Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          JP7VCo77XxCswhqsa1cMe0PqrAXQ+hqtlHcM5HPMELc=
Subject key identifier:   76:7B:29:87:25:47:32:23:BF:24:24:89:02:AD:CC:EB:41:CD:6C:AC
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       01A0B61B7BF97A50CF57BA6A46E3216F7714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          09E9
Signing time:             Fri 18 Sep 2026 20:00:49 +0000
Manifest this update:     Fri 18 Sep 2026 20:00:49 +0000
Manifest next update:     Sat 19 Sep 2026 20:00:49 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: g1DyBUh57l7Mc2Ey4tpu0lz7BQhdf4wJ33/hZM2lnCw=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa (hash: 2GFT3mSlK6Rmyp7D2HqdnfLGQtrA2O32IuamvEgn7Xs=)
                          7: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          8: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          9: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          10: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          11: IXAixtOPEsv7gt6BD6ensRZLEqw.roa (hash: 70EEAsdGTRKYckIJYi/F9RnlHwc1q+lU5rzi1Fys+zI=)
                          12: N9QQxg_R8io7DnlRj5HdQ23wfCk.roa (hash: T2NtuDZ7QgrXiMR/U8rf5cq5e47s3QzvGZo+eumc0Zc=)
                          13: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          14: PgCWANz5uY2I9lsHzhkPjqX39Kk.roa (hash: Wo051Tf/z54mBPHwIYi56RQup23Z7a/uY7Wew2Lpno0=)
                          15: SZtukkjRXiwa2MP-xz2orv9e2EQ.roa (hash: SI1p9E5oAtOUP1K3tQ3v2d/3208FkwLNQ2JaBJZUxeU=)
                          16: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          17: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          18: hchG7caJpD9W6F09IoEq2bxHBQQ.roa (hash: LWlZZ0rsDYxu7JbvD8MMa5SqnKcInLBcft31rsAtLnQ=)
                          19: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          20: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          21: r4xyNLWWmznvN8-2HQAUUtH8WD4.roa (hash: Yx0ueyL/bhm8eOCB3RdfcV15kiUt20hwbcXP4E9Y1js=)
                          22: vS7BVCvAnG0KF2NZJWhPCSw4Y9E.roa (hash: s2wURE5y1RzBDniFm1yyiSF2pZakk/teNC0g3kN9ZgA=)
                          23: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          24: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          25: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:1b:7b:f9:7a:50:cf:57:ba:6a:46:e3:21:6f:77:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Sep 18 20:00:49 2026 GMT
            Not After : Sep 19 20:00:49 2026 GMT
        Subject: CN=767b298725473223bf24248902adcceb41cd6cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:2e:c1:02:34:84:a9:c4:8d:77:52:95:43:
                    57:b5:e4:e8:9a:d1:80:6b:7b:a9:52:ae:b0:fc:af:
                    1e:49:22:7a:f9:c2:ba:59:e9:ec:f1:51:ce:c6:cd:
                    12:24:44:63:3b:a7:e1:7a:8b:c5:f5:56:30:70:6d:
                    60:af:47:17:77:41:e7:d3:f2:4b:8b:ab:71:94:9c:
                    85:11:09:fd:bb:bd:39:4d:e1:fd:d7:3c:c6:b6:2b:
                    11:3c:61:7e:a2:f7:0e:64:73:20:d8:57:24:cc:27:
                    74:88:6d:3b:d4:f0:e3:86:ec:81:e6:30:b5:9b:ba:
                    ce:9d:0e:c0:7a:29:00:ab:db:10:99:fd:13:ba:c2:
                    3c:6e:b2:fb:01:2d:81:04:22:4a:01:ab:7e:44:e8:
                    91:cd:8c:da:f8:27:e5:73:90:77:42:c0:2b:06:75:
                    cc:c4:2c:84:50:22:8e:c0:87:aa:8d:22:c6:27:1c:
                    d1:94:40:e0:7f:45:ae:b5:52:4c:2b:ea:bc:d1:c4:
                    54:46:62:40:2b:79:bf:83:06:b3:fa:43:2f:81:50:
                    8c:9d:ff:98:83:a7:6e:09:23:4b:64:aa:3d:90:92:
                    64:05:58:c6:fa:0e:b0:47:65:3a:86:60:e4:37:3c:
                    2d:e4:c4:de:05:a1:c4:9b:a0:40:93:e4:e6:af:6d:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:29:87:25:47:32:23:BF:24:24:89:02:AD:CC:EB:41:CD:6C:AC
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:05:10:cb:64:db:3d:3b:e5:c1:f9:ee:12:20:59:cc:ac:1a:
         b1:87:af:8f:9f:39:da:c1:58:74:e7:fd:e5:bd:1a:e8:69:d1:
         cd:77:ed:ba:d7:51:61:69:44:9d:10:ca:4d:9a:4f:9f:4c:4a:
         9f:ff:bf:7c:15:31:df:60:eb:02:b5:dc:cd:6c:67:47:bd:15:
         18:43:db:2e:fb:a2:24:a8:cb:0d:ad:ea:4f:2a:78:d7:0f:ca:
         28:b1:8f:e8:e2:01:1a:8a:02:f0:e3:55:5e:89:b6:3f:3f:06:
         49:57:53:af:a6:97:1d:62:7b:a8:6e:36:69:50:c5:cb:05:cb:
         6d:d0:1d:cd:50:31:68:ce:bf:82:a2:ae:2d:6a:b4:bd:60:04:
         8f:13:39:82:6e:86:de:d0:cc:96:49:5f:64:00:d8:cd:c6:dd:
         69:31:06:ab:2b:8b:46:aa:ed:50:51:84:40:81:b6:04:0e:99:
         84:cc:30:84:a1:ae:82:6f:c5:2c:f5:c3:d3:55:85:8d:0c:c1:
         22:e9:4f:08:3c:de:1e:28:79:62:02:dc:38:09:ca:ea:8e:10:
         30:50:0a:fc:b4:2a:a8:c8:b4:7d:66:f7:05:e7:de:0b:47:15:
         a3:c9:0c:a1:bd:65:eb:29:34:32:0e:25:f6:d7:ba:a0:92:df:
         13:31:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:54:43 2026 by rpki-client