Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          DSQLShdshCP+2gq5U0biWbpsczNXkE5ieGYZUWG9c88=
Subject key identifier:   93:C8:63:EC:EB:76:CD:11:AD:F4:8A:C8:9D:2A:63:15:CB:97:2B:12
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       01A08B68E12D28C6458A9A6A661BFCA5DA28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          1A48
Signing time:             Thu 10 Sep 2026 13:01:41 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:41 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:41 +0000
Files and hashes:         1: 4zqOo2SM12tzCSyJyEiRJDqyLeE.roa (hash: xhzylJcPJUd2ec6iCX/8IUuxbVDyJDMhXg/eaPmydQk=)
                          2: CpR7zdaWFgeP_a3JunXPR9g-kLM.roa (hash: +G+gW4DG9/VXzfDnCfnSWW4i5dWFOrWQai2m9hvQ4Jo=)
                          3: NcgEquPk4dqA6kZfv1d9WtImU1g.roa (hash: dJAF+c5UKrR5ihGU6h+RnFVtoMxdremp4iO/MCSr3CI=)
                          4: OghForkImI0Jo0zBq3XHOESQXuc.roa (hash: jMJmmzeuAO8dk90vNQKpGRRQiIdwuWD8TX9EqhW2Bbc=)
                          5: _W2M19fEeYWYsJYF-LdRGnP5HT4.roa (hash: Pmvi6OlA3CER/RWwL2L21FShj4gRY6R+MGZg5vLD+/o=)
                          6: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: IWEJ6YQkb+OQNrhr44DkPzSF7S3yPipN5V4QqEl8Rvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:e1:2d:28:c6:45:8a:9a:6a:66:1b:fc:a5:da:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Sep 10 13:01:41 2026 GMT
            Not After : Sep 11 13:01:41 2026 GMT
        Subject: CN=93c863eceb76cd11adf48ac89d2a6315cb972b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:b0:c2:ef:16:ba:99:3d:01:0b:5f:05:85:
                    19:e6:99:7f:81:c8:09:4a:03:3b:87:e4:95:92:26:
                    0c:83:70:aa:4e:b0:c2:ee:4c:f9:8d:b0:b9:b9:18:
                    8d:15:16:7a:e2:8e:82:23:5d:db:48:3b:91:9e:f5:
                    a6:88:a9:b4:eb:8c:5a:e4:8f:00:fb:dd:49:88:d0:
                    50:87:d8:bf:96:8d:85:a8:62:45:a8:60:54:4c:db:
                    b2:77:3e:11:52:a9:14:d1:fb:15:9d:ca:96:e9:de:
                    a0:11:4f:6d:fe:59:f1:15:71:fc:ee:23:7f:2d:b5:
                    98:4f:e4:2c:96:18:2b:18:2a:db:05:1c:dc:36:01:
                    a5:a1:89:15:5c:38:7d:be:4a:6e:79:10:a7:a5:99:
                    12:85:1c:ba:00:ee:3f:96:da:ac:2f:0a:ec:61:0b:
                    10:58:49:55:c0:21:bf:a4:51:6a:dd:82:0a:67:2f:
                    7d:09:1d:dd:cb:d8:49:35:52:a7:5a:e6:34:f8:58:
                    4d:f8:3d:bd:da:66:8f:48:b0:df:ce:8f:d1:20:dc:
                    cc:76:4c:1d:89:c8:0d:d8:49:b7:37:af:6d:9a:0e:
                    fa:1a:ae:b2:75:95:e5:35:6c:3f:68:4f:58:e4:4e:
