Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
File:                     qHvIMvQSt59zAWbsV-s2waNbBok.mft (raw, json)
Hash identifier:          arzDTea3R2J/4dXc/Rh6B6vtwo+al48ljPJFfzJygzE=
Subject key identifier:   F4:3D:AC:3C:B9:D6:DC:7E:D2:06:85:43:B6:13:C8:F2:74:33:F1:B9
Authority key identifier: A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
Certificate issuer:       /CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Certificate serial:       019FAA879884081593A0AA9E00A59B1A70BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
Manifest number:          88
Signing time:             Tue 28 Jul 2026 21:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:40 +0000
Files and hashes:         1: 3TZvjEfkPGnfb-tMF5tui2UzMj0.roa (hash: QOEhgl7wja/sJ10iRCnuW/2g1XbkedQKiYSWjxKqvZE=)
                          2: qHvIMvQSt59zAWbsV-s2waNbBok.crl (hash: 42LiB81vr/w/pU4gHAyAGA5qmhaMyGWIBtlNbXO8pdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:98:84:08:15:93:a0:aa:9e:00:a5:9b:1a:70:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a87bc832f412b79f730166ec57eb36c1a35b0689
        Validity
            Not Before: Jul 28 21:00:40 2026 GMT
            Not After : Jul 29 21:00:40 2026 GMT
        Subject: CN=f43dac3cb9d6dc7ed2068543b613c8f27433f1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:df:d5:89:5a:0d:d5:04:82:f2:fc:b1:2b:
                    28:89:20:d0:c1:c1:22:45:47:69:b4:c5:19:d9:9d:
                    17:4f:8e:9a:28:9f:df:78:f7:87:c3:f2:c9:79:f8:
                    89:3e:76:d6:da:8d:1b:9e:09:98:48:e5:01:ae:35:
                    d3:8d:bc:9b:58:30:54:09:ea:d3:67:94:ce:1a:86:
                    8c:ce:4f:cd:19:28:dd:a3:89:58:8e:59:a5:f1:38:
                    8e:e9:40:1b:44:2b:31:b6:b5:e1:8e:22:3b:f6:db:
                    ac:18:de:c8:1a:17:fc:8c:d2:11:a4:e5:8a:db:43:
                    0a:95:1e:20:de:0e:85:50:77:2d:f7:3c:c1:f8:9e:
                    01:96:0a:3e:b5:34:b5:25:bb:79:73:32:78:45:a4:
                    03:e8:0f:41:90:41:10:0b:b0:de:1b:64:f2:f4:9f:
                    ac:82:a8:ce:47:be:82:3e:27:79:69:df:92:1b:e8:
                    63:47:aa:30:03:d8:1a:54:a3:bb:c2:0b:aa:f3:cb:
                    74:6c:ff:ac:b6:62:8f:a8:38:76:b9:f7:a5:20:5d:
                    1f:e8:98:58:ef:44:f4:24:2a:c1:62:80:00:89:76:
                    d9:37:52:9b:e5:e8:c4:f1:21:83:07:f1:00:a8:f2:
                    18:5b:4b:86:1d:ce:68:2c:e8:d4:15:0b:ad:3c:9b:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3D:AC:3C:B9:D6:DC:7E:D2:06:85:43:B6:13:C8:F2:74:33:F1:B9
            X509v3 Authority Key Identifier:
                keyid:A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:14:a7:14:41:d8:1c:d5:fb:2b:89:1d:9a:7e:90:74:95:
         34:44:48:8b:ab:f1:4a:8c:20:c0:0d:b5:20:e6:4e:ae:5f:e2:
         a1:1b:e2:f9:51:10:9b:ff:d9:bd:4d:ce:2d:7a:60:ca:da:b2:
         17:bc:f7:5f:9f:0d:ce:22:03:a9:f5:c2:bb:03:96:8d:58:12:
         33:a0:7f:4a:e8:93:56:ef:89:a3:48:6e:2c:47:a9:fd:7a:f5:
         a7:99:7e:08:6b:0e:c5:a9:ae:dd:02:11:5f:69:94:73:dc:c4:
         e5:a7:e4:5f:53:0d:3f:a1:b4:22:f3:0d:47:74:27:44:e0:66:
         e3:d3:1a:23:2c:8b:e0:ce:e2:7c:64:04:f5:7e:b6:b6:22:70:
         9c:40:18:81:29:2c:3f:42:c8:b6:96:44:61:0a:d0:5f:a7:c8:
         1c:75:66:f4:16:02:2a:92:33:ab:61:ce:fc:76:40:52:1c:94:
         b2:ac:34:dc:09:ec:ff:99:b7:42:47:6d:06:32:7a:27:4a:d3:
         99:21:c4:47:48:2f:0b:8f:69:e4:57:8a:7b:a2:01:e9:8a:a7:
         d6:60:40:6e:e5:9c:b6:b0:8c:5f:28:2b:2d:aa:30:e0:ec:83:
         31:ef:79:43:d7:7a:21:16:46:e8:22:85:7a:c2:a6:69:09:d7:
         8b:d4:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:17 2026 by rpki-client