Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
File:                     qvIogBSZWTJzeuf5_CJN8QIUElU.mft (raw, json)
Hash identifier:          1BoVclSwpviHQnon45LgX8H9fTQrPsXvWfgjBqYZyWk=
Subject key identifier:   BB:B2:88:00:94:8B:47:A6:7D:9D:3A:8C:CC:C8:8C:A0:58:1F:CF:23
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Certificate issuer:       /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial:       01A08AFAE1196AE79DFEEA29C3D10426BC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
Manifest number:          1783
Signing time:             Thu 10 Sep 2026 11:01:32 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:32 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:32 +0000
Files and hashes:         1: 9efBt3OrM2Y3RkHyaXFBEgWsA8M.roa (hash: EkSeGu8EIQcSrfpH6x8y/Izet2DAT1YLJaItWMqmRt0=)
                          2: qvIogBSZWTJzeuf5_CJN8QIUElU.crl (hash: hO3uRgvwE4pn4jsKH5benPGS2Gk5o1JSBsW8YYdGRr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:e1:19:6a:e7:9d:fe:ea:29:c3:d1:04:26:bc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
        Validity
            Not Before: Sep 10 11:01:32 2026 GMT
            Not After : Sep 11 11:01:32 2026 GMT
        Subject: CN=bbb28800948b47a67d9d3a8cccc88ca0581fcf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:ce:38:d1:2d:55:95:44:1b:86:28:81:a2:
                    a8:5b:f3:86:1e:a5:07:f4:cb:68:6d:cd:b1:82:d2:
                    54:3d:22:08:77:f0:25:7f:78:24:2c:eb:48:68:07:
                    1e:d3:20:51:c8:b1:76:a5:a2:7d:85:28:6e:d8:92:
                    1e:e4:f7:ff:b3:d7:aa:cb:71:c0:1e:bf:df:86:aa:
                    70:2e:cf:05:8b:5a:11:be:e3:7f:8f:8b:2d:eb:bc:
                    22:0a:9b:9c:ae:3a:f1:85:94:c5:e2:7a:7d:22:0a:
                    8b:bb:49:c4:8c:58:8d:9b:77:6f:eb:b9:e2:c7:0a:
                    91:94:01:f0:3c:6a:fe:f8:70:78:4a:b8:56:03:26:
                    44:e0:3f:2c:48:d9:99:40:cb:ab:eb:86:bd:85:c0:
                    5e:e6:f0:bf:89:28:f6:b4:c1:65:7d:a9:74:62:f3:
                    9c:ea:33:69:07:06:57:d3:91:84:91:d8:a3:6e:a9:
                    21:b3:f6:a3:c9:f1:ca:2f:1b:9c:6b:d8:c4:6e:66:
                    31:ae:e4:f8:d3:31:c6:54:40:41:10:f1:8a:68:cd:
                    67:5b:f4:80:d0:03:a4:99:09:89:61:9a:5b:c6:c2:
                    05:df:e7:8e:0d:fc:91:80:fe:a5:c9:02:97:63:62:
                    61:f8:90:b4:cf:96:a2:eb:4f:64:b4:b7:11:b8:52:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B2:88:00:94:8B:47:A6:7D:9D:3A:8C:CC:C8:8C:A0:58:1F:CF:23
            X509v3 Authority Key Identifier:
                keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:2d:3d:59:28:37:4b:d1:67:85:39:81:69:4a:dd:29:2e:
         9c:3f:a4:be:a4:ae:43:28:91:e7:72:01:bb:c1:33:df:e1:70:
         1b:54:95:69:e1:10:85:be:65:7a:c9:07:7d:12:f4:63:28:ab:
         80:85:66:42:03:19:66:6a:c3:8a:5c:da:b9:7e:a9:77:a4:3b:
         f1:be:db:4f:20:22:7a:6d:85:83:24:ea:af:d0:0b:b4:cf:e6:
         b7:fa:b0:f2:0f:b1:d6:2e:f5:d0:b1:f3:f4:41:d1:c6:75:73:
         b1:6a:7f:a9:3e:36:48:b3:2c:81:88:a1:f5:66:70:4a:36:42:
         98:ae:f1:28:78:b9:d4:ad:38:90:31:ff:ee:43:ab:89:85:b7:
         11:3b:21:e8:7b:bb:4f:f8:3c:ef:70:f0:71:4e:0f:08:d3:78:
         b1:c6:43:e5:ae:0f:ea:5b:c4:01:01:f9:46:3a:c5:c2:2c:31:
         98:ee:11:32:5c:3a:d6:75:0b:91:0f:16:14:3e:f4:4e:52:ee:
         7c:b5:2d:8e:d1:d4:0a:4d:df:dc:d8:3f:4e:1c:4c:3b:eb:cc:
         3a:67:dc:3a:a5:b3:cd:52:80:62:fa:2e:22:e8:a1:cf:23:44:
         84:4f:14:bc:2a:19:70:f3:8b:a8:4b:ea:b7:e7:22:f7:ba:ab:
         38:4d:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:04:11 2026 by rpki-client