Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File:                     qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier:          91+EfSYMzozD4mjEgIXly5ViwnL6z6Bt6u24H+tCmno=
Subject key identifier:   F3:35:29:8D:B8:FA:AD:D6:A7:AB:6F:14:E0:9D:86:74:CA:2E:97:5C
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer:       /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial:       01A06FF145BCC75C9CF64B77F2B8CE4D0FE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number:          19CC
Signing time:             Sat 05 Sep 2026 05:01:18 +0000
Manifest this update:     Sat 05 Sep 2026 05:01:18 +0000
Manifest next update:     Sun 06 Sep 2026 05:01:18 +0000
Files and hashes:         1: PI8Cnztdcg0Orhj3hNj0SOev2FA.roa (hash: F0vD9Ue05tdjzmjFbmnRff+jKy6sKGlrmWL0EX8ad5o=)
                          2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: 9JRvJcYR7YAUcnayqbDf+N1lfYEYq2clqbJPTngu4NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:f1:45:bc:c7:5c:9c:f6:4b:77:f2:b8:ce:4d:0f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
        Validity
            Not Before: Sep  5 05:01:18 2026 GMT
            Not After : Sep  6 05:01:18 2026 GMT
        Subject: CN=f335298db8faadd6a7ab6f14e09d8674ca2e975c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:7f:b6:33:35:a3:98:ac:f9:bf:30:a6:af:
                    ff:a5:15:56:e8:82:8c:a0:4a:b7:9b:48:0e:4c:e9:
                    42:96:06:03:e8:ad:f3:b8:e4:09:f3:23:2c:f6:6c:
                    de:a5:af:c5:91:be:3f:8c:ed:39:29:61:c6:bb:cd:
                    70:34:38:97:7d:d2:21:1e:b9:eb:19:d7:b4:2a:3f:
                    34:69:ac:6c:85:ed:31:bf:41:74:6f:55:7d:72:ba:
                    57:66:6c:ca:f1:8a:f8:75:5a:af:34:01:3d:af:f0:
                    b8:09:c9:28:73:9f:35:67:da:eb:72:ec:63:f8:cf:
                    87:2d:46:d8:b2:8e:b6:ec:61:1c:e8:33:fa:a5:37:
                    f6:f9:b7:08:91:40:9e:58:1e:7d:bc:9a:a4:43:e1:
                    eb:3e:f4:f7:f8:d2:62:94:51:ad:2c:5e:9a:f4:33:
                    ab:27:1e:e1:fc:ca:49:6a:28:fe:45:67:5e:2a:e8:
                    56:39:a6:06:c5:39:6e:0c:b6:7a:db:92:c0:78:f3:
                    91:ed:b5:16:2a:f6:10:e6:e2:f4:fe:41:93:91:e2:
                    e5:a3:92:3e:cb:76:d1:00:87:01:85:03:cc:42:82:
                    f5:c9:a9:ff:1f:30:0a:63:da:5b:4c:d3:a3:c1:2a:
                    77:63:95:0f:ab:44:09:05:9b:f4:f9:99:29:07:eb:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:35:29:8D:B8:FA:AD:D6:A7:AB:6F:14:E0:9D:86:74:CA:2E:97:5C
            X509v3 Authority Key Identifier:
                keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:55:fa:89:32:69:53:b5:88:f3:0c:a5:cd:78:4a:db:3f:21:
         48:d5:1e:f5:5f:1e:df:f2:62:53:1c:8a:3c:a1:58:b9:0a:3e:
         3f:95:0e:d1:32:68:6f:f2:86:94:b3:e3:34:9b:90:80:9d:b0:
         1e:90:7b:4f:de:fc:21:88:19:25:26:a3:31:7a:86:52:5b:79:
         92:bf:85:43:35:f3:aa:41:8e:25:da:9b:69:79:da:a8:b2:f5:
         8e:e2:f6:62:f6:56:6e:8b:aa:ca:2c:0a:61:ee:3e:96:0f:f2:
         e1:53:1f:74:3d:33:38:da:f0:d6:94:fc:01:80:55:b8:80:5f:
         ba:9c:ed:83:44:b1:0c:df:0b:07:11:ae:2d:25:ad:37:b1:88:
         5b:92:84:57:84:68:55:cd:0b:9d:b7:7c:a2:c7:ff:55:c9:51:
         5e:62:93:8f:28:fb:48:a2:47:b8:8e:53:94:e3:0c:8a:a9:f7:
         ed:29:f5:0a:b6:ee:58:62:a2:e7:ef:75:30:0e:b2:00:47:d2:
         88:a9:33:db:b9:a0:d2:3d:84:f6:91:44:81:d7:06:44:24:3f:
         6a:d7:22:0c:69:b2:17:df:65:fd:ed:fb:9d:e7:f8:87:d6:4e:
         bb:a4:30:fd:40:85:fe:59:52:24:b7:bc:3b:e7:67:f2:15:2d:
         16:58:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:33:51 2026 by rpki-client