Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          IZLvqyZPzTk2wf4Y+NzeIwD/XM0Fq+uGlfIvELeGoB8=
Subject key identifier:   A9:00:E1:A9:4F:AF:37:AA:DA:EF:78:B7:CA:2D:66:91:BE:72:7C:1B
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       019FAB9A5CC48AE2117D00A52C6E4CEE1AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          0A6B
Signing time:             Wed 29 Jul 2026 02:00:47 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:47 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:47 +0000
Files and hashes:         1: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
                          2: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
                          3: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: N30B06GnKNk/jsRgvdWGW0R/bNAc9OMm2davUMsDGBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:5c:c4:8a:e2:11:7d:00:a5:2c:6e:4c:ee:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Jul 29 02:00:47 2026 GMT
            Not After : Jul 30 02:00:47 2026 GMT
        Subject: CN=a900e1a94faf37aadaef78b7ca2d6691be727c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:a3:6a:1d:3d:d9:77:7e:dd:a3:f7:aa:5e:
                    6a:1d:4f:b6:69:63:3d:e7:8a:46:77:cd:80:13:5b:
                    4e:b7:58:34:b5:3a:ab:2c:d4:0f:9f:36:cc:d0:e1:
                    ba:24:0b:e4:af:7e:ee:39:7c:b5:3e:9a:77:bd:a8:
                    e4:71:7b:de:c2:35:f3:aa:27:4d:94:4d:1b:84:fe:
                    80:0f:e3:45:87:c2:77:47:58:23:ea:8c:0a:89:e7:
                    62:ae:0e:e8:05:be:29:5b:b2:cf:36:99:82:00:a3:
                    77:fa:c4:a4:5d:7a:df:5a:ba:3e:8a:90:78:bb:8f:
                    81:8b:c3:12:98:b8:b2:e2:fe:2b:0b:64:fc:2c:08:
                    7c:9e:76:36:d2:86:03:76:41:62:d5:01:d6:4d:33:
                    6b:de:ce:4e:c5:a7:60:6d:92:03:27:4b:f3:c5:25:
                    a4:a5:00:ca:7c:2d:6c:6d:80:7d:81:f7:d7:05:c2:
                    65:98:81:52:b4:2e:29:9f:90:11:20:5f:40:8d:9d:
                    e5:8e:0b:75:65:fe:94:fd:03:68:78:9e:db:b1:6d:
                    7a:cb:a5:52:cb:1b:d6:24:c1:6c:61:14:f1:6e:81:
                    67:d1:f8:67:e9:59:35:b7:70:2e:17:c6:3c:71:3e:
                    0b:90:21:cf:4b:e3:87:89:24:50:15:0a:3c:f2:93:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:00:E1:A9:4F:AF:37:AA:DA:EF:78:B7:CA:2D:66:91:BE:72:7C:1B
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:0b:b3:b3:bd:e5:aa:4c:49:ae:16:0b:5a:b1:68:1f:72:22:
         5c:68:ef:fb:41:93:70:86:d4:c9:2a:0e:21:74:b3:2c:4c:32:
         0f:d0:f2:2e:23:2d:40:bd:22:67:d7:0d:38:62:8b:3d:b0:56:
         90:bc:93:e4:7d:d2:f5:45:05:86:84:b3:3a:2c:bc:cf:a9:3f:
         02:4c:31:ec:bc:47:20:b0:f7:0a:d7:b4:e3:27:ee:cf:58:45:
         94:75:08:f2:cd:af:f9:48:f2:3c:6f:24:e4:c7:a3:cd:3b:bc:
         d1:09:22:d7:be:44:7e:ef:53:d7:b9:2f:2c:e1:f3:22:9c:79:
         43:83:56:ba:90:42:40:af:10:d7:ec:e4:98:e9:8b:0c:b7:8b:
         f4:f6:13:78:46:d8:e3:7b:f0:43:38:8b:84:40:2f:75:14:48:
         dd:30:90:85:d6:17:90:fd:e5:54:c0:75:89:37:14:02:5a:c0:
         c9:09:5d:d9:e2:c3:98:71:75:84:ed:45:a0:ab:24:10:e9:d5:
         69:a8:b5:88:0d:82:75:f3:3d:ea:f8:69:4f:85:bc:8a:92:a1:
         8f:2f:04:a7:8f:7d:40:36:29:ef:b8:2b:67:d7:14:ad:b1:52:
         81:a0:66:8b:c5:08:43:0b:2e:f8:85:5b:62:79:c7:10:46:1a:
         b2:c0:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:21 2026 by rpki-client