Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          TTUi5vvi6yO9MJjJEIQMjPHNMli6hjNrtDytBQn6DiU=
Subject key identifier:   CA:F1:3D:17:01:3D:DA:F2:B3:D3:BC:94:BD:98:59:A7:1B:5D:B8:0C
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       01A08942D3FF342C7C5AB8BD19A9513F0126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          1102
Signing time:             Thu 10 Sep 2026 03:00:53 +0000
Manifest this update:     Thu 10 Sep 2026 03:00:53 +0000
Manifest next update:     Fri 11 Sep 2026 03:00:53 +0000
Files and hashes:         1: Nl-NwJXgg_mKvSjTnftPWLYBToY.roa (hash: UM5uAdr1m30XVEMiULWnarxQCPhDPuMKS+lBMXBG4Ls=)
                          2: Rohs0EQIAoIUkwGS6XtjnDouO8g.roa (hash: EcZk5ZFiNKSus0TYnUyIuUuGvRBAlAnVxdbmm6ttv7A=)
                          3: ihu7RSF9d_o474O74_XHNiBLq8Y.roa (hash: zWFbywvFotfCwUcEIQ2DvsebZNFghPy/L/dQzBScQnk=)
                          4: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: GuPBo1J/zVqA3z27SZJGfL4P1T2gSpLscQ83Ci6uIa8=)
                          5: yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa (hash: bp0xhjE5IUPvG68ZkNNK1uC8wEizknIYbPwTcDbU+cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:42:d3:ff:34:2c:7c:5a:b8:bd:19:a9:51:3f:01:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Sep 10 03:00:53 2026 GMT
            Not After : Sep 11 03:00:53 2026 GMT
        Subject: CN=caf13d17013ddaf2b3d3bc94bd9859a71b5db80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:eb:3f:fb:01:64:5a:ed:f5:f4:bf:17:9c:
                    56:61:9f:24:d8:56:cd:d8:f6:7d:51:c2:17:ce:0a:
                    09:a3:16:54:4c:bd:19:3b:9b:a2:2b:eb:51:c0:74:
                    ea:9b:4f:9b:f8:d2:b3:47:9a:96:9d:07:d6:84:d3:
                    42:65:60:01:2f:e5:52:1f:d9:e6:66:27:1e:94:09:
                    8b:19:31:3e:61:a5:3b:5d:29:f2:30:6d:1e:5b:cd:
                    24:b0:94:ed:66:fa:65:cf:54:10:23:22:dc:c8:13:
                    3d:f4:cc:7c:70:8c:ad:63:b7:65:46:4d:5a:fc:50:
                    3e:c5:46:1a:b8:d5:cd:e7:33:d6:68:7d:8e:d0:62:
                    43:4a:a7:cc:8c:f6:5c:5a:9d:c7:53:ad:75:3a:c0:
                    2f:aa:46:b1:e6:9c:18:f8:09:77:1d:b1:ed:5c:18:
                    26:e2:5f:da:d8:de:53:65:5c:8e:5a:0f:12:a3:ff:
                    64:1e:11:91:35:a2:df:a8:b2:47:a9:92:48:14:bb:
                    61:f8:1e:95:b7:3c:6b:ec:a1:b6:98:67:2a:08:c5:
                    8e:6c:49:2a:d6:74:c1:db:27:f8:79:75:b5:22:66:
                    b1:2b:63:72:6e:03:4b:7b:cb:58:2f:b9:1a:e6:4b:
                    63:87:dc:9d:78:bf:1b:9f:02:3a:80:c9:27:0b:e3:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F1:3D:17:01:3D:DA:F2:B3:D3:BC:94:BD:98:59:A7:1B:5D:B8:0C
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:00:fc:01:19:52:e3:91:2b:a5:53:97:60:ff:e1:16:56:74:
         f9:7a:16:bd:57:d1:62:ec:bb:15:a6:05:83:f3:ca:99:b2:e1:
         45:29:97:2a:d6:55:5c:b1:07:26:52:d2:03:47:f5:57:8d:61:
         69:65:77:d2:bb:7b:b1:be:b0:54:8e:99:56:79:46:5f:d6:16:
         c6:85:3c:6b:4b:f2:30:d0:04:11:80:07:ce:33:b6:33:36:93:
         31:e0:f5:40:48:e6:1c:05:80:fe:53:1f:77:0c:54:06:15:8c:
         75:e4:de:ae:dd:9b:1c:e2:1e:fe:f7:47:8b:16:eb:9a:0b:7a:
         ff:f9:ed:0f:1f:3e:91:20:c2:40:f0:d5:07:32:a4:26:eb:8c:
         a1:28:f5:20:e4:6a:45:55:fc:e5:eb:32:79:b3:16:8c:3f:23:
         92:52:6d:59:f7:3a:fa:41:f8:64:7b:d6:bc:60:7f:de:b0:bf:
         47:ce:d8:70:70:53:3f:50:cf:f5:06:7c:d6:3d:44:a1:c9:74:
         ae:b7:f6:51:b8:92:37:01:77:7a:6f:d1:4b:70:22:23:e2:43:
         bf:a1:a2:dd:5f:0d:fd:78:a7:df:82:81:ed:41:52:49:63:29:
         80:cc:88:b6:5a:7e:ac:b9:ef:90:35:18:04:d6:51:e0:81:38:
         e6:1f:03:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:53:54 2026 by rpki-client