Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File:                     DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier:          pZSVIWj7kxVjFV5UzYWBUSOFhfXFFHkM0YDA/IzRziY=
Subject key identifier:   73:CF:56:9E:44:1A:97:CA:59:6E:3F:9A:6A:73:09:45:89:10:83:77
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer:       /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial:       01A114F3EC50E1AB928E3DD205A6FBEB2F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number:          051E
Signing time:             Wed 07 Oct 2026 06:01:32 +0000
Manifest this update:     Wed 07 Oct 2026 06:01:32 +0000
Manifest next update:     Thu 08 Oct 2026 06:01:32 +0000
Files and hashes:         1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: 0me29k196v4AIA+cPc4Wsk9XAVNL7dzkmnfnx2nFWCM=)
                          2: Lpz2qCyi_pclLucNORkTQKN3m6Y.roa (hash: Q2l7VmCgH626w3ti2dW3eJLOPal4uK77R7IRCnO8dUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:f3:ec:50:e1:ab:92:8e:3d:d2:05:a6:fb:eb:2f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
        Validity
            Not Before: Oct  7 06:01:32 2026 GMT
            Not After : Oct  8 06:01:32 2026 GMT
        Subject: CN=73cf569e441a97ca596e3f9a6a73094589108377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:2b:d4:21:0f:52:d6:11:e4:3d:b2:71:de:
                    7a:86:05:42:fe:34:40:68:d0:a2:8a:d0:9f:54:b2:
                    2e:86:2d:86:fd:fd:26:7b:9c:d4:d7:8b:b9:e3:79:
                    96:8d:3c:08:1d:45:66:3d:45:ec:f0:2f:fe:bf:e8:
                    48:47:60:47:db:98:e4:5f:22:dc:8e:ef:3b:7f:96:
                    b6:98:89:ff:a7:65:ee:1c:1e:0d:d7:e6:31:bf:8e:
                    bc:ca:e9:01:55:22:3b:e4:af:f8:e4:e5:08:cf:0a:
                    a7:ed:53:4a:52:83:ef:e8:a9:ed:e4:51:70:53:bb:
                    bb:b8:b3:da:14:bc:fb:d4:f5:c3:b2:69:ae:d3:ce:
                    02:ab:5c:a9:b0:85:ad:8b:e8:5e:d1:d5:2f:db:74:
                    3f:58:6c:f5:42:6e:c1:4f:96:30:24:e6:4d:42:42:
                    09:51:a6:6e:12:40:d4:ab:2a:68:15:2b:58:30:63:
                    94:fa:2b:1a:c9:4b:f7:c1:0f:6a:d0:aa:de:36:b0:
                    50:27:42:c1:db:e9:9b:1b:43:5a:a1:77:23:79:38:
                    58:98:57:1a:7f:2e:57:4b:a0:8c:8a:a4:88:26:b9:
                    d8:17:58:29:8b:06:d2:08:70:79:b5:48:df:2b:80:
                    0d:1f:ae:f5:74:98:c3:d5:b6:f5:46:fc:13:10:df:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CF:56:9E:44:1A:97:CA:59:6E:3F:9A:6A:73:09:45:89:10:83:77
            X509v3 Authority Key Identifier:
                keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d6:0d:36:4a:62:ad:ba:d4:fc:4b:55:f1:2d:02:2f:5d:f7:
         27:b3:61:67:7e:8c:b3:fb:3a:e8:14:0e:ac:d6:1c:a9:db:d1:
         34:69:a5:a4:6f:7d:13:36:e1:b4:ff:92:3a:b7:ab:de:43:28:
         9c:f9:b4:09:7d:4d:2f:6a:f2:be:b8:14:47:ed:c7:bc:72:4a:
         8d:9e:c8:37:e1:30:65:09:e8:89:0d:4b:0b:c7:3d:ed:93:9c:
         4a:63:6e:92:30:c9:42:e0:8b:63:50:16:66:73:2e:01:83:bc:
         44:1d:c4:f6:54:c7:d7:2b:4e:ae:2b:cc:40:69:e3:8b:c6:d0:
         41:11:f9:82:82:d1:89:cb:8d:31:e9:91:c1:60:8c:22:8f:54:
         b2:25:43:ee:72:cb:08:72:c8:99:68:2d:21:f2:8a:4b:07:6e:
         4a:88:39:4b:41:b0:49:fe:f6:6e:c9:e5:85:f0:db:36:97:be:
         0d:b0:54:8b:fd:57:d5:d1:bd:41:88:9a:62:e1:c8:c1:72:11:
         5c:74:60:23:8b:75:9e:3c:d1:a5:99:c6:fe:34:58:7b:a1:07:
         a9:67:87:65:00:fc:ac:58:6c:24:ce:2d:bf:ff:4c:ab:7d:6c:
         1e:a9:30:c4:82:23:49:39:6e:76:23:b3:d0:47:d2:6c:4f:30:
         16:75:09:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 15:13:31 2026 by rpki-client