Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File:                     qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier:          pPyvzhGlxAW3IjP/TkJ8w2KrL2p5PGYvGIKZCgretws=
Subject key identifier:   1B:58:91:FD:26:7A:B4:FC:CF:16:AB:BD:5B:2C:BD:08:55:32:2D:C0
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer:       /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial:       01A147972EB61E4C853A0693ABBDB0B222DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number:          101A
Signing time:             Sat 17 Oct 2026 02:00:52 +0000
Manifest this update:     Sat 17 Oct 2026 02:00:52 +0000
Manifest next update:     Sun 18 Oct 2026 02:00:52 +0000
Files and hashes:         1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
                          2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: xLQ1uhR98/HuYUJSKEyww3dZFAGr8Aw3nLka7YfhEBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:97:2e:b6:1e:4c:85:3a:06:93:ab:bd:b0:b2:22:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
        Validity
            Not Before: Oct 17 02:00:52 2026 GMT
            Not After : Oct 18 02:00:52 2026 GMT
        Subject: CN=1b5891fd267ab4fccf16abbd5b2cbd0855322dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:69:85:d9:df:fe:61:86:40:0f:f0:83:c8:
                    fe:35:dd:21:9b:91:0c:57:92:e6:a8:c6:c0:4d:f4:
                    aa:54:b7:5b:21:7c:b0:02:86:ff:8a:77:f5:d7:fc:
                    58:59:0c:83:1e:49:84:b7:96:4d:13:e8:dd:2e:fe:
                    f6:b5:eb:35:4f:15:d6:e8:f7:b4:da:a6:c9:63:69:
                    e0:47:6a:76:69:d8:65:85:29:9b:cf:d5:3d:70:e8:
                    7c:3e:2d:9c:0a:26:5c:84:02:b7:5b:b8:9d:17:5f:
                    43:e0:f7:2d:1b:7c:62:7b:6f:61:71:0e:1f:7d:05:
                    42:4b:28:0e:91:0e:9f:66:d0:cb:94:03:ac:70:17:
                    47:18:fb:10:3b:63:4a:f3:ed:b4:e4:99:72:79:44:
                    02:6c:60:08:cf:13:6d:bb:0f:28:bf:79:19:11:76:
                    30:e1:dc:0e:93:2e:a1:c9:cb:0f:4f:c5:a5:35:e5:
                    e6:79:58:ce:35:88:90:ad:b0:c1:f9:5e:3d:8f:9e:
                    84:4d:4b:2e:cd:54:73:3c:c7:3a:29:5e:4d:68:11:
                    3a:db:47:71:98:f7:f7:f5:d9:5c:ab:33:62:d4:f2:
                    7e:31:3e:41:fe:01:6a:a5:0c:87:8e:f4:ce:d5:35:
                    6c:16:95:e6:e0:9f:58:8e:18:ac:c5:8b:af:75:39:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:58:91:FD:26:7A:B4:FC:CF:16:AB:BD:5B:2C:BD:08:55:32:2D:C0
            X509v3 Authority Key Identifier:
                keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0f:47:41:84:eb:2a:fc:2d:80:06:fa:48:57:82:6b:4d:86:
         07:77:d2:84:ae:a5:81:9d:a1:e4:00:e5:dc:54:1c:d2:25:ec:
         f1:3c:96:66:e0:a8:4a:03:b0:aa:90:2f:15:32:94:5a:d2:3f:
         17:30:ab:eb:67:8e:19:31:28:4b:05:29:31:2e:0a:0e:1b:f8:
         f1:5b:76:2c:a0:a5:b9:8f:9d:fe:c2:ed:9d:c8:65:53:46:35:
         e2:d0:33:7a:01:1f:66:89:70:90:8b:24:3c:57:6c:f8:b4:e5:
         7a:3e:31:28:de:a5:93:48:28:69:53:be:62:b9:e7:d8:33:fc:
         be:ac:60:f8:13:73:2a:14:c5:9e:89:89:2b:30:eb:85:01:80:
         cc:57:1e:b9:5b:4b:89:4f:ab:e3:41:b2:99:a8:8d:96:aa:05:
         72:2c:2b:15:72:c9:d3:2b:77:ea:b4:12:67:cb:f6:83:d5:c8:
         1d:44:c1:36:76:0e:04:bd:e4:72:99:c7:76:d0:7d:92:02:ef:
         18:ff:27:9c:4e:b2:37:4d:1e:54:c9:f9:22:dd:68:94:82:e8:
         43:ed:17:e2:b7:28:41:68:37:2f:79:65:a4:be:a1:74:d1:85:
         d0:c8:57:19:2f:93:64:1c:c5:2a:af:6c:23:a8:6a:e3:75:66:
         e2:06:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:05:51 2026 by rpki-client