Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File:                     qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier:          CSuStVYVfgnPpjFTBfAPu5bLPSeHZX9uEXWTCGHsVrU=
Subject key identifier:   0A:94:EE:0E:A5:FF:A1:04:D7:B0:7C:91:87:91:EF:EA:13:23:35:E8
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer:       /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial:       019FA899835C49C6B3357542012BCE1C0B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number:          08E0
Signing time:             Tue 28 Jul 2026 12:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:00 +0000
Files and hashes:         1: L7unT3wF2J_onYc0udjc9XnBEWs.roa (hash: KxVWMk5aTpbygjadse9AXrj9EQRdEuzKZUmFJGIltkM=)
                          2: NHpHHZAIDzgwPpSy6ezW1FtmeD8.roa (hash: np0ySnVq+ohTQoZSQT/qPIOylTE9F9ExAUt5D1kOcwE=)
                          3: NQOx_xjCSC5bkzr0t1LJDxJvJq0.asa (hash: Q/BQlYDMNejEhVFqRZbNSInpb1ogvcV67Q6DhAARUbc=)
                          4: NbeD14QOQVqxpCNvyr8gH_GQtrc.roa (hash: oswI2CSKNyAXKvPvhJzaCytbyJezZyC2UppT7NbsjUk=)
                          5: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: VbmkAFZmfsMmD3ii/QQqZXXXyL4lEgInBbXZieVHk3g=)
                          6: qiGEtHR-OZvI2oeuorcjI6BhdaI.roa (hash: ME9nmORTjTK7cycE5CtjDm3qTqSJ9rsE8RSCjaBaNp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:83:5c:49:c6:b3:35:75:42:01:2b:ce:1c:0b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
        Validity
            Not Before: Jul 28 12:01:00 2026 GMT
            Not After : Jul 29 12:01:00 2026 GMT
        Subject: CN=0a94ee0ea5ffa104d7b07c918791efea132335e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:85:92:8c:26:a4:3a:bf:5c:67:05:bf:0c:05:
                    5c:53:6e:6e:dc:c9:19:22:38:47:2f:ed:8a:67:31:
                    af:03:90:51:d9:4a:a7:9c:c0:48:cd:fc:21:e0:bf:
                    c3:aa:fa:14:6e:10:f2:5d:57:15:50:8c:eb:3e:2a:
                    b8:65:87:a5:6f:95:a7:db:8e:cb:30:60:9a:e9:cd:
                    49:42:d7:0b:c6:b2:ee:09:f1:88:fb:43:e6:34:57:
                    6c:c1:0e:9d:68:df:68:d8:75:4c:e1:23:36:c9:72:
                    a2:7c:66:a8:af:7c:ea:6f:3e:25:9a:58:a2:49:e3:
                    db:07:24:12:77:ac:ea:66:68:c5:e2:b1:43:50:9f:
                    d0:1e:0e:4d:d9:fd:08:e0:e3:6b:44:84:bb:02:a9:
                    9b:9a:08:95:51:ac:2a:a7:b7:eb:74:34:70:d5:f9:
                    ee:3c:e1:2b:7e:e7:58:45:77:a7:2c:f7:72:be:3d:
                    8d:c5:96:c5:51:58:b3:dd:0b:c0:de:2a:32:21:eb:
                    b3:de:71:40:68:ca:95:cf:3b:c2:b0:20:ff:e1:a8:
                    e1:d4:ff:ea:59:2e:67:bf:3f:eb:dd:21:03:56:ae:
                    c2:0a:d5:71:88:1b:4e:a6:63:86:a6:e3:8d:6f:d5:
                    53:c1:af:c4:95:d8:a4:cf:4c:55:b5:f7:fc:19:6f:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:94:EE:0E:A5:FF:A1:04:D7:B0:7C:91:87:91:EF:EA:13:23:35:E8
            X509v3 Authority Key Identifier:
                keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:9d:c1:58:20:cf:69:82:f6:3f:3b:43:9b:d7:41:7f:98:
         b0:a3:4c:bc:1d:23:3d:98:5c:72:36:8f:aa:39:4d:d3:2e:30:
         9f:97:30:8c:1b:30:88:8d:b5:ce:eb:6c:3b:ab:b0:36:9b:f8:
         59:ce:85:e5:c1:79:86:36:ba:c8:1c:11:e3:68:6a:84:cd:ff:
         d1:fc:c0:62:a6:a4:67:6e:b0:1b:18:b7:4d:48:ca:8c:d4:30:
         0d:a3:6a:7b:6e:27:bd:22:79:06:23:96:b0:89:f0:0a:1d:bd:
         30:9e:3e:39:62:f2:16:2e:07:12:c0:9e:31:be:b7:bb:66:5b:
         ec:45:df:99:f5:34:4e:d0:41:58:74:49:15:e5:c8:ba:f1:19:
         dc:a7:0b:69:c3:bd:ba:f7:a1:ad:6f:6f:21:ba:b7:29:ec:80:
         c0:c4:39:bb:56:b5:25:ac:bf:b9:d3:ed:02:d0:c4:8a:dd:ad:
         2f:e6:0e:d1:58:88:be:88:89:29:29:9e:48:24:73:fc:fe:e1:
         7e:4e:64:65:41:f1:d4:ea:57:f2:d9:61:73:b2:24:55:2c:7a:
         51:bd:b3:cb:37:84:17:6a:ce:30:2f:26:0d:6a:8b:2e:fa:ef:
         08:1d:85:5c:34:79:0f:29:f7:22:79:8d:3e:86:12:10:60:81:
         81:9e:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:25 2026 by rpki-client