Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File:                     dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier:          ZqT5IURO3Wib0ap1W5vxfHsIPkwKLlU6gswUnCGM2QQ=
Subject key identifier:   7F:0D:B9:61:E3:0E:E9:D3:D1:01:F6:D1:7E:36:6D:5E:FB:7B:EF:A1
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer:       /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial:       01A17FCFE84C5963AE6989AD2FC881DFEAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number:          1A59
Signing time:             Wed 28 Oct 2026 00:01:34 +0000
Manifest this update:     Wed 28 Oct 2026 00:01:34 +0000
Manifest next update:     Thu 29 Oct 2026 00:01:34 +0000
Files and hashes:         1: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: Hz7s5F1KKm8TQhgQM2A3ttu6XVSwQZkD6C8yXV3hEVw=)
                          2: wVQATVneJGNgeJdEAAt8JoUma-o.roa (hash: 0T7EKoEIVpeyvaEceVoNM5TEKal0WHNVbKVS5qTgZTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:cf:e8:4c:59:63:ae:69:89:ad:2f:c8:81:df:ea:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
        Validity
            Not Before: Oct 28 00:01:34 2026 GMT
            Not After : Oct 29 00:01:34 2026 GMT
        Subject: CN=7f0db961e30ee9d3d101f6d17e366d5efb7befa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:0a:5e:90:25:f4:f4:25:45:fe:f7:90:a5:
                    47:a8:c9:a9:cf:67:61:23:f6:9f:f6:6b:0f:dc:ea:
                    0c:77:3b:6b:30:cd:50:c2:3a:7a:f4:c1:79:ff:95:
                    64:e7:96:9f:42:ee:54:01:9a:34:d9:39:ff:8f:47:
                    d5:04:52:a0:ae:97:49:d6:d2:ee:84:1a:ae:7d:01:
                    82:00:48:40:33:f4:fb:90:fe:6d:49:36:2a:07:60:
                    12:f0:70:84:f9:af:ee:76:d0:46:c5:4e:66:15:32:
                    2a:f7:5f:5d:f7:72:e6:82:29:96:98:2b:95:9d:78:
                    61:ea:40:b9:2a:8f:2d:97:c5:98:96:cc:a0:56:51:
                    70:ff:86:b1:52:db:ee:05:34:9f:e9:ab:54:b7:4f:
                    2a:4b:d6:30:cd:83:58:2c:72:76:31:04:5c:4b:15:
                    dd:6c:96:7f:06:8b:16:3f:57:3c:48:73:b0:cd:9d:
                    42:f4:4a:ad:5f:10:28:41:54:f5:ca:3e:5b:19:ce:
                    db:d7:92:c3:8b:91:0b:e0:19:80:52:2c:8a:71:52:
                    13:b2:f9:32:fc:d6:84:74:6b:00:4c:de:8b:e7:cd:
                    64:dd:bf:23:3a:96:04:14:60:11:25:9d:e2:43:1f:
                    35:f9:6e:6c:47:3b:77:e8:b6:90:17:bb:e8:34:a6:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0D:B9:61:E3:0E:E9:D3:D1:01:F6:D1:7E:36:6D:5E:FB:7B:EF:A1
            X509v3 Authority Key Identifier:
                keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e8:58:b7:eb:63:9d:94:2f:30:1c:de:3a:f0:29:59:fc:da:
         f0:99:f7:62:99:b9:47:d0:76:b4:74:26:3d:e9:64:ad:0e:51:
         b2:a5:18:fc:bc:d1:5e:33:d0:b4:2a:73:ed:32:87:57:cd:37:
         24:c8:23:63:1a:73:f1:1a:08:36:a3:92:0f:9e:19:75:41:35:
         a4:b2:ec:22:6d:53:d7:10:f6:c2:30:3a:7c:10:21:53:0f:06:
         0c:bd:e8:97:61:7a:65:47:ab:55:7d:29:80:09:c7:e0:62:2f:
         a1:25:0f:ae:e5:37:8e:7a:1b:fb:cd:c8:a8:5f:f2:6d:73:73:
         99:a9:ef:09:cd:56:3e:72:37:92:01:e4:f0:4f:54:f2:40:06:
         35:aa:fa:8a:a3:40:92:67:bc:70:49:7d:ef:e5:25:2f:a5:ba:
         0f:cd:10:f2:7b:db:30:c5:f2:71:f0:7e:0a:78:67:bf:22:b3:
         7f:cc:9c:2c:1d:bc:8b:90:97:98:60:af:1d:d0:97:d3:c6:d8:
         bd:3a:a8:10:9d:de:20:38:36:fd:bf:2f:8b:65:fe:ad:7c:c7:
         95:f5:40:8c:a8:51:05:fd:48:96:0d:2d:98:0f:8d:62:cb:24:
         99:05:21:d0:01:d1:20:46:6a:05:98:3e:55:82:56:f3:34:34:
         96:16:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:12:45 2026 by rpki-client