Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File:                     qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier:          qmaKE2wJoqy6kziQO9HYgyCuDDiOJgwWmRABbzICLCo=
Subject key identifier:   0B:27:7F:08:0A:70:38:80:21:38:58:74:07:38:E6:84:24:0B:0C:68
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer:       /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial:       01A15F31C643DFA305D1391E7DF1CDC1671F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number:          18EB
Signing time:             Wed 21 Oct 2026 16:00:59 +0000
Manifest this update:     Wed 21 Oct 2026 16:00:59 +0000
Manifest next update:     Thu 22 Oct 2026 16:00:59 +0000
Files and hashes:         1: H2T8PA1785l6gX-iVp9IuPaA4Nc.roa (hash: 6faWeYIv5Ai9qI/fX55pW1xZn22WZewYCnXhS25+v6I=)
                          2: Xz4dqhqCzoZvF10IK-TkgPiAc5Q.roa (hash: ZFUgfRsBRCs1X5BDvrArX90/CdgfBgfrW7Rw9sq2N84=)
                          3: lyOH-P2_hH5Ugem7r8kpnkt99SI.roa (hash: GiPFjQfoJkQaMedHXbS4M3+BR9UAmP0J6PtJlsbWkGg=)
                          4: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: y57Z+rJ80v1+sDx6FqqXhb+eTXl8pmcAaAHvbc+5fNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:31:c6:43:df:a3:05:d1:39:1e:7d:f1:cd:c1:67:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
        Validity
            Not Before: Oct 21 16:00:59 2026 GMT
            Not After : Oct 22 16:00:59 2026 GMT
        Subject: CN=0b277f080a703880213858740738e684240b0c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:77:1f:bb:71:8b:2b:81:7c:38:e2:98:40:
                    8d:23:4b:08:37:da:fa:cf:d2:bd:fb:6d:cb:d8:56:
                    72:31:92:65:98:e8:42:92:d8:92:6c:41:5b:82:2b:
                    04:a6:e9:18:70:40:25:48:a4:59:73:25:f1:a0:e7:
                    ed:3e:1d:67:d9:61:a5:80:c4:8d:69:08:75:a7:03:
                    73:70:45:9e:36:77:4c:8c:d6:71:b1:85:68:7d:9d:
                    8a:19:ae:f1:22:92:91:6d:2b:76:db:9a:8e:ef:36:
                    ad:b5:2f:9c:45:cb:f0:8d:93:89:91:b2:0b:fb:e6:
                    5c:2b:c4:0f:bc:2f:fd:fb:12:ad:57:e3:35:73:8d:
                    60:0b:b5:c9:56:e2:16:e8:41:7d:85:ff:62:c5:4a:
                    24:67:3b:f2:44:5f:cb:77:c8:96:9a:d3:f9:94:00:
                    9b:56:0d:c0:b2:fb:16:77:6f:35:15:9a:55:6c:db:
                    ad:d2:68:14:b3:6e:92:77:01:48:b3:4e:c4:f4:4e:
                    1f:04:35:19:cf:20:9a:1a:8c:c8:5f:b7:4a:da:d5:
                    41:44:75:c9:f5:0a:aa:77:00:d6:56:7d:a3:0c:c1:
                    cb:98:33:10:be:f2:df:60:31:6d:df:91:a3:6c:35:
                    51:85:e1:89:af:7f:7f:ff:8e:ab:ef:2a:af:27:db:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:27:7F:08:0A:70:38:80:21:38:58:74:07:38:E6:84:24:0B:0C:68
            X509v3 Authority Key Identifier:
                keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:63:47:7d:94:65:38:cc:8f:73:36:0b:20:ea:ad:f7:6e:f8:
         2a:af:0f:0a:be:b0:b7:4b:89:a2:a8:fc:d9:3f:f3:9f:96:76:
         13:af:07:4f:39:bf:70:2c:73:06:f7:d0:fa:6e:e9:4d:33:76:
         64:d0:82:4c:c3:0e:b2:29:bc:78:09:3d:63:83:42:7c:62:08:
         5c:17:97:d4:75:ba:5a:98:ca:df:9d:48:16:a1:6e:76:72:cc:
         cb:34:42:4c:03:13:66:00:23:69:ac:27:99:a1:6b:79:fd:a5:
         b1:12:b5:6b:ec:e2:11:82:c7:4f:05:59:dd:53:d2:15:4b:d3:
         e7:6d:1d:3e:6c:26:b6:a8:06:68:33:36:9b:53:9f:0b:2d:8f:
         9d:0c:5d:6c:e3:bd:6f:b7:91:1e:7b:be:5f:65:4f:8e:db:68:
         31:38:db:1a:1c:91:51:b6:60:6b:fe:6a:bd:50:9d:9c:bc:bf:
         ac:31:ed:4e:63:a4:1b:a3:20:8b:ac:c7:41:cb:65:79:6d:17:
         33:79:31:ac:52:91:2c:d5:d4:07:f4:72:c3:22:2f:77:11:6c:
         f6:0f:6b:37:2f:60:5c:06:7e:8e:ce:79:71:6f:1b:ea:fe:7e:
         b3:27:03:84:36:2e:ff:03:62:71:97:fd:3c:7c:5e:95:38:eb:
         87:8f:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:36 2026 by rpki-client