Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File:                     qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier:          EruLOSDFon2s9yvBuRkvzfUAyDvLO9Y8uf4c5X4c0rQ=
Subject key identifier:   51:9B:10:46:4A:DE:84:62:0A:82:89:C8:AF:2C:9C:55:21:77:C9:C5
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer:       /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial:       01A13146BE06C291606820B118C58854EE82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number:          1A9C
Signing time:             Mon 12 Oct 2026 18:01:22 +0000
Manifest this update:     Mon 12 Oct 2026 18:01:22 +0000
Manifest next update:     Tue 13 Oct 2026 18:01:22 +0000
Files and hashes:         1: fG6maQIYPuiZbXuoPZY5KDKmziI.roa (hash: 86O5JcN57k2/HbjQtBdb8xSuus/b5Khba3p8Ebd34wc=)
                          2: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: sIXd6Wiz9o487FbcxfmAllIbJDUYjs6AgRnDs9NGkB8=)
                          3: upo56Z93ZuxfUzsBXT8Mop0ljfI.roa (hash: YhDFF8pQFZdnO5Ubp8t393cVmTF+JmT/Dc4jBewkDSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:46:be:06:c2:91:60:68:20:b1:18:c5:88:54:ee:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
        Validity
            Not Before: Oct 12 18:01:22 2026 GMT
            Not After : Oct 13 18:01:22 2026 GMT
        Subject: CN=519b10464ade84620a8289c8af2c9c552177c9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:1e:22:fa:52:6e:6a:21:55:03:01:9b:d9:
                    3e:47:92:a2:d4:74:11:92:42:50:43:60:56:27:d4:
                    03:73:6f:ab:80:8c:1e:63:32:27:8a:e9:ef:41:19:
                    b8:46:93:d5:bb:78:1d:dd:fc:d1:de:a7:57:4e:b9:
                    db:00:c2:73:b8:09:fc:f3:46:9a:d4:32:66:b2:e7:
                    b3:a3:54:94:c7:f8:34:44:8a:83:ac:99:84:17:ef:
                    eb:bf:71:8a:e9:f3:be:82:b4:e0:d0:60:e2:98:9a:
                    83:22:14:07:41:24:ad:7a:9f:56:85:dc:c7:51:a7:
                    5f:0a:02:76:bf:49:f5:cc:2a:e2:f1:4a:ef:be:e3:
                    06:4f:f3:ca:38:28:77:3f:32:f4:e9:76:4d:bf:58:
                    09:37:86:d5:65:75:e9:c2:93:93:a9:d5:a1:2f:f7:
                    01:f3:c8:56:ea:ad:e1:e3:d8:ad:ea:43:6e:89:02:
                    f8:da:61:56:15:fc:cd:17:ab:de:09:a5:d3:0e:26:
                    8e:7a:69:cb:a2:3f:89:a9:5a:87:f1:3b:25:34:02:
                    c2:1a:ab:c6:ef:d1:ad:c3:1d:fa:a1:a7:4e:c0:89:
                    db:8b:bf:76:c3:95:20:8e:1a:7f:b4:6a:f8:c6:49:
                    25:da:2f:63:d6:c2:be:de:97:27:a5:48:7a:fb:cc:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9B:10:46:4A:DE:84:62:0A:82:89:C8:AF:2C:9C:55:21:77:C9:C5
            X509v3 Authority Key Identifier:
                keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c4:74:4a:ec:a8:3e:60:f9:0f:79:3b:ed:5d:7c:a8:d6:5c:
         a3:b5:9f:22:09:d9:1f:58:67:b7:7c:a6:49:f9:4e:e1:25:e9:
         f4:cf:c9:d9:0a:e8:0b:42:50:1f:3f:9e:47:23:86:24:5d:06:
         87:bc:1b:01:2f:26:1d:46:07:01:53:2b:e8:27:d6:93:20:aa:
         22:7a:21:60:02:f2:38:d1:2a:85:c9:e0:59:b9:d1:e5:56:b0:
         32:0f:db:42:83:4f:f9:6a:52:a7:15:f9:fd:f1:c1:19:6b:4b:
         b0:b9:66:79:47:25:f0:c4:89:04:80:68:39:6a:92:a4:ac:7e:
         01:84:13:88:5c:b3:ba:64:b8:18:6f:96:2a:00:e9:50:22:2f:
         85:f3:87:4c:28:ab:1a:2e:9d:d4:78:d9:27:8e:9c:97:4b:02:
         29:47:b2:3e:cb:ca:37:16:75:e5:5b:79:87:1b:cd:60:b0:c0:
         2c:dd:04:98:93:b9:ff:f1:91:a7:eb:2a:20:22:99:aa:cf:04:
         9e:4d:44:d9:d8:9a:68:db:a9:f7:9f:a9:ba:df:85:89:65:fb:
         cf:ef:69:7b:a3:19:cf:82:ce:d6:cb:82:6f:83:41:71:d9:31:
         4c:76:27:73:c6:d1:d6:4d:c7:a7:a0:80:9a:3a:36:c3:38:d9:
         9c:66:18:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:01:56 2026 by rpki-client