Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File:                     qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier:          VV1fhAOIc+qCcSPGDwZF5eSXzeB98pUyS0nGe0gjHG4=
Subject key identifier:   2D:CB:71:3E:14:ED:C7:F0:A1:C7:D5:85:E9:38:B0:16:96:80:62:55
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer:       /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial:       01A0ED78B8D35DDB465EBE1690A4C41D7207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number:          080E
Signing time:             Tue 29 Sep 2026 14:01:46 +0000
Manifest this update:     Tue 29 Sep 2026 14:01:46 +0000
Manifest next update:     Wed 30 Sep 2026 14:01:46 +0000
Files and hashes:         1: 7cxeVgz8TbfDoo5I7-2NKyTzXTo.asa (hash: qASt1tPeqwlwGXks2FNMyN+aJfbPnWYSXeXKrC2Yero=)
                          2: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: PDS8A8+HkUqqJcaCzeXnhJCu9qJC2NLLS+G2Q775TvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:78:b8:d3:5d:db:46:5e:be:16:90:a4:c4:1d:72:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
        Validity
            Not Before: Sep 29 14:01:46 2026 GMT
            Not After : Sep 30 14:01:46 2026 GMT
        Subject: CN=2dcb713e14edc7f0a1c7d585e938b01696806255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:23:5d:bf:bd:42:bd:3a:0a:af:c7:1d:82:
                    2a:c5:f9:cd:f9:d4:e9:09:16:55:1a:5d:e9:e2:62:
                    3f:31:37:6c:eb:01:fe:d9:fc:6b:7b:9b:10:64:20:
                    27:cb:40:81:f0:e0:5e:67:75:fd:e4:81:97:e8:89:
                    70:2a:25:b1:22:2e:e3:f3:3f:fe:f3:a8:d8:af:39:
                    f4:77:22:65:28:62:54:26:10:2a:b2:38:9e:b2:50:
                    17:a2:7f:14:0b:12:8d:ab:ec:ea:d3:48:b2:63:db:
                    ec:6a:73:d6:cd:de:d8:26:9e:7f:5b:0d:3a:e5:b7:
                    fb:24:d5:00:60:6d:80:e5:6c:98:3a:83:40:9f:8b:
                    1a:da:5c:8f:e3:7c:26:4f:a1:6c:c4:c9:23:ce:b7:
                    ef:c7:65:fe:a4:ac:d8:fb:e1:28:28:d1:d6:6a:2e:
                    11:94:c9:c5:37:75:d6:c8:2c:46:c9:67:0c:5a:fe:
                    61:0e:94:80:1a:f3:8a:99:79:16:68:48:e3:fd:4e:
                    94:ec:8f:db:f5:69:62:dd:f8:21:a5:c5:26:c8:de:
                    46:82:de:9c:75:bf:45:7e:41:0c:8e:4a:d0:f0:f2:
                    1a:01:85:82:0d:77:c9:b0:c6:3f:08:9c:d6:8c:f2:
                    a9:74:70:c6:24:d2:90:d9:a8:22:3e:6c:a8:2a:0c:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CB:71:3E:14:ED:C7:F0:A1:C7:D5:85:E9:38:B0:16:96:80:62:55
            X509v3 Authority Key Identifier:
                keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:61:f4:cc:8c:8b:95:e4:e1:9a:fe:ab:b7:ac:43:fa:72:5a:
         1e:ca:41:17:05:12:3e:f5:02:69:59:e0:ee:2c:ed:4e:7f:d8:
         36:c8:cb:65:89:74:7d:57:2c:f3:0b:5f:ce:20:39:d6:b1:46:
         38:25:6b:1c:91:c1:12:03:13:7d:2a:0c:c3:06:01:db:c9:c2:
         5a:24:d5:da:64:69:b9:28:19:93:68:53:83:f0:a3:19:16:ab:
         15:f7:89:b3:61:b0:32:a8:04:c8:d6:fc:a7:86:8a:01:42:82:
         7d:cf:92:52:ba:48:d8:c5:0c:b1:c1:ad:55:69:90:c4:91:e4:
         71:49:86:f0:fd:98:c6:1e:6d:d9:39:7c:b9:59:d0:6d:7c:bf:
         93:0a:13:72:93:39:d9:a4:2c:e4:f6:b5:c9:3c:43:d7:81:b2:
         75:d1:8b:2c:c4:ff:08:e0:6c:26:b8:41:ee:73:03:88:7b:6a:
         6c:9c:a0:25:e5:42:3d:82:9e:91:b5:53:43:90:d2:7e:96:54:
         3a:13:2b:e5:1d:49:2f:35:f6:60:bb:bf:6a:47:b7:2c:15:fb:
         45:c9:d2:94:a5:38:eb:bf:5e:b1:45:a9:1d:7d:fe:0a:73:14:
         c4:64:79:7b:44:32:90:b2:86:ea:36:b8:ad:1d:7e:ad:f4:57:
         df:f5:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:48:39 2026 by rpki-client