Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          vH/2qdCIq8NuKImbsQqeg5Hr2V3OQbxfj2va2/0DoIU=
Subject key identifier:   D8:1F:73:FF:A6:C5:DE:70:48:D7:36:83:12:70:AC:DE:B1:05:BC:65
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       01A122E5B429E0A6C8CAED720FE11442556F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          1AAD
Signing time:             Fri 09 Oct 2026 23:00:41 +0000
Manifest this update:     Fri 09 Oct 2026 23:00:41 +0000
Manifest next update:     Sat 10 Oct 2026 23:00:41 +0000
Files and hashes:         1: 7qTepYATqKVXyyn2qZtoxxFTcjA.roa (hash: zj/P1u6iWoahM98pNTDlWucnNtLUswY/H6W+OVzgPg0=)
                          2: CxTPA5mUFSfM5zzjG_pBiZdndNM.roa (hash: +LuWTLTvb4XLHwaIc7XtaBKu05lC9tlVeMmuHJRwLok=)
                          3: FmqdkGuPwkHtcktyjB7p6qiaaA0.roa (hash: N+eixnx0ef9WfVBXPd6Nijvy/VigzdNIgybnerIGWxw=)
                          4: J037jcIbssptRuiF7QThwckkgYA.roa (hash: VzXGhtcRmbTMvgupmIWbk2ydVSdHNyFjivXfWRp24D8=)
                          5: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: v5oFdLd7UqQ2mIUsXsUZsuKG76Zz+Jl1e7mgrCt+ZpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:e5:b4:29:e0:a6:c8:ca:ed:72:0f:e1:14:42:55:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Oct  9 23:00:41 2026 GMT
            Not After : Oct 10 23:00:41 2026 GMT
        Subject: CN=d81f73ffa6c5de7048d736831270acdeb105bc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:cc:f5:51:e2:3f:13:50:85:4f:4a:ae:a0:
                    dd:d4:19:78:f0:fa:96:ef:c0:b2:c4:61:53:67:85:
                    bd:f8:3e:d5:1b:07:4e:e1:6c:43:ae:3f:28:8b:b1:
                    81:b0:2d:d6:dd:7b:a1:cc:4f:56:db:df:e0:80:a8:
                    dd:41:f7:44:1a:af:c9:c5:7a:d9:db:fb:d7:b0:0e:
                    4d:dd:55:5d:7c:2b:b5:bc:a4:57:9f:4d:2d:62:18:
                    b3:1e:05:d5:95:79:6f:94:27:a9:24:20:77:b9:a0:
                    02:3b:82:83:83:56:e6:3b:4f:62:5d:2b:4b:33:e8:
                    c9:8c:37:07:45:a0:99:06:b1:8c:df:82:3e:96:d8:
                    e5:f2:53:6c:43:de:0e:2d:ee:9a:46:65:da:04:15:
                    f9:a0:20:47:86:fb:85:f9:2e:5e:2b:08:53:17:9b:
                    78:3c:d3:d2:52:60:a5:ab:67:e5:e1:9d:0c:79:f0:
                    16:ef:75:37:2e:f5:81:36:52:f4:23:49:6f:85:8c:
                    eb:3a:4c:0c:70:ce:f5:34:18:4b:cb:5c:3a:ab:80:
                    b6:8a:e8:7e:ab:84:31:9d:4c:d1:f9:7c:3c:07:99:
                    ee:6b:80:7f:1d:f6:20:b9:cf:b9:2b:e6:76:3e:d2:
                    9e:39:a5:f0:9e:04:cb:94:58:25:58:85:c3:a5:cc:
                    9a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1F:73:FF:A6:C5:DE:70:48:D7:36:83:12:70:AC:DE:B1:05:BC:65
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:42:25:c0:12:26:90:30:97:82:4a:99:25:b4:e9:1f:1f:c4:
         0c:f9:7f:76:43:a2:10:29:c4:b8:f5:8d:93:a9:6f:d8:47:f6:
         c6:4e:3f:7c:3a:16:30:39:2e:8b:fb:11:02:ec:08:46:de:0b:
         80:af:2b:65:0b:ff:2b:e3:1d:01:be:9b:9f:8b:c5:da:1a:aa:
         25:9d:8d:fb:3d:a2:9b:27:08:60:c4:d2:73:67:7c:a3:fc:f3:
         68:cc:da:79:b3:fa:eb:73:c9:55:42:31:21:74:c0:ff:2d:54:
         50:9f:66:83:ee:4d:86:91:bf:9e:b8:01:47:6a:ef:3e:ee:f5:
         e3:a3:c5:d6:b0:1a:d6:c8:cf:36:26:62:80:b2:67:07:7e:18:
         6f:71:20:d3:7d:46:81:d5:83:6f:a9:93:53:3c:ea:be:af:88:
         74:6b:49:f1:24:8c:be:f1:59:6f:b8:d5:38:0b:75:1c:c0:b0:
         be:cc:5f:2b:be:fa:6b:dd:12:e5:33:48:44:dc:80:29:f0:73:
         e8:62:7f:ef:31:a0:ab:d6:59:29:73:12:2f:e1:fb:ab:c3:d1:
         12:fc:24:84:51:3e:13:a2:72:e8:34:26:9c:f4:e9:1d:4e:cb:
         37:cc:dd:63:43:b4:2d:91:16:44:af:de:ec:67:e0:be:ca:c0:
         0c:66:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:16:04 2026 by rpki-client