Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          rGAi/+Sz8OiIdP7lM8cwJLj6R97+SWr96DSiZ03S35o=
Subject key identifier:   72:12:C9:7E:9B:58:9A:B6:BF:1D:2F:AC:78:C8:8F:89:DC:6B:61:E1
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       01A120C052BB86B9B3D7487A61F498483A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          1573
Signing time:             Fri 09 Oct 2026 13:00:37 +0000
Manifest this update:     Fri 09 Oct 2026 13:00:37 +0000
Manifest next update:     Sat 10 Oct 2026 13:00:37 +0000
Files and hashes:         1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: P7AeHEWdBEVMbjWG2NaIePbtWkqOqrJ3YVF9FfCu1Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:c0:52:bb:86:b9:b3:d7:48:7a:61:f4:98:48:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: Oct  9 13:00:37 2026 GMT
            Not After : Oct 10 13:00:37 2026 GMT
        Subject: CN=7212c97e9b589ab6bf1d2fac78c88f89dc6b61e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:f3:f1:56:23:24:5e:78:a4:fc:55:79:08:
                    ac:6f:bf:d9:93:13:f0:50:c5:2d:70:c2:1a:a8:cf:
                    e1:f6:3e:bd:92:2b:2e:f8:23:3c:c0:32:f6:6e:a2:
                    08:1a:ac:e2:50:e8:dc:23:4c:d4:77:f5:7f:4a:8d:
                    45:f5:88:b8:a7:d6:96:1d:b0:9a:15:c6:1c:92:87:
                    a8:7a:d7:5d:25:c8:a3:c1:88:02:e4:65:6d:7f:60:
                    b1:1f:6b:88:09:c3:6d:9f:31:74:9a:41:bd:16:de:
                    c8:65:10:4f:bd:1b:36:ae:46:9f:ff:86:fd:c9:99:
                    10:14:8c:22:2c:f4:72:60:3a:20:41:08:7f:f0:26:
                    ff:03:1c:6e:a8:c1:fa:f3:3c:b4:05:a3:3f:35:93:
                    59:7b:a2:e5:28:18:8b:f1:5b:bd:15:33:2a:3c:75:
                    33:d4:16:a3:b6:ce:bf:96:b3:25:0e:0c:59:b8:47:
                    73:72:57:03:c0:5c:bf:ea:cf:ba:0c:5a:52:b2:ec:
                    cb:a2:6c:da:56:a5:9a:66:60:ea:b5:2d:c7:4a:1d:
                    70:17:05:c6:c8:e8:b9:e7:45:ea:b3:1e:a0:16:9c:
                    36:a6:d2:97:1a:de:51:47:44:62:ab:e2:0c:aa:98:
                    2e:54:7f:4a:93:f5:47:e6:4d:1d:79:fd:25:4a:28:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:C9:7E:9B:58:9A:B6:BF:1D:2F:AC:78:C8:8F:89:DC:6B:61:E1
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:38:3d:e3:8c:9b:8d:2a:95:5e:fe:09:ce:0f:63:5d:ae:
         f9:3e:ef:07:59:78:fc:39:26:6c:09:c9:f7:6b:74:1b:c6:ad:
         38:b6:e8:34:ba:3f:85:79:ac:32:4b:fd:23:27:45:db:7e:54:
         87:08:b1:96:f7:4b:bb:f3:53:35:79:76:f4:98:70:b5:db:03:
         de:44:3a:46:4f:22:62:37:1a:97:8a:23:9d:56:0e:af:61:c4:
         6b:ae:e7:6a:48:08:57:bc:1a:b4:82:58:ca:b8:ae:70:e4:f6:
         ec:4f:35:68:00:71:74:9f:ce:7e:58:94:96:72:11:b5:3f:98:
         13:07:9e:90:25:2f:80:a1:b5:9f:27:2d:c0:84:54:3e:7d:0d:
         35:3e:b9:47:70:71:7f:cf:fb:95:54:30:ff:a2:dc:37:df:d5:
         11:96:2d:94:12:db:90:00:44:57:2d:8a:d2:3d:42:c5:c2:d9:
         71:2c:2c:cb:80:b2:98:dc:e6:c6:cc:38:83:99:89:f2:c9:61:
         ec:83:0f:d0:f4:53:6e:25:19:32:c8:c3:93:1a:ae:fb:83:0f:
         c9:f1:2d:96:14:70:85:a0:0f:35:0f:da:62:bb:b0:2d:47:fd:
         89:5f:f2:db:b8:4c:3f:d2:5a:40:58:8c:62:34:4b:57:8a:f5:
         57:7f:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:39:15 2026 by rpki-client