Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          5SyhH5cETwZXeUkNXNbaGjrPb1LFpFwXD/C4w3BwCSw=
Subject key identifier:   26:56:60:2E:D7:C1:03:56:B9:1E:F1:A2:04:DD:86:6B:E6:98:9C:47
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       019FAAF62F765930BD6F14A04F1BD614AE0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0DC0
Signing time:             Tue 28 Jul 2026 23:01:28 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:28 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:28 +0000
Files and hashes:         1: 4YMSKNsUfIJZYY47MNVzndwjo04.roa (hash: 8oujs3evvYwGVLJbLnpR6K4HU81UoQYW70JF1WusQ7o=)
                          2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: gfdlgoIuf66RUI218bbdXpCzdEcCiHIzjlq912xkHAA=)
                          3: UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa (hash: narBwfpb8RAcShxX1DzjbkkEFV1ZbklkMy2WAyEvk6Q=)
                          4: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:2f:76:59:30:bd:6f:14:a0:4f:1b:d6:14:ae:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Jul 28 23:01:28 2026 GMT
            Not After : Jul 29 23:01:28 2026 GMT
        Subject: CN=2656602ed7c10356b91ef1a204dd866be6989c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:aa:fa:fd:5a:a9:ca:06:72:3d:09:10:f6:
                    84:b9:d4:27:2a:a1:fc:2c:1f:61:05:f6:09:2b:9d:
                    bc:2e:6a:25:03:e4:3e:01:ac:6f:a2:a1:fe:0c:f3:
                    fd:7c:2d:58:ab:3c:2e:dd:fe:59:37:50:5e:e4:1e:
                    61:72:b8:89:a4:2d:8e:53:50:be:d9:7e:0a:8e:07:
                    7d:00:39:52:11:9a:7d:01:f8:af:66:63:be:e5:c1:
                    dd:37:b8:b2:23:ed:0f:dd:7a:5a:21:d3:78:7a:70:
                    8f:fc:22:e4:da:63:56:bd:22:5a:ca:72:4a:8c:6d:
                    5e:9d:30:91:4e:94:ff:e8:d8:94:b8:64:3d:a4:20:
                    e8:39:d0:9b:9b:c8:66:01:ea:c6:3c:0b:47:72:a9:
                    46:4d:e0:44:9d:3b:6b:df:e7:77:43:8f:7d:bc:18:
                    17:c9:5f:4a:2a:fc:e2:02:f8:d8:cb:5b:8b:14:89:
                    39:7f:00:30:dd:da:df:98:94:09:0d:0d:5d:1d:e1:
                    1a:ec:69:5a:76:9a:28:a0:cb:75:b5:4b:e0:64:bc:
                    28:74:8b:44:a0:9b:4e:93:8c:a7:e2:71:95:53:8a:
                    61:26:86:86:b5:c2:20:bc:63:cb:ef:2e:af:db:38:
                    34:1a:6d:5b:9b:e0:0b:23:9b:80:04:18:89:6e:2f:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:56:60:2E:D7:C1:03:56:B9:1E:F1:A2:04:DD:86:6B:E6:98:9C:47
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:dc:99:58:b2:7f:d6:6f:e1:04:ff:77:d5:9c:74:70:0e:99:
         dc:9b:7b:f2:04:78:45:bf:0b:00:32:9b:15:40:59:d1:8e:dd:
         af:03:c5:f9:51:1a:46:fa:2f:b7:ce:cd:e2:2e:58:f2:63:06:
         3a:3d:48:4a:41:4b:da:49:d4:c5:00:e7:43:c2:de:9c:03:0c:
         6c:f7:ac:20:45:94:79:2e:80:eb:fe:12:ce:f0:2c:8f:73:29:
         69:e0:04:20:3f:5a:89:3f:62:6b:0b:31:26:02:40:cb:af:75:
         6d:2b:a8:a3:3b:5b:e0:4b:66:fe:19:7d:4f:fe:3e:25:4f:00:
         15:c5:3a:7b:78:88:df:fa:f4:c5:96:48:91:5f:9c:bc:a5:22:
         1e:0b:13:ff:d5:e1:3a:59:62:30:d3:78:a6:1c:91:15:cf:37:
         84:bd:06:6b:93:ed:be:6d:6a:a5:51:ee:a3:ee:5d:ea:cf:f1:
         4c:e3:1e:9a:71:b9:63:7f:b2:75:21:ec:3e:56:93:72:d2:87:
         96:e4:7f:da:f2:61:8b:93:e4:64:9c:6a:06:e1:da:bc:a2:bb:
         ce:e0:8b:ce:10:5f:36:d1:fb:5b:3f:eb:4b:67:a1:9a:50:bd:
         d7:29:73:89:ad:11:43:ed:bd:33:7c:94:60:a5:b9:c7:f4:09:
         31:0f:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:56:16 2026 by rpki-client