Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File:                     qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier:          BO7lG7FlYwYWsoPeXu3O3mLgsy5UHIwXPMI0hljLzdk=
Subject key identifier:   A1:10:62:98:03:13:22:3C:6B:16:65:3D:08:49:13:B5:20:B7:BE:2F
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer:       /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial:       01A08AC37EE7D9C54D10590227019F566578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number:          113D
Signing time:             Thu 10 Sep 2026 10:01:02 +0000
Manifest this update:     Thu 10 Sep 2026 10:01:02 +0000
Manifest next update:     Fri 11 Sep 2026 10:01:02 +0000
Files and hashes:         1: pJy_J4dH-nPKCXyAdCdJtDsMxrU.roa (hash: uOd0xGswmdF48/9jkoke/SyXvT+SzaX6MAmlYWoqoHE=)
                          2: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: ZeU0P495yss6WWt8i3a5YlhyDy3Dk+ZRefTQaBtS0mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:7e:e7:d9:c5:4d:10:59:02:27:01:9f:56:65:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
        Validity
            Not Before: Sep 10 10:01:02 2026 GMT
            Not After : Sep 11 10:01:02 2026 GMT
        Subject: CN=a11062980313223c6b16653d084913b520b7be2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:bc:7f:c5:46:a2:1a:f7:ee:4a:25:fa:03:
                    41:a9:26:44:0c:36:c6:86:84:c2:be:a4:2d:18:fc:
                    82:cf:6c:5c:eb:28:fb:1e:99:f8:06:ca:d3:61:04:
                    37:25:51:26:e8:17:81:b0:7c:27:ec:04:2a:82:4e:
                    ce:1e:1c:bd:ae:55:c4:d2:f7:1d:18:26:6d:82:5a:
                    87:64:00:9b:1e:b3:ab:cf:93:81:72:8d:1c:a4:ad:
                    2c:65:2b:a6:84:8f:95:7e:8e:94:12:1d:e2:91:26:
                    a8:e6:1c:02:6e:51:3a:26:46:a2:2f:9b:a0:de:f5:
                    ec:e9:98:2f:f4:ef:e8:f6:f9:38:ef:6f:41:91:cb:
                    45:f7:42:a2:ca:70:06:48:c2:12:6d:93:92:52:0d:
                    2c:24:97:7d:29:e0:84:84:86:b3:3c:5a:ac:a9:80:
                    1e:0b:6f:2f:31:67:22:50:12:e9:2e:9c:e2:d1:2c:
                    f1:27:a1:db:7f:a7:81:9c:21:4a:4d:f3:47:9a:ab:
                    f8:4e:c1:30:13:b9:3f:43:85:17:0f:86:dd:dc:fa:
                    28:0b:58:0c:e2:c6:31:3e:91:8f:8d:99:f2:72:b1:
                    69:bc:4e:6f:af:42:d6:23:2b:07:6e:20:20:05:e1:
                    8a:48:8e:47:61:53:79:c6:14:73:c6:32:e6:83:dd:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:10:62:98:03:13:22:3C:6B:16:65:3D:08:49:13:B5:20:B7:BE:2F
            X509v3 Authority Key Identifier:
                keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:b6:b8:95:a1:3f:3e:96:3e:4f:5f:7a:d2:a5:79:ec:bd:
         f3:90:15:ee:c4:19:9d:80:d0:b5:5f:fe:40:80:9e:96:2e:83:
         06:08:bc:d1:88:22:0c:e2:f5:46:69:23:c8:9d:5c:32:85:76:
         3f:83:de:11:aa:d6:99:3a:78:76:bd:5a:17:39:bc:96:c9:14:
         96:76:cf:94:82:8b:d9:ac:e3:91:e2:de:0b:78:da:c8:b1:b4:
         e8:6c:bd:48:7a:74:2a:bb:94:25:27:e9:e6:17:0c:9a:01:b4:
         cc:b1:04:bb:fd:f7:01:8e:d7:81:a3:30:6e:8a:42:da:48:b9:
         ec:64:2f:ed:cf:8a:7e:e8:f2:55:30:29:7d:06:f8:b3:24:51:
         a3:62:7c:99:2e:ec:e3:d8:e3:17:e6:4b:a4:40:48:64:fb:ac:
         82:8b:08:8c:c6:23:a1:9a:6b:b3:f6:22:c9:38:f4:2b:b6:39:
         58:2a:3b:39:bf:cd:c4:29:65:c0:9d:ab:01:92:a9:51:af:4c:
         33:bf:38:f0:1c:0f:d3:a4:ed:53:42:14:a3:ef:96:0f:30:f6:
         3f:88:5a:00:6f:32:3f:1b:fd:5f:f7:02:01:69:48:b5:17:76:
         72:c6:95:5e:ed:9a:9f:de:c8:3a:9d:0f:fe:47:67:37:e9:1d:
         3e:22:72:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw37n2cVNEFkCJwGfVmV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjFlMDViZDdiM2Y4Y2E5YjRhYmQwZjg5OTkxMjE3OWI1
NjZkZjcwHhcNMjYwOTEwMTAwMTAyWhcNMjYwOTExMTAwMTAyWjAzMTEwLwYDVQQD
EyhhMTEwNjI5ODAzMTMyMjNjNmIxNjY1M2QwODQ5MTNiNTIwYjdiZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE68f8VGohr37kol+gNBqSZEDDbG
hoTCvqQtGPyCz2xc6yj7Hpn4BsrTYQQ3JVEm6BeBsHwn7AQqgk7OHhy9rlXE0vcd
GCZtglqHZACbHrOrz5OBco0cpK0sZSumhI+Vfo6UEh3ikSao5hwCblE6JkaiL5ug
3vXs6Zgv9O/o9vk4729BkctF90KiynAGSMISbZOSUg0sJJd9KeCEhIazPFqsqYAe
C28vMWciUBLpLpzi0SzxJ6Hbf6eBnCFKTfNHmqv4TsEwE7k/Q4UXD4bd3PooC1gM
4sYxPpGPjZnycrFpvE5vr0LWIysHbiAgBeGKSI5HYVN5xhRzxjLmg91htwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEQYpgDEyI8axZlPQhJE7Ugt74vMB8GA1UdIwQY
MBaAFKjx4FvXs/jKm0q9D4mZEhebVm33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80NDY5YjUtM2JmNy00MDk1LTg5YzIt
YmU5ZGQxNWQ4MjkxLzEvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80NDY5YjUtM2JmNy00MDk1LTg5YzItYmU5ZGQxNWQ4Mjkx
LzEvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGy2uJWh
Pz6WPk9fetKleey985AV7sQZnYDQtV/+QICeli6DBgi80YgiDOL1RmkjyJ1cMoV2
P4PeEarWmTp4dr1aFzm8lskUlnbPlIKL2azjkeLeC3jayLG06Gy9SHp0KruUJSfp
5hcMmgG0zLEEu/33AY7XgaMwbopC2ki57GQv7c+KfujyVTApfQb4syRRo2J8mS7s
49jjF+ZLpEBIZPusgosIjMYjoZprs/YiyTj0K7Y5WCo7Ob/NxCllwJ2rAZKpUa9M
M7848BwP06TtU0IUo++WDzD2P4haAG8yPxv9X/cCAWlItRd2csaVXu2an97IOp0P
/kdnN+kdPiJyUA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:24:26 2026 by rpki-client