Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File:                     cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier:          2gQ06Z/J6o8fyZffqBnO+1g+678a2c0GBVqeTTFPADI=
Subject key identifier:   66:04:64:1D:F2:24:0B:E1:02:8F:5C:10:EA:D8:76:88:7D:1B:3D:71
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       01A0D012E60F0868F8D2853DB4DA9A506DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number:          1403
Signing time:             Wed 23 Sep 2026 21:01:34 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:34 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:34 +0000
Files and hashes:         1: 1-Jdb9MOi2OCF-p6jh4Zq96r-xPA.roa (hash: 62VCCuvgTiReatvA5wQmGjPCyOeu1mdSWJmbcsT6fPM=)
                          2: AK4y5Yo9ayCfpMH_MDJ76y33uGo.roa (hash: fHKlhzEm7Am6zseRdyfLR7iKSnBY8Ngvrjg8FNEEqok=)
                          3: WY6pvsgJR7LRmk_zcT_H6lPiyNM.roa (hash: s9khrceBdwiskxC2l1lsQTmPFSMRENlWQQ8ETb/4LxA=)
                          4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: lKQ86l/rxffeVKvi23iVN+mPg0m6UHpuYbGMaVz86A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:e6:0f:08:68:f8:d2:85:3d:b4:da:9a:50:6d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: Sep 23 21:01:34 2026 GMT
            Not After : Sep 24 21:01:34 2026 GMT
        Subject: CN=6604641df2240be1028f5c10ead876887d1b3d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fa:51:65:28:c2:6b:79:83:68:25:55:ac:80:
                    67:c9:e1:b4:fa:1c:39:1e:70:5d:6f:32:b2:e7:f6:
                    14:c8:8b:07:08:7c:81:1e:e2:c4:7c:70:b6:af:b9:
                    73:53:92:2f:6e:4c:f5:c7:11:e7:ed:e6:8d:29:37:
                    cc:17:18:07:b7:cc:42:87:8a:f4:91:a1:4f:28:85:
                    b2:06:2a:54:56:27:5a:2f:45:b3:73:63:6a:c6:31:
                    74:f1:03:10:44:2a:e5:a9:dd:81:56:6e:b8:db:b7:
                    15:96:77:46:2e:80:b9:f8:cf:75:7d:d3:3f:b2:cb:
                    cd:ec:fa:c6:5d:39:da:cb:6e:f6:3a:f2:eb:f2:32:
                    86:17:27:e6:20:3d:91:95:a1:5c:58:0f:a6:ff:9a:
                    f6:49:14:59:3e:00:c8:15:45:82:ab:8c:ab:8f:a6:
                    67:49:28:0c:fe:7c:7f:8c:59:01:b6:ef:aa:57:c6:
                    07:20:97:2f:80:c6:16:e8:cd:a5:ff:56:15:47:7c:
                    3e:56:5e:b9:62:35:f1:28:b3:0e:8d:94:35:66:e9:
                    48:2a:54:79:ab:12:7c:f9:4c:34:3e:d9:6e:fc:c1:
                    64:b0:c4:0d:ae:8d:d5:c1:3f:0b:fb:d0:08:f7:73:
                    21:35:b4:41:c1:ec:2e:67:c5:2b:46:9e:c4:d0:48:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:04:64:1D:F2:24:0B:E1:02:8F:5C:10:EA:D8:76:88:7D:1B:3D:71
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:42:24:43:c3:eb:2a:da:6d:5a:ef:33:36:d8:29:2d:d5:
         64:6b:88:6a:1f:3e:01:2d:72:3d:ce:f2:e6:d3:bd:64:24:68:
         7f:4b:c3:0c:be:36:b3:d2:bb:0d:94:d0:f2:88:2d:94:90:fb:
         74:13:71:2e:7f:d9:c6:52:27:ee:dc:d4:51:90:f3:ab:b6:9a:
         b0:19:aa:9e:fd:45:62:1a:d6:36:67:24:09:86:ab:79:be:64:
         e3:57:93:ad:5f:ec:14:41:30:e7:f0:ea:b7:c4:7c:25:01:f0:
         30:b9:e2:35:a3:98:f0:a1:91:2a:1e:86:f4:5d:b2:2b:5e:0d:
         64:3a:d5:f5:14:3b:d0:42:0d:d1:ee:04:39:be:5b:5f:22:ab:
         d1:8d:ac:7b:75:b0:a5:be:ca:c9:49:6f:19:c7:39:a5:cb:19:
         ae:ef:4d:a2:11:07:45:3c:2e:8f:1f:04:92:ca:75:20:2a:19:
         6f:c0:da:22:e1:1f:d3:4c:61:1e:70:a8:d9:d7:d9:cb:a5:67:
         ac:5d:b6:6b:ca:01:c7:bd:f8:e1:41:30:18:ae:0a:5c:36:dc:
         e7:a4:61:4e:63:79:90:8c:70:57:3a:9e:5a:d9:dd:1a:12:59:
         89:ea:91:2f:51:c2:d3:9e:4b:7a:d4:9f:30:b3:09:b7:43:7e:
         6d:68:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:39:51 2026 by rpki-client