Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File:                     2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier:          xVLElKP4itWnaPixUT3rBu41BvLueJlPBE+YnhhZ2UU=
Subject key identifier:   80:F6:C0:E8:FF:32:3D:69:4A:CC:33:70:65:29:E1:01:7A:21:D6:80
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer:       /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial:       01A00101C08B98B3FCAD1F809513FAF1BB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number:          0AAC
Signing time:             Fri 14 Aug 2026 16:01:26 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:26 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:26 +0000
Files and hashes:         1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: 8O6gQJlzn9aZFQK7M/Mx+yS6OKRFRWmFf9sXq6Ol3lI=)
                          2: iZ4FmBUmzQ1jjTqXhvURrWn4Be4.roa (hash: 2U9RkTvh/CP+gL154cvBJ8P7xRzyHflZ/rH4Y3M1elw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:c0:8b:98:b3:fc:ad:1f:80:95:13:fa:f1:bb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
        Validity
            Not Before: Aug 14 16:01:26 2026 GMT
            Not After : Aug 15 16:01:26 2026 GMT
        Subject: CN=80f6c0e8ff323d694acc33706529e1017a21d680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:6a:4c:08:80:51:ec:39:b9:c9:10:c9:eb:
                    59:b4:d2:f0:8d:68:c7:ab:db:a6:6f:c2:07:7a:5b:
                    81:89:4a:94:64:0c:4b:ad:7e:11:78:85:25:1d:26:
                    10:ca:34:03:1e:00:0b:99:f1:5c:bc:39:bf:9b:f1:
                    0b:d8:03:a8:66:71:ac:36:e0:c7:fc:5c:3c:fa:53:
                    9d:7f:7b:78:77:4c:a8:74:b5:b0:12:5e:2c:a0:97:
                    68:94:5c:9b:85:98:51:6c:a6:80:b6:92:5e:5e:6d:
                    f4:9a:86:ca:9c:23:0f:6d:d6:b9:5a:49:a3:3e:a7:
                    5c:f9:f4:ee:25:7e:aa:49:0d:7e:73:34:7d:80:32:
                    7e:dd:91:97:db:a4:78:e4:9c:06:6e:8c:00:d6:94:
                    4d:a9:f3:73:44:45:3e:f4:9e:20:7e:d3:68:81:a4:
                    ff:ff:37:2f:9e:2c:b3:22:e1:d7:c5:e6:97:b3:c3:
                    c2:69:9d:fc:0e:90:2c:f2:63:06:19:6b:7e:9c:bc:
                    36:ff:2d:6e:ce:d0:1b:00:cb:c3:f9:59:a3:47:ea:
                    e1:26:69:2a:6f:bd:5d:5f:cb:1b:0e:ed:64:3b:33:
                    f1:b5:ee:17:4b:f9:be:ef:b5:1d:33:5e:a0:e4:b9:
                    65:15:86:c8:89:a8:d8:3d:90:5b:0a:a1:22:eb:51:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F6:C0:E8:FF:32:3D:69:4A:CC:33:70:65:29:E1:01:7A:21:D6:80
            X509v3 Authority Key Identifier:
                keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:be:54:8c:da:10:2d:cc:cc:0d:5f:b0:17:34:3c:dc:51:e3:
         5a:99:60:15:07:34:0d:0e:76:61:9e:6f:fe:a5:8e:a3:68:9b:
         d8:3b:fb:91:4e:36:90:c1:9f:89:74:8d:78:e5:71:e6:1c:2f:
         3b:cb:b6:1b:83:24:b8:fd:56:a4:82:be:11:31:f6:26:1c:8f:
         3e:89:9b:10:db:08:5b:3c:c7:e4:ca:88:9e:e1:3b:df:ee:0a:
         64:10:6e:b3:83:10:1f:90:fe:0e:97:54:1a:cf:43:cb:36:0c:
         2d:b3:3a:f2:76:12:88:ae:ca:c9:d6:cc:91:2b:86:db:3f:a9:
         58:26:ec:c4:73:3e:45:7d:26:85:f6:92:d7:f6:3b:9d:9c:bd:
         b1:fd:46:c4:bd:76:a7:93:4e:bc:9a:80:75:cc:8b:4d:ac:fb:
         93:ac:76:23:7f:81:a8:b9:8f:7e:db:8e:84:08:6d:fa:bb:14:
         89:25:73:d1:d8:e5:c4:cc:b8:6a:46:e4:1a:a5:9e:80:45:07:
         c2:c4:cc:7e:a9:d8:82:0a:f3:ca:25:3a:65:85:ce:db:bd:89:
         8f:82:13:6c:1f:bf:c2:f1:f2:59:e6:49:0d:4d:d5:7c:2f:54:
         39:63:21:66:2e:c9:75:f1:70:89:09:9f:0a:4e:d6:5e:b4:3f:
         49:9e:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:02 2026 by rpki-client