Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File:                     qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier:          5OyDpYUEolG2q/sbWkvRrDe2nrvK0cSymi7iz/V8+a0=
Subject key identifier:   91:40:D5:08:0B:E4:13:CB:08:EE:38:D9:9A:D9:2C:D7:18:E3:88:94
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer:       /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial:       019FAB63357355D793E5BE36F963E58BF3E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number:          03E3
Signing time:             Wed 29 Jul 2026 01:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:33 +0000
Files and hashes:         1: 8KhmWim7fQfJ5AAd7R4MgnmouFA.roa (hash: 8buKD0ZZ/SUyIgK6EsyebC1ig+JGEDdmvljz6uJr5T4=)
                          2: FdPkrQM5wJfWgwRztXidsCzsmxs.roa (hash: kySbmspJSgU7jUiKcEQCWmWkzi3UO7YjG6VncBVDrTg=)
                          3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: tzdTtrRbqnI1HDNI8HVAFti2WaKdDjb+wmLg7Frz9g8=)
                          4: sj-hv4O5_Z9peRXGM4t2YS9no0Q.roa (hash: Fng1VhmMN2AdS6GsFKTHTXU6+4yOuUH1ezrFYVymYmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:35:73:55:d7:93:e5:be:36:f9:63:e5:8b:f3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
        Validity
            Not Before: Jul 29 01:00:33 2026 GMT
            Not After : Jul 30 01:00:33 2026 GMT
        Subject: CN=9140d5080be413cb08ee38d99ad92cd718e38894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:a2:1b:dd:d4:05:42:97:f8:7e:44:62:91:
                    77:fb:81:ba:f2:a8:10:9d:26:e2:04:ee:67:5a:5c:
                    0a:32:d7:30:71:13:c0:9b:1a:57:1f:6c:f1:eb:0e:
                    ae:bf:7d:8d:fa:85:a9:41:c4:17:8e:c7:13:bf:65:
                    ea:b8:40:ec:0b:56:e5:18:3f:f3:16:a4:3a:b8:60:
                    06:74:f2:00:e2:b0:f5:1f:35:e2:4f:b2:f6:c8:d7:
                    e9:89:07:a8:8b:9f:e8:f5:a6:d0:51:52:12:9a:d9:
                    26:56:71:80:16:16:94:2e:48:a4:05:29:0a:89:88:
                    97:c7:df:c4:b3:ef:86:64:9b:10:29:e3:14:87:0f:
                    57:8d:a5:2b:71:12:3a:70:d8:5f:cb:66:82:8d:cc:
                    cd:52:17:fe:40:f6:0c:85:4b:63:6a:87:b2:e6:81:
                    f4:61:44:03:12:c0:d8:36:5b:da:39:04:ba:82:23:
                    db:a0:72:ae:88:76:4c:98:e5:9a:66:ee:b2:e0:8b:
                    cb:a5:80:71:1c:23:4f:86:62:b3:1f:31:5c:b7:1e:
                    6d:4d:c6:99:af:29:8a:c6:0d:92:e4:ac:fd:08:fa:
                    e1:bd:fe:12:d4:64:83:cf:e1:71:03:4f:30:71:f0:
                    e4:d1:0f:4d:93:c4:57:32:81:62:51:87:b7:78:5a:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:40:D5:08:0B:E4:13:CB:08:EE:38:D9:9A:D9:2C:D7:18:E3:88:94
            X509v3 Authority Key Identifier:
                keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cc:ca:3a:87:62:7d:d9:aa:61:c2:8b:73:53:c0:aa:a7:0f:
         b6:8f:bb:da:e8:c2:e6:3e:12:39:7f:11:52:cf:1c:16:7d:e7:
         1b:d5:f9:37:e5:22:48:ae:83:e0:d7:82:b6:5b:52:dd:6a:ae:
         04:fe:52:c9:e8:72:1d:75:ad:d1:7b:af:3c:db:9a:1c:5f:17:
         19:1d:3b:d6:87:7e:2c:b9:e2:16:4f:37:83:7a:00:ce:95:31:
         73:6c:3e:a6:1d:99:24:c1:75:79:15:b4:4e:4e:c8:ea:f6:2b:
         07:6e:5f:cc:b7:33:63:e7:de:36:2d:03:3f:84:37:1b:d6:78:
         db:12:cc:43:13:10:a5:a3:6f:24:f1:c4:e9:5f:9d:35:3c:b7:
         ff:b3:51:f0:6c:0f:c5:c2:b3:b8:1d:08:1a:8e:0e:cd:b9:23:
         be:05:e3:91:b2:f2:29:62:ee:9f:c5:8a:bc:96:80:dd:c9:a9:
         8c:67:96:12:e4:a8:af:fc:4a:53:b8:2f:01:d7:16:a2:d0:ab:
         07:72:47:24:37:c0:77:42:cb:a1:38:80:0d:df:f9:65:fd:6f:
         88:58:b1:09:25:ae:96:87:ad:74:4c:25:e5:a2:25:a7:82:7b:
         39:6d:ad:8b:54:18:21:99:51:e5:d3:dc:d6:63:27:d2:b5:77:
         a6:7e:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:07 2026 by rpki-client