                    f7:af:e9:5c:81:48:c7:be:91:1f:dc:14:99:37:0e:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C8:63:EC:EB:76:CD:11:AD:F4:8A:C8:9D:2A:63:15:CB:97:2B:12
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:14:dd:1e:59:b7:11:3c:32:c9:c9:e3:2b:49:09:e7:d0:d9:
         de:7d:83:8f:19:49:31:20:de:c8:20:b3:04:a3:e6:ec:9f:6f:
         9c:e6:e8:aa:79:67:9b:ff:bd:39:e9:e8:5e:c1:0c:04:20:a4:
         46:93:3a:ac:95:46:3c:d9:ee:da:1d:0e:80:06:56:3d:61:bf:
         08:c8:9f:29:ed:4b:f7:bf:31:93:35:2e:fe:7a:ed:d0:ea:60:
         e2:67:b0:91:27:f1:6c:53:90:8c:01:63:b9:e3:58:ec:aa:d7:
         a1:07:8a:91:09:ab:bf:9e:b4:ee:4f:b1:ef:3a:6d:25:d1:cb:
         bb:ab:f0:45:07:d7:f1:97:d1:2e:90:be:3e:33:d6:22:a5:2b:
         79:46:70:a6:9d:6f:c0:79:9d:99:18:96:b0:b8:0c:6f:aa:6b:
         c4:99:e1:7f:da:17:de:a5:61:10:8d:ff:82:94:f0:2e:a8:b7:
         3d:e4:7f:9a:6b:cc:29:f0:60:f4:57:5f:48:4b:ec:76:c3:ef:
         54:6e:d2:38:da:e0:49:1a:8f:85:0e:34:0d:aa:df:a8:ff:9a:
         c0:dc:8a:18:9e:c1:d6:8a:54:b4:27:f2:43:5b:bd:c2:85:cf:
         fe:55:6e:d0:c6:53:81:f9:c3:ef:0b:de:54:62:f0:e6:2e:96:
         84:17:3b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaOEtKMZFippqZhv8pdooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmM5YmMyZDJkYWNmZDZmMTMwZDg1YTg0ZmVkZWFiZjE3
OWE1NjcwHhcNMjYwOTEwMTMwMTQxWhcNMjYwOTExMTMwMTQxWjAzMTEwLwYDVQQD
Eyg5M2M4NjNlY2ViNzZjZDExYWRmNDhhYzg5ZDJhNjMxNWNiOTcyYjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07qwwu8Wupk9AQtfBYUZ5pl/gcgJ
SgM7h+SVkiYMg3CqTrDC7kz5jbC5uRiNFRZ64o6CI13bSDuRnvWmiKm064xa5I8A
+91JiNBQh9i/lo2FqGJFqGBUTNuydz4RUqkU0fsVncqW6d6gEU9t/lnxFXH87iN/
LbWYT+QslhgrGCrbBRzcNgGloYkVXDh9vkpueRCnpZkShRy6AO4/ltqsLwrsYQsQ
WElVwCG/pFFq3YIKZy99CR3dy9hJNVKnWuY0+FhN+D292maPSLDfzo/RINzMdkwd
icgN2Em3N69tmg76Gq6ydZXlNWw/aE9Y5E73r+lcgUjHvpEf3BSZNw7ukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPIY+zrds0RrfSKyJ0qYxXLlysSMB8GA1UdIwQY
MBaAFKgsm8LS2s/W8TDYWoT+3qvxeaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgt
NTVjMTQwYzlmNTRmLzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgtNTVjMTQwYzlmNTRm
LzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxTdHlm3
ETwyycnjK0kJ59DZ3n2DjxlJMSDeyCCzBKPm7J9vnOboqnlnm/+9OenoXsEMBCCk
RpM6rJVGPNnu2h0OgAZWPWG/CMifKe1L978xkzUu/nrt0Opg4mewkSfxbFOQjAFj
ueNY7KrXoQeKkQmrv5607k+x7zptJdHLu6vwRQfX8ZfRLpC+PjPWIqUreUZwpp1v
wHmdmRiWsLgMb6prxJnhf9oX3qVhEI3/gpTwLqi3PeR/mmvMKfBg9FdfSEvsdsPv
VG7SONrgSRqPhQ40DarfqP+awNyKGJ7B1opUtCfyQ1u9woXP/lVu0MZTgfnD7wve
VGLw5i6WhBc7fg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:13:14 2026 by rpki-client