Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File:                     qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier:          cKIEEZxr3JbKl07fZxUBnjnT85EVQN0jauqnz9T68XE=
Subject key identifier:   D0:BD:0C:FE:82:1E:B2:52:F6:D0:C4:01:B2:9C:31:EB:33:EB:8E:90
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer:       /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial:       019FA9E2BFEC277226BDA98042A6C6341401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number:          082A
Signing time:             Tue 28 Jul 2026 18:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:37 +0000
Files and hashes:         1: Ayy3FQCZfsnrrkGpwiilXLbjkWM.roa (hash: esgmCzM37dMW6UxbTfw9yQ8cfp/xjD2YDV7D5NJMYIE=)
                          2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: HWtXf4eC0XTeqt6imPRSCl7+vJUJ9DXbeiBTvZm5ELg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:bf:ec:27:72:26:bd:a9:80:42:a6:c6:34:14:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
        Validity
            Not Before: Jul 28 18:00:37 2026 GMT
            Not After : Jul 29 18:00:37 2026 GMT
        Subject: CN=d0bd0cfe821eb252f6d0c401b29c31eb33eb8e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:ea:de:1a:92:81:c4:52:be:dd:40:3e:56:
                    ea:83:27:52:1e:5b:32:e9:0a:0b:2a:0f:23:7b:39:
                    73:9d:25:73:71:c2:5d:75:f1:d4:e4:8b:18:9c:2d:
                    5e:b8:e9:89:aa:c6:6d:f6:fa:be:21:0a:1c:76:af:
                    77:15:d3:2c:83:f3:8c:8b:a5:c9:86:57:6c:e7:a9:
                    c4:fe:5e:d2:70:fc:d0:2a:f6:1e:da:56:85:c0:68:
                    06:67:f5:b1:6c:d5:5c:5d:fd:9c:8e:74:3a:6f:4b:
                    7c:a0:40:58:d1:dd:25:41:c3:6d:bf:f0:64:ce:61:
                    fe:47:77:c3:5a:09:cc:7c:01:e5:45:49:f8:76:06:
                    ac:07:73:ed:1a:d3:67:74:db:af:2f:0a:5f:6c:a9:
                    9e:df:2a:78:33:f7:d7:99:2b:64:a8:75:2c:de:38:
                    e3:4a:4a:08:4f:65:a6:b1:aa:bd:5b:b9:78:a1:78:
                    65:3f:49:80:87:f0:b1:4b:bd:9f:1d:42:36:36:ff:
                    2a:79:71:51:f7:0d:55:7a:f8:c0:3f:c1:65:03:2c:
                    4f:f2:26:f1:c0:ef:79:29:99:56:36:d4:2b:94:8b:
                    85:12:16:c1:38:3d:72:fd:a0:af:86:00:57:9a:ef:
                    fa:9b:39:43:f2:2e:02:62:11:08:7c:04:88:90:e5:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BD:0C:FE:82:1E:B2:52:F6:D0:C4:01:B2:9C:31:EB:33:EB:8E:90
            X509v3 Authority Key Identifier:
                keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:38:a9:ba:52:2c:83:89:76:ae:9a:c1:f7:7c:9c:78:7a:92:
         f9:33:0d:e3:ed:3f:49:86:eb:eb:3a:a1:0d:26:3a:83:4d:bc:
         20:f1:ca:d3:26:20:93:37:fa:00:ea:60:be:c0:b2:5b:e6:2e:
         8a:7d:78:95:d4:65:43:85:02:fb:fb:43:f0:1d:d3:f2:0d:ac:
         40:79:c2:52:2e:15:08:41:cb:54:0c:a7:7e:46:8f:36:97:49:
         42:94:3c:8c:b7:ed:e2:da:db:ff:20:79:79:f5:06:03:e7:2d:
         2a:5b:31:8c:46:44:18:d5:a7:71:14:67:ff:85:12:bd:66:81:
         6a:7b:19:e4:bc:29:ec:cf:38:b2:f0:6f:dc:4a:a5:bb:49:17:
         ba:3a:80:75:ac:20:85:ca:52:f0:68:8e:a5:f7:81:b9:22:09:
         60:85:f3:44:9e:a4:76:ee:ac:f1:e3:07:e8:4f:b3:96:f3:14:
         3a:71:94:94:7e:5f:a5:5d:f0:d1:34:c5:8f:10:d6:16:2e:1c:
         0f:f3:36:cb:e3:fb:cd:63:0b:5d:99:74:0e:39:0a:93:94:bd:
         fb:e1:21:62:94:96:f8:16:0a:53:fc:a1:ba:7b:46:67:28:82:
         dd:59:b1:fb:37:3b:b9:04:78:90:1b:4e:9d:a6:72:f9:85:9b:
         28:33:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:30 2026 by rpki-client