Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          1C0uUe549GlmvU8C23yTcaKbzWiVCRn1+qDlWhAB43k=
Subject key identifier:   43:23:14:C0:D1:EA:D7:7B:8F:A5:CC:8B:A5:FE:4F:9D:C2:A7:11:66
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       019FFD24CC253D5B71555EAD1C324F951B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          14DC
Signing time:             Thu 13 Aug 2026 22:01:14 +0000
Manifest this update:     Thu 13 Aug 2026 22:01:14 +0000
Manifest next update:     Fri 14 Aug 2026 22:01:14 +0000
Files and hashes:         1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: pod6gTO6VGT5d8DZX0NYJyucGXHcq8kYpJFLXvu3Owg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:24:cc:25:3d:5b:71:55:5e:ad:1c:32:4f:95:1b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: Aug 13 22:01:14 2026 GMT
            Not After : Aug 14 22:01:14 2026 GMT
        Subject: CN=432314c0d1ead77b8fa5cc8ba5fe4f9dc2a71166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:e5:b3:01:19:01:06:4d:b8:90:ce:f2:eb:
                    d4:61:7a:9a:ad:e5:8a:7c:39:49:9c:63:c3:20:98:
                    78:41:94:65:94:96:1a:43:6a:2f:c5:e7:85:b6:1d:
                    fc:6d:e9:71:77:35:60:3c:17:d6:b4:91:20:dd:9c:
                    67:a9:7b:d8:9e:8a:33:4f:40:ef:13:50:88:41:2d:
                    88:95:eb:24:9b:cd:ce:05:9a:d4:de:68:d5:ed:c6:
                    1e:d7:35:53:05:45:c7:9f:0d:64:d7:71:7c:f1:be:
                    b3:04:b8:11:cd:06:94:e8:f3:5b:72:5e:47:66:f0:
                    f6:43:51:88:eb:00:06:45:c7:ab:9d:5b:ab:e7:b5:
                    bb:e6:31:42:6f:dc:76:b3:6f:0d:f6:92:4a:d8:1c:
                    96:b9:b5:70:2e:6e:5f:b4:7f:33:93:27:19:81:84:
                    c4:2c:fa:4c:89:6a:3d:36:2c:8e:40:50:51:67:f3:
                    d0:41:0c:7a:ac:23:31:eb:01:fb:b1:f0:1d:63:35:
                    f2:bb:a0:2a:3f:11:ee:90:f0:ce:21:59:04:d6:4a:
                    73:cd:57:d5:d7:40:8a:58:72:88:a1:9b:02:c5:87:
                    c0:0d:38:4f:64:2e:e8:bd:c5:06:c7:c9:5c:52:f0:
                    27:52:16:80:fd:74:30:f6:42:39:a0:49:f7:ae:d7:
                    50:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:23:14:C0:D1:EA:D7:7B:8F:A5:CC:8B:A5:FE:4F:9D:C2:A7:11:66
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a2:dd:63:b0:ae:9f:ad:23:ec:57:b7:c3:60:b5:ea:d9:6c:
         20:43:dc:82:7e:17:87:46:b6:e5:bc:25:58:a9:8d:d3:7e:e0:
         9a:c5:ce:7a:38:c1:84:bc:d9:3c:5b:60:6a:9b:7d:e3:d2:5b:
         36:f1:01:0d:b7:6b:5a:cd:16:d3:a7:48:1f:a8:5e:32:b8:f6:
         3c:6b:25:21:89:28:cd:78:b5:1c:92:44:f2:42:9a:f9:1a:fc:
         8e:6f:b1:91:de:64:4c:28:b4:ff:ac:4b:e8:8a:0a:a2:0e:58:
         7c:5b:ff:16:d9:09:8e:29:4c:19:c9:9b:2d:2c:44:8c:66:42:
         8d:b1:fa:e6:76:04:9b:67:f8:c6:2e:7d:84:e6:65:14:d6:27:
         4f:31:87:97:ed:a1:01:25:c0:b0:88:4a:34:10:64:25:df:a8:
         2d:db:43:94:2c:a3:e6:f8:ec:44:9a:58:72:91:a1:6c:d6:ef:
         1a:0d:d5:11:34:fd:15:ed:b3:c3:ef:fb:82:59:ee:82:ed:c3:
         d6:8c:de:64:9f:1c:56:1d:7f:27:da:a3:97:0d:ea:b8:c4:dc:
         ef:36:db:10:6a:6c:fb:aa:1c:6c:a3:d5:ec:3e:92:fe:04:e4:
         38:19:de:8d:ec:ab:86:84:87:74:5b:eb:88:72:cb:aa:fa:52:
         73:61:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:10:40 2026 by rpki-client