Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          YE0cfmZhYToRXxRdgc0uJKW+tQ1J0DimEIgklyRCTfA=
Subject key identifier:   53:9D:CB:0E:FB:F1:0E:70:27:A6:3F:F8:50:93:3D:30:57:AF:55:29
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       01A11A874F8176AFD7B4D06E419A34737D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          1A97
Signing time:             Thu 08 Oct 2026 08:00:37 +0000
Manifest this update:     Thu 08 Oct 2026 08:00:37 +0000
Manifest next update:     Fri 09 Oct 2026 08:00:37 +0000
Files and hashes:         1: HqmBNUdmEip8S3rZUAEXbYeiMDE.roa (hash: g5QXvRrB37nz+UezkbR2qYuv3hfWDz55OyBzCv5F3cs=)
                          2: TnnOKxtf4EPhpaijnm_BNONRxwU.roa (hash: /oEc2dWACsObBTpte8m7CBKnG6qM7AzaqS7eowDmmPE=)
                          3: gn4jpmqvHPR6rBGCBxZHXL4XW7Q.roa (hash: zEyp0ISXI99Ue+kTnL8hqnoTwJyraQRvQCykId/nY+Q=)
                          4: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: iFcV5+aJDzoCD0n6qDAS01FQ7tp3HpvSfz/9PZzyLtE=)
                          5: vFoLoBh7oWb6usXmjNjvyipGBRI.roa (hash: 0j1EDxGflRhorx1jgVNGqb1+St0JzyMh9AI0pVLut9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:87:4f:81:76:af:d7:b4:d0:6e:41:9a:34:73:7d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Oct  8 08:00:37 2026 GMT
            Not After : Oct  9 08:00:37 2026 GMT
        Subject: CN=539dcb0efbf10e7027a63ff850933d3057af5529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7b:1d:11:07:28:67:23:4c:2f:a3:28:e8:16:
                    8f:9b:22:71:48:37:4c:17:a0:1d:49:18:09:49:8f:
                    e8:7a:10:00:63:69:c9:d0:f2:2f:06:48:3f:33:bb:
                    22:ca:3e:51:5d:59:62:1c:0a:1d:81:34:7b:1b:34:
                    14:b8:a5:42:92:da:c7:b3:c1:a8:25:e2:6b:94:92:
                    a7:f3:81:fd:d0:ff:3a:00:26:a5:9b:23:ac:07:a5:
                    49:04:0b:56:7a:3f:0f:47:fb:54:74:0f:28:2f:fe:
                    3d:e5:59:70:4e:c0:06:db:8e:73:c2:92:b0:76:59:
                    fa:40:14:54:c0:13:49:0a:94:24:47:17:30:d5:e0:
                    f2:f1:4a:60:f3:fa:30:24:5f:9c:9f:bb:b5:a0:cc:
                    34:4d:30:60:d3:ac:85:53:45:44:89:28:da:04:0c:
                    72:ef:6d:50:ab:de:ec:22:ef:a4:ea:c3:b9:ab:1d:
                    04:be:f6:df:cf:f0:6f:0b:01:fd:b1:a3:08:05:ec:
                    ef:27:ef:06:e0:1e:2e:97:41:48:7d:94:34:7c:52:
                    c0:2e:c8:1f:87:15:05:b1:b5:63:d5:a0:77:8c:d1:
                    c4:5f:24:13:de:9e:2e:05:13:66:98:cd:9b:e6:55:
                    36:da:e4:73:4b:b2:31:ad:ad:df:ed:93:b0:fa:e4:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9D:CB:0E:FB:F1:0E:70:27:A6:3F:F8:50:93:3D:30:57:AF:55:29
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:31:89:ce:db:a3:fd:d7:0a:ef:2a:68:df:1b:33:31:6b:a2:
         cd:eb:f5:09:4a:90:be:3b:85:d5:1e:01:f8:d4:84:00:22:e3:
         e0:64:e8:a3:bc:de:48:b2:48:3f:1b:d0:33:83:28:fb:9d:3b:
         f7:c4:30:70:92:2b:ad:d4:99:c3:c7:e1:a8:58:d4:57:75:bc:
         b4:6f:d6:96:b7:2c:f5:45:b1:e4:c0:b0:44:df:ae:e1:60:57:
         ae:5d:9d:a9:b8:9f:cd:ae:0b:f7:14:cb:da:8c:8a:b5:d2:35:
         00:7c:85:d7:0d:37:3c:4e:7b:2b:3f:6b:98:01:69:49:fd:5c:
         9e:61:66:e5:94:48:c6:72:46:a9:67:3c:4c:53:ef:8a:a4:a9:
         8d:b5:10:1d:3f:b6:c5:c5:00:4b:1e:b2:a7:4d:fd:84:b4:e1:
         72:24:94:61:fd:0c:44:36:65:b5:d4:53:b2:f2:29:c8:5f:60:
         22:58:1d:18:23:08:43:f7:30:43:b0:04:85:36:6c:ee:f6:4f:
         a2:00:81:07:49:c7:0f:21:d4:65:48:b5:bf:5e:b0:d0:84:a2:
         d2:69:19:e2:37:0c:fd:bd:b0:84:fd:a3:77:b2:3f:de:1c:f4:
         43:a3:27:2e:f5:f1:ad:b9:ba:b5:cb:79:5c:ae:c5:46:49:af:
         38:2f:61:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:29:50 2026 by rpki-client