
                keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2d:13:b9:ed:bd:41:19:a7:77:07:e1:ca:e3:73:b4:9b:3b:
         c0:e6:84:73:82:95:67:4f:66:56:f8:1e:8b:5b:c4:91:d2:4f:
         6c:af:07:ec:64:e6:4f:fc:74:3e:6d:23:f5:d1:bb:9b:f3:d2:
         6e:c4:db:e5:ef:db:65:16:f7:5c:a7:ea:6d:0a:67:11:f1:35:
         41:37:57:83:87:23:75:5e:3b:8d:cb:cb:1d:33:19:44:72:21:
         42:d3:23:0e:e6:f2:a6:01:2e:20:98:9b:b7:2a:9a:f1:be:1b:
         46:6d:6d:09:fa:1c:4c:df:89:42:f3:0a:74:cd:fa:a9:f0:92:
         19:73:99:95:92:fc:68:11:19:63:0f:a1:eb:ab:36:69:ab:dc:
         0b:e2:a9:62:4f:9e:51:4b:2d:af:26:52:86:32:70:f1:f6:79:
         3e:55:33:95:97:b8:d3:e5:3c:e1:21:91:f2:97:8a:66:7c:8d:
         7b:de:9f:64:4c:4e:2a:63:9a:a9:03:d6:8d:e5:65:69:c3:7e:
         28:90:cb:14:20:b3:ce:73:68:cb:3a:0c:87:e8:d6:31:e6:92:
         1f:ad:d2:86:26:33:22:3e:c6:cb:73:df:7c:c6:bb:fa:1a:ae:
         ff:64:fe:b4:54:7d:24:e0:87:5e:10:c4:55:45:bf:a2:1f:71:
         3a:c6:2f:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADlPIO7AexIf4u9q6hDG7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmOTA3ZWM3ZGJmOWM2NWI4MTVhYTNkNzIwMmI2ZGZh
ZTMxNDgwHhcNMjYwODE1MDQwMTI3WhcNMjYwODE2MDQwMTI3WjAzMTEwLwYDVQQD
EyhmODZkZDA0MTc1NzMxZDVhZGZmNTdlZmI3NmU2NjgwZmVhZGI5YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPx+0Ew57z3k+gK6fWHza+weRS4t
6tiiahRC5FaqzXaP+Liy9q65VRWSXAmTNzG2D+nboWpWrm8fAEj9UZ7aHhsk+aZY
9VtUBYeKSWZEY8EvYXQ0osQUevlgcbfTij3v4FiNk2UMcPAv7VDg3grFU+aeCEF/
Qw3vrPI2H7q+meO9K8WyrCbUxDJiwjVOAgQxqD+2/O4UEC4ISB11dPjQs75RcR0M
uEP90sveyNHf9ZmjqOdFvtFrLn6o/MQw3xQ4XDfg2W7i4xnHf4xcT76uXKMD4omu
C27mxvt1Nmb+0rXun4vtYYgxaO08Jf7MDVzj4cnp8NMeOiKK1mCF9JALPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPht0EF1cx1a3/V++3bmaA/q25riMB8GA1UdIwQY
MBaAFKo1+Qfsfb+cZbgVqj1yArbfrjFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMt
YjZmMWNmYWE2OTg1LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMtYjZmMWNmYWE2OTg1
LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXi0Tue29
QRmndwfhyuNztJs7wOaEc4KVZ09mVvgei1vEkdJPbK8H7GTmT/x0Pm0j9dG7m/PS
bsTb5e/bZRb3XKfqbQpnEfE1QTdXg4cjdV47jcvLHTMZRHIhQtMjDubypgEuIJib
tyqa8b4bRm1tCfocTN+JQvMKdM36qfCSGXOZlZL8aBEZYw+h66s2aavcC+KpYk+e
UUstryZShjJw8fZ5PlUzlZe40+U84SGR8peKZnyNe96fZExOKmOaqQPWjeVlacN+
KJDLFCCzznNoyzoMh+jWMeaSH63ShiYzIj7Gy3PffMa7+hqu/2T+tFR9JOCHXhDE
VUW/oh9xOsYv0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:28 2026 by rpki-client