Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File:                     Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier:          0utItoSUHL/1QRgZKjnLEEgwolY32LjfvnwmcEDadi8=
Subject key identifier:   7A:88:45:05:4D:33:3D:08:39:F4:28:31:8A:C4:F5:A1:07:57:77:01
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer:       /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial:       019FACAD5C266D7ED45E32898D4F9333A380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number:          08C4
Signing time:             Wed 29 Jul 2026 07:01:09 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:09 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:09 +0000
Files and hashes:         1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: DX9sNOPZJTrFB8W11SAws4q7CEnj6C158CrFstXXMGs=)
                          2: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (hash: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:5c:26:6d:7e:d4:5e:32:89:8d:4f:93:33:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
        Validity
            Not Before: Jul 29 07:01:09 2026 GMT
            Not After : Jul 30 07:01:09 2026 GMT
        Subject: CN=7a8845054d333d0839f428318ac4f5a107577701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:06:44:f1:87:59:33:dc:cf:d7:5e:5b:7b:
                    ab:02:9a:4d:21:ce:b1:54:90:d8:c9:56:d6:51:4f:
                    8e:c6:98:13:e8:c2:2e:85:23:18:09:cc:82:86:62:
                    24:6c:2b:37:34:a2:c6:e4:21:f3:d5:36:22:d4:ae:
                    4a:54:c4:1e:f7:32:c7:8f:f9:e1:0d:71:c6:d4:00:
                    5a:4e:f2:87:65:02:0f:e6:14:43:27:13:c0:41:9f:
                    aa:a2:c3:39:42:39:4f:e2:69:07:6f:17:aa:c0:19:
                    1c:c9:10:2f:aa:74:73:04:a1:0a:3f:12:61:6c:96:
                    14:a7:4b:70:72:73:3f:0d:fe:72:70:94:69:a3:45:
                    e2:5e:87:c7:34:df:6a:f1:fe:e5:ef:f2:00:cd:2d:
                    a7:68:1f:a3:0f:e1:00:0c:d0:cf:f8:66:9d:cf:c1:
                    eb:de:bb:93:2d:77:f8:aa:6d:52:16:ca:25:e1:d3:
                    b5:71:45:8f:f0:65:bd:29:23:04:4e:b7:c7:e0:39:
                    fa:b8:dc:bd:98:25:62:4b:e1:bb:ac:a8:12:18:f5:
                    be:2e:86:17:e9:90:4e:b6:c0:df:0e:f0:e4:14:ac:
                    ac:b5:e7:0b:58:74:4f:cf:4e:c7:96:dd:93:b8:fa:
                    cd:74:64:23:69:c3:f3:3f:7c:ee:5c:d0:b9:3b:79:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:88:45:05:4D:33:3D:08:39:F4:28:31:8A:C4:F5:A1:07:57:77:01
            X509v3 Authority Key Identifier:
                keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9f:e7:3a:92:5f:e4:99:0b:de:d4:9f:70:fc:41:48:d1:23:
         50:03:8f:9f:68:3a:37:a0:30:6b:e8:7b:c6:af:6d:4c:67:76:
         f6:00:15:a3:38:92:a5:a5:ed:5d:be:bc:af:c0:c9:99:c3:c8:
         10:09:3d:d7:37:35:5f:df:eb:2e:83:09:51:22:31:43:9c:72:
         7d:66:07:7e:9e:d8:c6:1e:22:00:96:e1:d2:b2:a6:3d:d4:9c:
         4c:9b:fc:61:d9:2f:e8:a4:69:00:7e:48:51:46:a9:2c:8c:61:
         1b:cd:ba:8a:d8:e3:5f:10:c3:2d:a9:c9:39:fb:9c:d1:2f:e9:
         77:87:90:63:87:b2:c5:90:6b:35:01:58:45:50:8f:bf:5f:85:
         5e:a9:cc:2a:9d:f7:4c:85:53:11:a1:3a:a7:99:45:12:cd:f9:
         48:5a:ad:11:2f:67:d4:79:87:a7:10:56:79:79:e4:7f:d3:4f:
         18:bd:6f:ac:a1:59:6a:97:af:95:57:d4:0f:9c:c4:ea:9e:aa:
         c2:cb:af:fe:9c:33:93:88:35:11:43:78:10:ec:a4:2a:16:a2:
         1f:da:68:6b:aa:d9:f2:4e:88:2e:ec:c5:19:3f:b1:88:ce:7d:
         67:76:f5:84:fb:22:70:f5:16:b2:8a:7f:a2:ac:ef:19:5b:1d:
         6d:ce:9a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srVwmbX7UXjKJjU+TM6OAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx
NjE4MjIwHhcNMjYwNzI5MDcwMTA5WhcNMjYwNzMwMDcwMTA5WjAzMTEwLwYDVQQD
Eyg3YTg4NDUwNTRkMzMzZDA4MzlmNDI4MzE4YWM0ZjVhMTA3NTc3NzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsYGRPGHWTPcz9deW3urAppNIc6x
VJDYyVbWUU+OxpgT6MIuhSMYCcyChmIkbCs3NKLG5CHz1TYi1K5KVMQe9zLHj/nh
DXHG1ABaTvKHZQIP5hRDJxPAQZ+qosM5QjlP4mkHbxeqwBkcyRAvqnRzBKEKPxJh
bJYUp0twcnM/Df5ycJRpo0XiXofHNN9q8f7l7/IAzS2naB+jD+EADNDP+Gadz8Hr
3ruTLXf4qm1SFsol4dO1cUWP8GW9KSMETrfH4Dn6uNy9mCViS+G7rKgSGPW+LoYX
6ZBOtsDfDvDkFKystecLWHRPz07Hlt2TuPrNdGQjacPzP3zuXNC5O3nzRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqIRQVNMz0IOfQoMYrE9aEHV3cBMB8GA1UdIwQY
MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt
Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw
LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5/nOpJf
5JkL3tSfcPxBSNEjUAOPn2g6N6Awa+h7xq9tTGd29gAVoziSpaXtXb68r8DJmcPI
EAk91zc1X9/rLoMJUSIxQ5xyfWYHfp7Yxh4iAJbh0rKmPdScTJv8Ydkv6KRpAH5I
UUapLIxhG826itjjXxDDLanJOfuc0S/pd4eQY4eyxZBrNQFYRVCPv1+FXqnMKp33
TIVTEaE6p5lFEs35SFqtES9n1HmHpxBWeXnkf9NPGL1vrKFZapevlVfUD5zE6p6q
wsuv/pwzk4g1EUN4EOykKhaiH9poa6rZ8k6ILuzFGT+xiM59Z3b1hPsicPUWsop/
oqzvGVsdbc6aCA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:41:01 2026 by rpki-client