Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File:                     sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier:          WONviAkVSrsW1aqFNdG5dDnFVyzd2Xj2KLMs/4+h0Y4=
Subject key identifier:   5C:91:18:B8:D2:35:57:CA:78:60:D9:59:06:75:EC:95:2E:46:BD:49
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer:       /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial:       01A08A5548A783493AFA3CD3199F4E259AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 08:00:40 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:40 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:40 +0000
Files and hashes:         1: VFGEJNzLzqbtn_xoW_8uAp03Cps.roa (hash: vNmZGriew68XIyyo5twCVk3Ozs6RyZWncGa/e7gLj+Q=)
                          2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: c47HmnqvczfCaAp1MyHyLX5Us6o5SKpYidSfKUxn16E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:48:a7:83:49:3a:fa:3c:d3:19:9f:4e:25:9a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
        Validity
            Not Before: Sep 10 08:00:40 2026 GMT
            Not After : Sep 11 08:00:40 2026 GMT
        Subject: CN=5c9118b8d23557ca7860d9590675ec952e46bd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:23:86:aa:a3:06:80:dd:79:48:14:12:23:
                    0c:18:0e:3f:c1:09:8c:e2:89:00:f2:2a:cc:d0:f9:
                    0f:4f:58:02:aa:59:d2:8b:e9:a8:d8:b2:c5:39:1d:
                    f3:7c:d4:8c:0b:f5:38:98:74:98:d2:40:b0:18:81:
                    18:50:4f:95:e3:1b:3a:ae:45:78:d6:ba:3c:87:4c:
                    0d:e8:a6:91:23:bd:2a:20:1b:2d:32:8e:ab:20:b1:
                    45:56:3b:3c:05:24:68:71:1d:95:b6:c3:7a:ef:16:
                    c4:33:92:e6:c7:2a:a4:01:76:1d:fc:91:20:04:7f:
                    66:b8:79:46:16:fc:0d:ff:73:d0:a2:bc:33:72:95:
                    b0:47:cb:09:65:de:10:28:bf:07:be:51:87:ce:e0:
                    cf:ce:d6:3c:03:be:e8:fc:c3:e2:ac:9b:b1:a3:05:
                    62:89:55:78:88:e2:78:86:83:75:2d:f6:2b:b0:34:
                    6b:68:c4:50:e2:f0:25:21:c2:be:e9:ed:96:6f:f7:
                    53:81:8e:85:80:8f:3c:55:a9:03:f6:ea:a1:db:bb:
                    12:22:d8:26:88:bd:3f:cf:c0:11:1a:32:bc:d6:18:
                    15:10:0c:f8:2e:88:56:ab:68:62:61:fe:62:71:ee:
                    d6:43:57:9c:5c:dd:32:e0:95:0d:9c:24:97:9b:fa:
                    cb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:91:18:B8:D2:35:57:CA:78:60:D9:59:06:75:EC:95:2E:46:BD:49
            X509v3 Authority Key Identifier:
                keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:13:b5:c8:70:9e:1f:b3:09:27:31:f2:b6:28:94:ac:a1:b6:
         62:41:7b:cc:79:0f:c6:e9:e0:b8:84:ef:0f:97:92:5a:09:18:
         89:1b:e9:c0:93:b1:29:02:e0:50:21:65:d6:32:e2:7f:c9:c5:
         fc:ab:42:e8:86:86:50:07:13:5b:6c:2d:b1:ef:4c:b4:f7:0c:
         15:be:7f:fe:36:9d:05:71:77:d4:ec:7b:1e:39:06:95:8e:78:
         69:7c:25:6d:24:c2:a0:4d:35:c4:7b:2a:5f:99:80:9b:cb:cf:
         c5:2b:69:77:ec:74:60:e4:36:8f:08:8a:ff:08:10:cb:90:f5:
         0a:cf:db:12:71:78:f8:50:c4:c0:42:6a:45:36:85:a3:3e:93:
         d2:e3:e7:63:dc:20:92:53:cc:90:5b:ae:67:21:03:dd:3e:b8:
         6f:61:a4:b3:99:bb:de:fd:d4:a3:b6:ab:96:9a:21:c6:60:9c:
         42:b0:42:7b:b5:66:89:65:ec:65:a6:4b:53:ba:22:53:d2:05:
         3e:da:2b:c7:cf:44:9f:44:a0:66:04:9b:64:b1:ed:a1:ba:46:
         e2:85:b6:a0:a1:b1:32:6f:93:bd:53:fa:76:a2:93:80:aa:39:
         a0:1c:67:cf:f0:8a:03:2d:f8:2c:3c:db:de:82:34:26:f5:43:
         09:42:c3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:24:59 2026 by rpki-client