Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File:                     q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier:          9ZEDFYQgPr0D353aT3w6jK3BJH/hSmu0dTQmZHBM1XY=
Subject key identifier:   91:E1:49:E4:6F:FE:3E:BC:41:E0:C4:2B:9D:0F:4C:BF:D8:F9:55:61
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer:       /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial:       01A0F3B12C85876FD1407AAA5D4AF2F825F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number:          1AB8
Signing time:             Wed 30 Sep 2026 19:01:09 +0000
Manifest this update:     Wed 30 Sep 2026 19:01:09 +0000
Manifest next update:     Thu 01 Oct 2026 19:01:09 +0000
Files and hashes:         1: 9AQTjaHWKJCXsC30oHllY8BTYu0.roa (hash: 7fmthrhoa3IJWK083wDCI4y5oXM7TE8HLdralxn1zCQ=)
                          2: D8zt2B-zZXXGmbmFyYrVgX5VlhE.roa (hash: 7mktpizMJp0UVGb90YuRIUsj5vrCk7DRcIeq+0Shwlw=)
                          3: FR0TMzudRUII0Fa6Jf04w_3WI20.roa (hash: AJPhPEVbqaILZMRzPtnEJF9G4HZjyUJiNfN1jrcINf4=)
                          4: buqYzFTyi7wPpzd9BAt1N0qAHXU.roa (hash: 7fssqNhBi5yImjk1Vr2WL9ol/xv6RFd9KhgAwqTB6Mg=)
                          5: cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa (hash: iFLFl7A8YTDlZs6b2ZtDXNK2nv2uM/FdHMVOEy9wgkc=)
                          6: ffozWOJhdYTlZsYd3LUTrpAH84g.roa (hash: LqRzq5DyTPzo0AG3Z9lInY0bhS/P0365y/30CPyVkNM=)
                          7: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: qpikB1NKJZyaSXz+hrAmCVwa/wvy2LcvK9W9SMPe2JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f3:b1:2c:85:87:6f:d1:40:7a:aa:5d:4a:f2:f8:25:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
        Validity
            Not Before: Sep 30 19:01:09 2026 GMT
            Not After : Oct  1 19:01:09 2026 GMT
        Subject: CN=91e149e46ffe3ebc41e0c42b9d0f4cbfd8f95561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:a7:1b:ab:ae:eb:0d:7c:a6:c6:4d:0f:e9:
                    b3:98:01:78:ec:f9:18:a6:42:12:5a:d6:35:63:cb:
                    5f:c5:b1:37:ef:b0:0c:fd:58:e6:58:05:9e:a1:85:
                    7b:d5:e8:2c:c4:ec:e9:12:ad:94:e1:e8:d2:18:26:
                    aa:fa:31:f1:5a:78:bd:21:a1:87:72:2b:a9:de:c6:
                    b5:98:a5:4d:1d:42:5e:86:cc:97:e0:e3:ee:34:c5:
                    e8:f3:4e:9c:a7:ee:69:b8:fe:1d:a7:9b:92:ad:31:
                    78:ac:2d:a7:72:62:60:c0:d4:6f:4d:9e:9f:0e:85:
                    b0:36:cd:31:34:1b:74:b6:d9:28:0e:7a:ea:bc:06:
                    24:45:c5:16:93:71:7b:0e:d2:73:42:27:fa:fc:98:
                    26:82:58:d1:33:0c:e4:f0:be:b8:ba:96:98:d7:27:
                    6d:08:77:d3:8f:02:4b:00:20:55:d5:d3:2f:95:b0:
                    27:ab:af:3e:3c:56:f4:69:77:f7:63:50:c1:2e:98:
                    b1:eb:58:ad:77:ca:14:b6:ab:9a:cf:09:a8:67:52:
                    5b:98:e6:dd:56:34:18:87:f4:58:17:1b:cb:b8:c1:
                    f8:53:62:22:12:07:b7:69:8c:db:52:2a:6a:e7:2f:
                    17:4f:f1:9f:a1:da:df:00:75:7d:8a:53:d6:78:5b:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E1:49:E4:6F:FE:3E:BC:41:E0:C4:2B:9D:0F:4C:BF:D8:F9:55:61
            X509v3 Authority Key Identifier:
                keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:2a:6d:3b:c0:d0:76:c7:a3:e8:18:ed:b8:4b:b4:78:45:
         41:6a:63:82:92:2a:be:ab:82:de:c2:52:b3:22:63:d5:fc:d2:
         e8:48:8d:ce:5d:d2:a7:39:9a:99:ba:10:e2:4b:50:0f:6e:53:
         32:ac:3f:b2:39:83:5e:d3:ec:9b:e7:5e:93:f3:85:d7:ee:aa:
         b6:53:a1:b6:8c:92:c4:5c:b2:a7:e9:a6:8a:6f:7f:cc:2b:68:
         28:08:76:f9:75:e3:c9:5f:9a:ea:45:7d:03:6e:7e:30:19:16:
         35:0d:a2:56:26:9e:12:60:6b:1e:04:06:2e:09:ce:41:67:f9:
         28:ec:be:ed:4f:ac:33:0c:dc:53:91:01:0b:d9:4d:cc:0a:47:
         ed:7f:d1:a8:6b:45:61:b5:2a:26:53:c3:58:f3:da:7c:45:35:
         dc:5a:84:48:33:be:07:d3:40:10:77:37:f7:ab:fe:f0:c7:e3:
         00:74:d7:e5:7d:28:42:e8:20:75:36:be:a2:67:74:84:7d:a7:
         64:9c:b4:b1:34:fa:02:f4:85:4a:c5:e9:cb:d7:f3:29:10:df:
         cd:6e:ca:b2:23:b6:49:73:ee:20:8d:e8:bb:1b:d9:e8:13:16:
         51:af:2e:be:ff:3c:f2:1a:45:8e:da:19:4b:4c:e1:9b:99:4e:
         96:d6:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 09:59:16 2026 by rpki-client