Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          53iAMWoa3ouFEuD6Q+zELwj7vFxWKrTs+vu+T0U9aro=
Subject key identifier:   74:47:66:F8:5A:65:F7:9F:26:AD:C0:D8:CA:E5:CD:A6:7B:3D:FD:F2
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       019FA9E2E471966C224B35ED27BC52AFA733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          19DD
Signing time:             Tue 28 Jul 2026 18:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:46 +0000
Files and hashes:         1: 6HLmOIlw0JJlLfNpuVhkS5VevII.roa (hash: duraaLF3+tphpAPz7hcD0W+ai9uSm22QFtqEemAzlOs=)
                          2: cgiCnDdXt2ZfV4gQ6f64Txzv9UI.roa (hash: Epq0AQtf5gLEvFkohacS+3j5hF97hS/AEpHSVuOJB9w=)
                          3: nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa (hash: KTNFAJc/6ueKlLn/0ANsYJWuRw0+1gFif+avYpTFJp4=)
                          4: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: 8GjVwicLFAVXqoPO+IHbFn0P0fufEtk8ri+jyjjy8e8=)
                          5: qfWUaAQNlV9wKmB2U3853Bl8uNA.roa (hash: rOp4emJoeO5JknR894vKgNsr/vggi5P0L+PXDJf8JnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:e4:71:96:6c:22:4b:35:ed:27:bc:52:af:a7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Jul 28 18:00:46 2026 GMT
            Not After : Jul 29 18:00:46 2026 GMT
        Subject: CN=744766f85a65f79f26adc0d8cae5cda67b3dfdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:90:21:58:f3:66:a0:a1:bf:24:83:27:aa:
                    82:1b:9a:85:80:3e:bc:da:98:b3:73:71:4c:24:71:
                    ca:19:60:2a:57:06:d7:24:75:fd:c0:96:cd:33:46:
                    24:44:51:9b:d8:d7:db:9a:3c:5b:d1:e6:23:79:76:
                    cd:37:74:6d:f3:ea:b9:5f:87:a4:c8:76:8d:c2:91:
                    ce:d8:44:0f:eb:4c:2a:61:fb:11:12:5d:ac:e7:a7:
                    16:77:64:26:73:09:71:41:6d:cc:c6:71:75:db:b1:
                    3e:3d:22:15:73:61:53:18:c7:82:c2:56:ae:cd:e8:
                    5e:ee:d7:44:d2:5a:2b:ea:5a:0d:aa:f3:aa:23:85:
                    ef:28:cf:fb:c3:72:cf:c1:e4:b1:b9:16:51:90:42:
                    69:6d:e3:3f:c6:cc:3b:77:11:24:fe:ce:57:8d:2d:
                    14:4c:53:c1:ea:ad:f6:1d:c3:9d:88:88:53:05:45:
                    ab:c8:d0:48:e9:1f:ca:53:29:66:3b:9c:99:a2:bb:
                    9a:90:6d:dd:34:0c:fa:24:57:aa:4d:8c:1c:18:73:
                    87:25:54:44:d8:4b:57:38:90:9c:c3:dc:99:87:a3:
                    bc:78:b2:d0:19:3f:5f:26:fe:ab:e8:bd:a7:80:a9:
                    3d:52:d9:41:f3:53:53:ae:f6:5c:64:46:1f:26:a0:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:47:66:F8:5A:65:F7:9F:26:AD:C0:D8:CA:E5:CD:A6:7B:3D:FD:F2
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2d:76:6c:5e:67:cf:14:67:72:04:64:9e:70:e9:76:de:a5:
         d0:34:03:61:bb:03:f1:ee:f3:8a:4b:17:bd:1b:a8:84:3d:cb:
         c1:0f:7e:e4:77:e3:1f:93:90:f3:78:0c:e7:58:e2:6e:ea:04:
         51:28:ed:ed:b4:2f:e0:37:6d:05:e8:f4:7e:89:c9:3c:23:f7:
         25:c5:2c:87:7a:1c:b3:af:44:07:a4:b4:8d:65:84:2b:a8:c4:
         87:58:44:48:94:02:53:89:7c:64:90:83:63:56:ec:db:4b:7a:
         b3:3f:9a:8a:be:59:4c:c5:31:27:73:8f:78:1f:4c:42:5a:09:
         4c:23:b4:8a:ae:7e:88:6b:fa:ca:c7:f9:08:45:f6:88:32:a3:
         a2:df:c0:e7:c1:d3:62:cb:35:c6:82:2a:53:d1:18:fe:09:66:
         ba:59:61:ad:ef:e8:f8:44:dd:8b:31:b9:fb:4e:62:4c:e4:10:
         5a:ba:21:67:0b:39:4b:d0:bd:37:b3:00:44:d2:71:b8:c3:bf:
         01:6d:b7:1a:4b:f3:e0:b0:02:c8:77:33:a0:39:34:d4:ef:1d:
         c9:62:a2:3c:ae:e4:b6:4f:de:92:89:5c:64:b7:40:ce:31:3a:
         e9:0a:6e:a2:c2:05:62:1f:52:17:28:45:b6:62:67:b9:c7:9c:
         4a:89:30:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:32:51 2026 by rpki-client