Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          oFuxce4zqj5mb12Q9dIFTP9h0XbY8cbSGYO+tnsuos0=
Subject key identifier:   20:B0:36:0A:62:8D:0B:36:7C:E5:7A:CF:31:8C:69:C8:33:53:AD:DD
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       01A08A8CD1BF1DF47898A36F4F8884AC6DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          19D9
Signing time:             Thu 10 Sep 2026 09:01:19 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:19 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:19 +0000
Files and hashes:         1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=)
                          2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: 997JPDwlvWFKGimQE2WDiIjtdZLUMlTTc3OFhutM6Oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:d1:bf:1d:f4:78:98:a3:6f:4f:88:84:ac:6d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: Sep 10 09:01:19 2026 GMT
            Not After : Sep 11 09:01:19 2026 GMT
        Subject: CN=20b0360a628d0b367ce57acf318c69c83353addd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:6f:ea:0c:7f:ff:ba:6f:eb:6e:9d:cc:e2:
                    83:d5:58:02:3a:d9:a1:f0:22:f7:ed:1c:9b:4f:94:
                    9c:14:d1:c5:13:99:ad:6b:af:df:63:72:42:e0:78:
                    59:e1:7d:77:92:6c:ee:8f:68:d0:cb:b2:92:fa:1c:
                    c2:93:ec:19:83:71:f3:ce:cb:8a:d0:d6:ad:0a:fa:
                    5d:74:b1:02:f4:a8:bd:4e:23:2b:d3:c8:c9:be:ba:
                    8b:24:80:54:b2:41:26:cc:7d:77:6c:57:eb:27:6a:
                    53:91:37:c8:6f:45:ce:18:2b:af:30:56:0b:f8:b3:
                    07:45:09:aa:1e:99:43:71:32:31:fa:30:18:9a:f9:
                    2f:53:de:bc:33:f6:f2:00:bb:52:f4:6d:dc:af:88:
                    b1:25:79:87:38:24:ac:17:5d:77:9b:48:f6:84:5f:
                    c3:87:b5:d3:cc:aa:7d:b6:86:c2:de:45:2c:3f:9d:
                    ef:60:ed:c5:63:eb:d7:dd:94:60:81:17:f6:e0:a0:
                    a4:11:c6:26:e2:c3:0d:79:5d:32:ba:a6:a7:b3:0e:
                    dd:c8:65:73:e7:a8:97:41:e9:d7:95:61:fd:95:d7:
                    25:a5:a2:a8:46:9f:b7:f1:eb:12:41:eb:e1:b2:3f:
                    11:8f:19:d4:70:26:6b:b2:62:58:48:b1:cd:e4:82:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B0:36:0A:62:8D:0B:36:7C:E5:7A:CF:31:8C:69:C8:33:53:AD:DD
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d1:aa:98:f3:98:4c:91:ee:66:aa:53:6e:5f:67:50:a0:65:
         ea:53:ac:49:eb:57:45:1a:84:f3:a9:30:d6:de:16:42:3c:e9:
         8d:eb:45:36:59:da:ca:2b:7c:59:cb:4d:bf:19:56:6a:fa:a7:
         54:be:1b:19:1b:23:ad:c7:a9:3c:77:9f:a0:8c:a1:7d:4f:e5:
         1d:d6:1e:85:32:ab:c7:f8:36:1e:67:48:6d:49:c0:60:9b:df:
         1a:41:c0:29:e7:2a:e7:1f:58:f2:fc:c6:b7:9e:eb:b5:fe:b6:
         df:8d:87:7a:55:52:43:2a:33:73:a9:b1:ea:cc:4b:79:d3:29:
         f8:29:16:89:05:0f:b2:eb:ce:84:d9:04:a8:c8:2d:ff:a9:b6:
         3c:0c:dd:11:e8:b9:2f:d9:6c:d1:a2:74:0d:5d:53:39:b9:38:
         6d:0b:bc:40:c7:c8:d1:68:9a:4b:6b:07:4b:7b:91:cf:ab:aa:
         db:6c:97:bc:6b:c3:1b:a8:cb:ec:34:a7:9a:31:1a:76:a1:a9:
         db:64:08:87:99:24:47:00:94:e4:a3:fb:43:df:be:12:30:09:
         55:38:a1:aa:f2:b9:c6:2a:a8:4e:99:c1:94:8d:89:f7:c8:be:
         40:b7:54:31:b0:dc:bd:96:c1:29:ad:21:51:12:c5:8e:63:32:
         1b:74:1f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:52:16 2026 by rpki-client