Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File:                     9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier:          lYskRJZWLWisfhhj6BmRCT30GfTUWoeFZ1KRpeI3X2k=
Subject key identifier:   4A:43:56:4E:BF:C0:9C:AB:B5:03:60:55:BB:9F:D0:A2:80:91:09:4C
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       01A18C786F0F8A60C0BC70963E17B8F777DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number:          0A56
Signing time:             Fri 30 Oct 2026 11:01:05 +0000
Manifest this update:     Fri 30 Oct 2026 11:01:05 +0000
Manifest next update:     Sat 31 Oct 2026 11:01:05 +0000
Files and hashes:         1: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: zic35b8SuYmgsx/hCCWpSLQjuEfSisD2/y+fVMLBZmw=)
                          2: DTajfEiYAfwU9wznkihFnvtM700.roa (hash: 0NM6zYcwmQ05W0Dcf5q5e1n9JwwtYJ2TI/Zem3bjahI=)
                          3: ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa (hash: 5I9TJRb3cc5VhsKq+pB92ABihn+aPu3v2b27S765Sxc=)
                          4: YHFA4JQJT_w-qOyv1tdQo99hP7U.roa (hash: bzABHukn/tUJxV914JpkLB2MX+U4A40WKsjCRa7w6mI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:78:6f:0f:8a:60:c0:bc:70:96:3e:17:b8:f7:77:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Oct 30 11:01:05 2026 GMT
            Not After : Oct 31 11:01:05 2026 GMT
        Subject: CN=4a43564ebfc09cabb5036055bb9fd0a28091094c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:6e:59:db:2e:a9:4b:9b:4e:75:68:a9:f7:
                    43:61:a7:94:4a:ab:fe:ad:23:97:68:a0:19:40:0b:
                    df:af:09:91:07:38:16:27:fc:d3:14:df:c6:a3:1d:
                    9c:cc:b3:20:64:f3:7b:ea:de:fb:43:e2:f9:db:7e:
                    87:d7:ba:06:b3:13:bd:09:0f:8f:0d:24:24:69:f6:
                    8f:ff:55:c3:c0:35:5a:0c:fa:0a:7f:ae:0f:3c:a1:
                    b5:2f:25:e1:a2:10:f2:0b:52:e2:ad:c4:d2:f0:e7:
                    fb:5f:29:5f:52:e3:e3:07:0e:74:eb:24:21:d2:69:
                    ff:58:72:82:15:93:9b:0d:3a:df:04:cb:f9:85:71:
                    65:52:79:5e:e6:c9:10:5b:56:95:47:d6:fb:ef:73:
                    85:94:ab:df:a6:5b:c0:37:4c:cf:ca:26:d4:20:38:
                    da:bf:8f:12:4e:e9:cf:ca:c0:98:30:70:0c:a4:75:
                    be:a4:b1:21:89:f6:17:3a:36:b6:a8:1d:e3:1a:53:
                    ea:f4:90:19:bc:e4:a3:1f:9b:c8:45:5f:99:34:aa:
                    41:94:c8:10:f1:8f:98:da:da:60:c8:7d:96:15:1e:
                    6e:e8:01:c5:71:b0:96:4e:f0:b4:42:29:99:38:51:
                    4a:73:50:a4:10:14:99:cf:d2:a5:88:20:ad:84:59:
                    15:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:43:56:4E:BF:C0:9C:AB:B5:03:60:55:BB:9F:D0:A2:80:91:09:4C
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8a:7e:33:a5:02:8f:fd:98:75:36:3e:81:fd:9d:87:de:15:
         d5:b3:bb:84:0e:97:09:18:0e:20:7f:b4:f7:92:43:17:aa:8a:
         52:1f:8c:ea:84:d9:1d:10:bf:26:1f:d7:98:0c:f2:34:0e:6e:
         b4:19:40:39:b5:70:db:69:36:3f:ba:a0:23:2c:22:83:66:4b:
         a0:98:73:5f:27:c3:05:23:d2:09:85:5e:35:05:50:8c:68:01:
         a9:52:4e:30:a1:15:e1:11:a7:1b:bc:34:e8:3b:47:37:3d:5d:
         77:21:a7:0b:00:02:c8:2b:45:c2:3c:3d:5c:9f:4d:1e:d2:8f:
         00:5f:d9:c2:94:28:24:8a:af:1b:58:44:ea:0b:29:e3:2c:94:
         7d:f5:a5:f5:cf:39:7a:47:ff:df:ae:75:25:a5:b0:7d:d5:e9:
         56:ce:0d:cf:c0:46:df:dd:90:da:6b:09:00:91:12:00:5c:20:
         b4:be:6c:bd:f6:06:a6:cb:65:ad:a1:19:20:5f:93:61:15:d0:
         16:69:b2:e0:27:57:c9:bc:c1:23:25:ea:db:4c:81:37:a3:96:
         cb:d5:40:7f:a4:a2:10:00:14:d4:e7:e3:7d:7d:30:84:ba:0a:
         0a:76:62:2d:e8:6a:9f:3c:5e:17:4e:99:4c:b7:8e:22:fa:9e:
         b4:61:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:10:20 2026 by rpki-client