Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File:                     qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier:          RLbZ/KxswjW0CFOZRYn47aUCQkZ6MFjXBVXYe3F3bb4=
Subject key identifier:   98:82:DC:81:5E:B5:4B:15:2D:C8:BF:27:B7:12:10:50:BF:B9:40:D8
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer:       /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial:       01A089E7F4AB3A92AC2B3F32A2EDFF8C5064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number:          089E
Signing time:             Thu 10 Sep 2026 06:01:14 +0000
Manifest this update:     Thu 10 Sep 2026 06:01:14 +0000
Manifest next update:     Fri 11 Sep 2026 06:01:14 +0000
Files and hashes:         1: Ayy3FQCZfsnrrkGpwiilXLbjkWM.roa (hash: esgmCzM37dMW6UxbTfw9yQ8cfp/xjD2YDV7D5NJMYIE=)
                          2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: fvDjpqkE/wzZG19m0LrHIRNo3S+kHszymq3eRFalhyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:f4:ab:3a:92:ac:2b:3f:32:a2:ed:ff:8c:50:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
        Validity
            Not Before: Sep 10 06:01:14 2026 GMT
            Not After : Sep 11 06:01:14 2026 GMT
        Subject: CN=9882dc815eb54b152dc8bf27b7121050bfb940d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:a9:26:b4:63:9d:66:83:dd:75:4e:7a:ae:
                    43:74:8d:be:f7:27:c6:80:d7:ce:89:43:fc:df:f8:
                    31:a3:3d:78:04:49:e7:a1:d6:77:9f:56:0b:f7:74:
                    a6:a9:b1:78:e7:a6:5f:e9:2a:f9:84:e4:4c:64:57:
                    10:f2:60:54:cc:83:52:b7:45:c2:d8:8a:ff:21:e7:
                    e4:ab:35:a1:4c:74:6f:f7:c2:27:8c:f7:5d:26:46:
                    4f:d5:35:a9:92:a4:96:78:9a:51:7e:c3:75:ba:4e:
                    56:49:af:ee:cd:fd:dd:16:01:45:68:c4:c8:85:57:
                    f6:81:5b:d9:c9:b4:5f:f2:cc:86:2b:a0:6b:63:da:
                    24:0e:3d:fe:77:8f:de:e4:97:38:de:de:37:dc:8e:
                    66:9a:74:48:64:1a:29:72:86:21:9d:21:cf:98:f6:
                    21:c5:8d:e6:2a:de:32:96:6a:ed:af:01:c7:63:7e:
                    1a:23:cf:f0:1e:b3:2a:48:c5:c4:ad:87:fa:b6:5b:
                    c6:b8:55:5c:0e:7f:fa:25:d8:86:02:ce:8a:3c:ca:
                    ed:05:93:1a:65:e4:44:17:d0:74:1c:b6:6d:4e:80:
                    86:50:23:51:7f:96:b0:89:dc:4d:e3:b4:af:82:a7:
                    02:7f:ac:79:af:be:d0:65:92:a2:c1:3b:3e:03:04:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:82:DC:81:5E:B5:4B:15:2D:C8:BF:27:B7:12:10:50:BF:B9:40:D8
            X509v3 Authority Key Identifier:
                keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:09:f1:a2:de:da:61:af:e6:34:fa:82:ee:78:f7:35:ac:a9:
         c5:29:ab:4e:7e:ac:56:e7:72:7e:3f:46:0f:62:d1:a7:e5:5b:
         11:7f:79:b4:10:2d:48:1c:e2:16:17:78:87:30:fa:11:33:dd:
         eb:5b:3d:aa:56:1f:9b:ac:ac:6b:9b:58:a2:94:5b:e3:eb:65:
         1e:8c:66:f2:26:61:13:88:18:3d:5c:ed:bd:7a:ec:04:2c:22:
         ba:02:f0:98:6c:f1:15:43:62:0b:5a:ae:b9:8d:1b:44:43:bc:
         0d:03:df:9d:a6:39:cd:e8:55:7e:ba:87:3b:2f:d1:8f:5b:bf:
         0c:ef:d2:fb:af:c3:73:38:7d:79:0b:d6:46:b5:4e:02:92:c6:
         fe:ef:51:a9:5b:d2:a1:45:b7:74:6f:1a:8d:bc:e8:19:76:a7:
         2d:4b:40:8b:e9:50:38:49:ce:1c:f6:49:7d:fe:a7:f2:4e:d7:
         cf:f1:29:e9:02:ec:ef:5d:49:27:fb:fb:2d:ed:11:d2:ce:10:
         f1:b6:04:e2:f5:29:a8:ce:70:be:4b:d3:e1:99:66:ef:04:4d:
         0f:e4:76:9b:99:ee:88:91:81:fc:eb:33:3e:5b:10:50:cf:8c:
         92:fe:fd:ce:f4:f2:3a:0f:a4:ec:47:a9:77:f4:82:39:09:88:
         0a:5d:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:46 2026 by rpki-client