Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File:                     qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier:          yCEF33Ta6kCyqJlU8GxcFIhLbe2ZCnP4QdDQhsaztjg=
Subject key identifier:   07:64:64:4A:B4:A7:88:98:0C:2F:83:96:6D:A9:A8:36:F5:28:5D:31
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer:       /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial:       01A08AFA87CE0E164DC83F8FC38F673D8520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number:          18A8
Signing time:             Thu 10 Sep 2026 11:01:09 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:09 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:09 +0000
Files and hashes:         1: D14MO7BIQvaHAdeDBscgN5omBJ4.roa (hash: r6jJ5ch2wUm0LzOkighkT3HkT455ug6IrSIakMtnP58=)
                          2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: EOMdVzn81E7nfWt2qlpHkYf/YBqLrwY7JnqlzP85/18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:87:ce:0e:16:4d:c8:3f:8f:c3:8f:67:3d:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
        Validity
            Not Before: Sep 10 11:01:09 2026 GMT
            Not After : Sep 11 11:01:09 2026 GMT
        Subject: CN=0764644ab4a788980c2f83966da9a836f5285d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:c3:e2:9b:75:34:a1:ca:49:98:bd:74:a1:
                    d9:b3:4d:47:9f:9a:57:89:4f:73:b3:00:9a:27:d8:
                    db:9b:9a:0e:47:6d:a0:68:6e:67:83:98:bb:a2:a2:
                    0a:91:30:e5:7e:1a:57:c6:f7:8d:8e:16:16:7c:7f:
                    16:f1:13:bc:e1:bd:43:70:1f:e7:f8:7c:00:11:71:
                    2e:cd:4c:e8:3b:ae:61:00:95:92:c5:22:a0:15:0d:
                    bf:e6:9a:dd:cb:9d:d2:eb:b2:b8:31:b6:81:bf:1e:
                    19:75:bd:ef:c2:e5:84:63:57:0b:ef:4a:c6:92:fe:
                    c8:f3:66:ae:7f:85:6b:3f:04:d9:dc:8e:08:6f:2b:
                    ed:52:2c:2d:4d:fe:e3:10:99:c4:32:1c:a9:ed:ae:
                    de:d9:7f:f6:a8:87:2d:32:66:54:ee:d7:eb:5d:c3:
                    d2:dc:8e:2f:28:aa:ec:61:a1:15:f6:3b:d1:2e:15:
                    9f:c9:b8:b0:0b:83:ab:33:ed:e2:09:da:61:cc:fd:
                    45:78:17:a0:af:43:61:1e:d8:36:51:16:3b:20:17:
                    cb:2d:8f:3d:ed:59:e2:e6:4a:bf:79:fc:3e:a5:79:
                    a8:49:03:d9:21:d6:87:f6:9d:16:12:7d:f8:73:de:
                    f4:37:44:b0:fa:6e:06:59:4f:a5:cd:ca:ed:49:39:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:64:64:4A:B4:A7:88:98:0C:2F:83:96:6D:A9:A8:36:F5:28:5D:31
            X509v3 Authority Key Identifier:
                keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:74:9c:3c:53:2f:b3:93:ce:35:10:67:72:0b:c7:78:56:f6:
         0a:69:dd:e7:85:ca:05:fb:62:10:54:f0:3d:12:e6:fc:a2:4d:
         1c:e8:b2:77:ac:73:a9:ff:87:a6:8c:52:29:be:a9:22:66:ed:
         6a:8c:15:2f:f2:0e:db:c6:f9:84:de:dd:e4:21:51:ff:23:9d:
         d6:25:60:4f:71:df:e5:18:2f:66:8d:0a:ea:78:c2:88:f7:77:
         cb:de:90:ff:07:92:2a:c6:a5:71:50:03:44:cd:e5:1d:2c:86:
         4d:0e:88:18:90:7e:40:62:d8:9c:ed:9a:cd:d6:da:b2:cb:06:
         e2:33:da:17:7f:36:1e:89:62:de:88:b5:e4:f9:cc:4b:2d:d5:
         f3:12:4d:9a:ee:50:48:44:eb:cc:76:e4:47:f6:bc:37:fb:8a:
         5e:12:02:30:34:d6:92:77:c6:65:4e:d5:a4:33:50:de:03:6a:
         94:f9:0e:83:58:15:42:87:9f:af:30:1c:78:31:f5:13:9c:03:
         b0:5a:e2:f5:aa:ac:11:f6:ea:0d:d5:bf:63:c9:9d:10:2f:b4:
         9f:cf:a8:0e:c3:7f:9e:17:fa:a1:5e:d4:aa:31:78:9c:cc:f3:
         79:4a:c3:a6:5f:f0:79:68:7b:f5:a0:ba:8b:67:7c:58:b5:e3:
         65:be:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:03 2026 by rpki-client