Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File:                     sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier:          UxFodi+11hJQiOX9wGLW12eh4GxspsGjEnfjZk8r/w8=
Subject key identifier:   FD:5A:5B:54:9D:B5:C5:35:8D:C5:3C:92:29:2A:72:76:02:5B:E9:0C
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer:       /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial:       01A1A74B7222E8E7CA982CC6847525FE5221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number:          068E
Signing time:             Wed 04 Nov 2026 16:01:41 +0000
Manifest this update:     Wed 04 Nov 2026 16:01:41 +0000
Manifest next update:     Thu 05 Nov 2026 16:01:41 +0000
Files and hashes:         1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: cHv1p75hVnpM+5FxClpm/t1zSKtzykJM42nieTKPqLY=)
                          2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a7:4b:72:22:e8:e7:ca:98:2c:c6:84:75:25:fe:52:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
        Validity
            Not Before: Nov  4 16:01:41 2026 GMT
            Not After : Nov  5 16:01:41 2026 GMT
        Subject: CN=fd5a5b549db5c5358dc53c92292a7276025be90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:b2:04:73:37:db:12:2a:e6:1d:4d:52:40:
                    fc:38:bc:37:81:ad:08:65:c4:a4:c6:58:59:0e:71:
                    89:44:ca:51:1c:5f:3c:87:54:c6:ef:9c:b4:eb:74:
                    85:82:ed:03:ed:b0:bf:67:e5:be:6e:4f:1f:b4:40:
                    f5:ba:2c:d5:75:1c:69:62:20:8c:8d:f9:a4:82:5c:
                    dc:94:f3:0a:01:a9:23:29:31:f4:5e:b7:6e:72:95:
                    b5:00:ae:db:4a:db:df:7b:12:c1:81:0f:a2:ca:80:
                    36:3e:a5:8c:99:1d:ba:a7:c9:77:ba:21:25:b9:94:
                    11:49:19:3a:fd:79:94:07:2d:6e:72:7a:be:1a:ef:
                    48:ba:2b:51:f2:6b:7e:61:6d:d8:34:f5:f0:30:d9:
                    1d:2a:e3:54:60:a6:7f:88:3d:13:a8:d1:9d:b6:55:
                    6f:71:b8:f0:51:7d:36:bf:2c:3d:48:ce:65:91:89:
                    8c:e6:7f:84:e9:0a:4a:54:cc:63:0f:0d:58:dd:cd:
                    4a:b4:5c:82:c6:78:6f:72:9d:4c:89:d2:8c:bd:75:
                    e0:08:04:0b:b3:5e:81:10:df:b6:c3:72:8b:9f:ec:
                    46:a4:78:8b:55:a3:cc:10:95:12:2b:c5:36:0a:7d:
                    f8:a4:ff:ab:a9:8d:2d:92:4c:4a:79:cf:7c:03:0a:
                    66:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5A:5B:54:9D:B5:C5:35:8D:C5:3C:92:29:2A:72:76:02:5B:E9:0C
            X509v3 Authority Key Identifier:
                keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:52:c1:cb:d2:8f:03:56:8a:a5:40:d4:cf:10:d5:46:f8:5f:
         c9:53:ca:f7:5f:11:65:9b:6f:d5:87:f2:5e:10:75:7b:f1:44:
         3f:85:66:9c:e4:32:16:88:1b:61:93:4a:65:a3:92:e2:41:cc:
         c8:d2:15:b5:72:ee:a1:09:a6:9a:71:64:7e:0f:54:a3:35:81:
         3c:77:fb:73:75:47:a3:06:3d:44:66:84:23:b7:18:41:2d:13:
         0b:7d:3a:4c:ec:78:59:ad:ad:12:de:fe:ea:47:08:3f:d3:30:
         4e:13:11:f2:05:ff:00:a6:9b:eb:0a:01:81:99:b3:a6:4b:04:
         eb:19:de:49:3c:4e:06:2a:c2:f6:80:9c:07:37:d8:dc:84:37:
         cd:3d:4c:4d:1d:28:06:42:b0:3e:9f:90:b0:1d:fd:52:c1:58:
         b5:72:da:dd:ca:e6:fb:2f:2b:1c:c5:02:39:94:02:2c:14:a1:
         7f:75:29:17:f8:68:82:2f:2a:90:90:a3:7e:54:b8:b8:ec:c5:
         5d:49:0a:18:72:47:50:e7:db:05:76:31:83:1d:bd:ab:0a:6e:
         4b:72:81:22:a9:2c:16:9e:23:55:63:14:9d:1e:20:28:e8:ea:
         d9:f6:94:43:d7:6d:05:f6:8b:43:ad:1a:18:43:ea:72:ec:86:
         b7:bc:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:10:59 2026 by rpki-client