Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft
File:                     qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft (raw, json)
Hash identifier:          deDHxHeUd8veWlEJsZ/ZbcdVbxFtbuRXyjtN2e5/B8M=
Subject key identifier:   FB:03:27:AD:8E:BE:17:DE:95:40:A6:C3:C7:3C:22:B7:E0:05:D2:51
Authority key identifier: A9:D2:EC:C9:A6:17:81:AE:87:F4:F6:F8:2C:11:9B:B1:4B:82:23:E6
Certificate issuer:       /CN=a9d2ecc9a61781ae87f4f6f82c119bb14b8223e6
Certificate serial:       01A17BF21D5609A4FB7AF58E86055F7D2CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft
Manifest number:          013E
Signing time:             Tue 27 Oct 2026 06:00:27 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:27 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:27 +0000
Files and hashes:         1: qCwleTge9FVIeDSIaTyl_itGPJc.roa (hash: GgyYwHCuTtAxDd7Rw8YrnVjz+mlCUAVIVNVqA/oXPUc=)
                          2: qdLsyaYXga6H9Pb4LBGbsUuCI-Y.crl (hash: bQ+X+W+FKSHt4u+woJIQ35xOBJyPt4pfpe7wRMJ0SnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:1d:56:09:a4:fb:7a:f5:8e:86:05:5f:7d:2c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d2ecc9a61781ae87f4f6f82c119bb14b8223e6
        Validity
            Not Before: Oct 27 06:00:27 2026 GMT
            Not After : Oct 28 06:00:27 2026 GMT
        Subject: CN=fb0327ad8ebe17de9540a6c3c73c22b7e005d251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:00:02:63:89:cf:b6:97:1d:3d:3a:f8:31:
                    4a:cf:36:13:a4:38:e6:78:8e:51:f1:e7:8b:da:64:
                    05:79:2e:8c:1a:4a:1b:a1:2c:d6:9e:4d:02:91:2b:
                    25:74:81:3a:9b:a8:41:dd:91:03:64:e0:72:5b:8f:
                    77:aa:0b:08:55:0a:1f:1e:2b:75:66:0d:63:11:b1:
                    a0:55:e5:39:11:c6:0e:31:86:62:3f:98:c0:b1:a2:
                    c7:6f:5f:d0:28:89:e3:7c:9c:a4:19:ec:c9:20:58:
                    b8:30:65:9a:eb:57:61:e4:f0:fd:f0:65:55:bd:4b:
                    69:f3:e5:b1:44:89:8b:7c:a9:f0:12:f0:09:ce:e5:
                    cc:3b:57:34:05:ae:12:75:15:e5:81:8b:ca:f1:ba:
                    30:68:c2:f1:ae:53:65:ff:15:8c:bc:d3:6c:1d:41:
                    e7:87:02:20:e0:35:a6:0c:0c:fe:eb:78:41:ba:87:
                    9a:5f:ad:ea:d1:c5:fb:2d:35:d4:48:92:89:df:a3:
                    26:94:b5:b7:a4:41:29:a7:4a:b5:c7:ba:56:8a:19:
                    c7:81:61:55:ea:8c:f7:db:5c:cc:1d:9d:2a:06:50:
                    4d:41:b4:4a:c7:5a:89:cf:e0:42:a3:f1:5f:40:c6:
                    be:a7:11:c9:8f:2c:a2:12:22:6e:a5:81:c5:7a:03:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:03:27:AD:8E:BE:17:DE:95:40:A6:C3:C7:3C:22:B7:E0:05:D2:51
            X509v3 Authority Key Identifier:
                keyid:A9:D2:EC:C9:A6:17:81:AE:87:F4:F6:F8:2C:11:9B:B1:4B:82:23:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:97:0e:d5:fb:d5:50:89:86:95:87:d6:fc:ad:df:19:1f:17:
         af:46:4d:ae:30:9d:f1:8e:83:f2:80:68:3c:14:a9:e2:ed:72:
         38:e3:47:c9:c8:a1:d9:5a:6c:29:bf:70:9d:55:7f:eb:b7:57:
         ec:fb:87:f2:cb:d4:d0:12:bf:8e:1d:43:9b:fe:c2:37:a5:e2:
         54:dc:96:12:07:a1:cd:00:c6:ab:77:ba:fc:a0:49:71:f7:fb:
         11:99:b5:bf:d8:4b:1b:f8:af:65:5f:0d:46:22:8f:59:0d:a0:
         f5:47:34:ba:23:79:3e:b6:cf:a4:e9:49:52:88:57:03:90:e5:
         57:dc:42:d4:d5:c9:35:f2:0f:53:ec:9d:7e:a7:30:67:fc:46:
         02:f2:e4:9d:0e:ee:73:e0:0b:77:ee:53:d1:30:7a:d5:21:1d:
         48:fc:0e:e8:1d:8c:e5:bf:92:09:9c:9d:42:ce:0f:9e:3a:24:
         76:be:77:fb:53:c4:22:3b:7d:77:f6:dd:84:c4:20:9c:78:ee:
         81:5f:9f:2c:de:46:0b:da:7e:5e:2e:70:ec:bf:02:5a:1a:df:
         c5:c9:23:dd:c4:a9:7e:81:38:ea:0f:3d:eb:3d:33:d4:7e:cc:
         0e:14:19:60:a7:e2:d5:e4:a6:6d:ae:22:d4:04:ac:7c:8b:06:
         8a:9d:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:12 2026 by rpki-client