Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File:                     qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier:          pS82ipjpev6V2/tRz255LtTRPSNw11PhSkUsi4jGb8U=
Subject key identifier:   57:03:DB:E7:5D:A7:F5:36:A4:B2:08:C3:E5:50:D9:B3:34:B4:F8:D6
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer:       /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial:       01A119AB27F49443AF333B6AFBEBAD846480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number:          0C69
Signing time:             Thu 08 Oct 2026 04:00:09 +0000
Manifest this update:     Thu 08 Oct 2026 04:00:09 +0000
Manifest next update:     Fri 09 Oct 2026 04:00:09 +0000
Files and hashes:         1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
                          2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: VQxHs7mwxRBMO23FK3sRYlhWTSumX9wO2kXUYBT4GHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:ab:27:f4:94:43:af:33:3b:6a:fb:eb:ad:84:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
        Validity
            Not Before: Oct  8 04:00:09 2026 GMT
            Not After : Oct  9 04:00:09 2026 GMT
        Subject: CN=5703dbe75da7f536a4b208c3e550d9b334b4f8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:66:01:45:ee:45:be:f5:19:54:f6:c8:c3:
                    8e:41:51:7d:77:64:9a:75:aa:dd:7e:84:6c:46:c9:
                    5b:e0:96:03:7e:93:3e:db:1f:76:8d:59:e7:32:6f:
                    d8:bf:46:14:1e:07:76:d3:e1:44:44:6e:f8:2b:93:
                    d2:d1:15:52:3a:ad:41:02:8a:e3:37:11:60:27:18:
                    26:98:9b:5a:26:6f:77:cb:66:a5:bf:eb:e5:2f:d0:
                    6c:f1:be:f1:c7:fe:0a:47:d8:17:92:57:9e:ed:10:
                    c9:1e:3c:d7:58:c6:dd:c6:6d:2d:59:62:2b:b6:98:
                    30:43:97:7d:61:8a:a2:3f:ab:7f:07:a5:07:3b:fb:
                    f7:23:61:86:df:34:01:4e:7a:05:c4:3e:c6:52:92:
                    a3:61:ca:be:3c:8e:5a:56:7d:a3:85:06:09:a1:4e:
                    4e:dc:6c:f0:ba:fa:66:c0:6a:a6:c9:d0:bf:81:f7:
                    ab:1a:48:83:74:5c:7e:cd:ee:b0:c0:18:ee:f9:01:
                    80:12:da:30:07:6a:22:b0:36:80:be:60:1b:99:8a:
                    2b:82:66:d5:2b:ca:c0:71:b3:e7:9c:87:af:38:0b:
                    ee:95:1a:25:74:e0:42:fb:dc:e6:4a:89:a6:82:00:
                    46:eb:2c:17:3f:fc:45:9d:62:9f:24:85:78:7f:24:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:03:DB:E7:5D:A7:F5:36:A4:B2:08:C3:E5:50:D9:B3:34:B4:F8:D6
            X509v3 Authority Key Identifier:
                keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:0a:ce:f1:11:cf:19:7a:b8:72:03:ac:a2:23:fe:16:d6:
         12:2a:24:f1:ab:e6:ee:cf:39:c9:63:8d:a3:43:62:85:4b:5d:
         74:f9:21:8e:23:24:db:76:c8:5d:fa:ad:49:52:1d:f0:71:b0:
         a2:36:53:9a:64:23:5f:91:3b:6d:8b:f5:f9:8d:69:26:6a:fb:
         d6:02:5d:2a:e0:5b:9e:2f:2a:09:cb:45:e2:29:7d:c6:41:10:
         84:be:8d:b4:3a:02:70:60:5a:ab:74:68:30:e0:d2:58:1a:6c:
         7a:07:46:c5:9c:af:b0:65:86:03:14:97:79:01:a6:d5:ab:0c:
         26:4e:93:7d:f0:82:4b:14:57:11:35:a7:4e:93:95:69:e7:1a:
         4c:f9:8a:14:84:18:66:89:00:c6:5d:09:ce:6e:72:11:a2:be:
         77:25:b1:2d:b8:47:49:e2:0e:c9:5e:56:e4:9e:86:3e:6d:da:
         a4:ff:4c:b6:9d:41:de:64:69:e8:91:f2:ec:4c:cc:b7:cc:ce:
         d1:5f:9b:36:a7:31:ca:61:6d:12:b9:8c:eb:7d:3e:57:f0:04:
         65:66:b1:01:ed:9b:5f:e1:5d:63:f6:65:b9:2b:5f:71:9b:6b:
         26:a2:12:e5:e8:ac:20:1c:69:b8:66:59:dc:c2:30:4a:8b:91:
         30:d1:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:51:02 2026 by rpki-client