Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File:                     pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier:          czd+je6WokMdSYh0Tq/Oi/E5B0q4a8F90Fc7Qx21jxw=
Subject key identifier:   98:9F:92:93:06:0A:BF:59:24:5A:4F:04:C0:DE:AF:A7:78:80:38:DB
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer:       /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial:       01A123C1A3042DEA90AAE2B4EFD1852ABEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number:          04C1
Signing time:             Sat 10 Oct 2026 03:00:54 +0000
Manifest this update:     Sat 10 Oct 2026 03:00:54 +0000
Manifest next update:     Sun 11 Oct 2026 03:00:54 +0000
Files and hashes:         1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=)
                          2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: zXqzGG/Y6L1FtJ5cObJPZHCWMod3X7oQzynovgUcc+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:c1:a3:04:2d:ea:90:aa:e2:b4:ef:d1:85:2a:be:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
        Validity
            Not Before: Oct 10 03:00:54 2026 GMT
            Not After : Oct 11 03:00:54 2026 GMT
        Subject: CN=989f9293060abf59245a4f04c0deafa7788038db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ba:1d:2b:e7:a1:98:86:9b:9c:7e:2d:56:dc:
                    a2:99:e2:bb:90:f7:d7:7a:a6:8e:10:74:40:df:1e:
                    81:ab:c8:b4:46:75:67:4f:fa:47:bd:e6:2e:67:b5:
                    92:ab:cb:55:27:80:9b:18:02:fb:b9:09:85:13:ad:
                    26:b7:64:e4:0d:59:12:12:d3:98:60:f5:4d:66:a6:
                    17:6b:e5:16:86:5b:c7:63:0c:42:c3:91:3b:e2:c3:
                    34:aa:71:c6:e1:eb:43:c2:11:f3:bf:a6:69:95:f2:
                    9b:55:c7:c3:96:8b:d6:47:e0:0f:54:eb:36:9b:eb:
                    9a:49:40:65:f8:ba:15:f2:37:1a:9f:55:92:db:4e:
                    0d:41:b8:ea:ad:0c:6d:7d:f0:ed:cc:e2:c1:77:d8:
                    fb:2f:32:61:d3:72:11:d1:6f:6f:0c:7f:85:32:de:
                    62:1b:2f:de:21:a7:f9:e6:f1:54:8d:9e:15:7e:45:
                    42:52:e3:12:5a:35:42:b9:8e:c5:0f:de:6d:4a:4e:
                    e9:9c:0a:9e:6d:6b:09:61:85:9d:52:7a:05:69:f0:
                    2c:3e:54:43:a2:e3:f9:c5:1e:27:e5:89:3e:d3:71:
                    08:c2:c1:03:09:ca:47:b2:b0:98:cd:09:33:b2:4c:
                    d9:08:0d:92:f2:69:4e:ac:01:20:bd:03:a1:b7:46:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9F:92:93:06:0A:BF:59:24:5A:4F:04:C0:DE:AF:A7:78:80:38:DB
            X509v3 Authority Key Identifier:
                keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:ae:5c:5c:31:fa:d0:7a:0c:5b:9a:3f:74:05:28:e6:95:
         77:07:63:53:ba:b0:3b:09:e2:e6:61:fc:40:45:5b:67:f8:6f:
         9e:78:f6:94:da:4a:b4:1d:4a:94:23:d3:5e:06:c1:f5:66:6c:
         88:cb:94:f3:7f:df:21:fb:df:33:a3:a1:2c:fd:f6:e0:b1:ab:
         29:e6:74:d0:16:52:1f:f0:95:b8:de:5f:6f:6b:c3:d9:d6:8e:
         67:dd:c7:e4:5d:74:46:28:7f:48:74:88:07:9f:46:8f:05:1a:
         e5:a9:2e:2e:0c:c4:3e:29:7c:c7:f6:e6:54:f2:45:d0:29:aa:
         07:67:32:ab:62:89:ac:2a:ad:c7:64:64:17:87:79:f6:22:b9:
         e2:48:5e:a3:f6:75:eb:56:ff:9a:4b:52:54:39:4f:a7:51:62:
         2e:e3:af:da:01:35:e1:1c:bf:b1:5b:af:3c:b6:1b:f6:85:02:
         41:69:50:a7:a3:2b:1a:90:0d:4a:77:47:9e:c2:e9:ac:f2:08:
         0b:71:c9:cf:56:ab:eb:5e:fc:49:db:a8:05:5b:e8:3a:b9:cc:
         55:75:1a:cc:0e:e3:24:8f:cd:a3:de:af:e1:c9:5c:9e:65:02:
         89:a3:a2:69:d8:e7:70:a3:bb:eb:dc:fe:ff:9e:d0:dd:da:16:
         79:7f:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:16:38 2026 by rpki-client