Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File:                     q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier:          PSY4ECaBAhngg5zt8b6AoQj1y2nZj4XNUO8fmMbPYcA=
Subject key identifier:   2B:32:77:B9:F4:2F:75:1A:FF:16:AB:A8:E0:A3:1C:D2:44:80:09:FB
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer:       /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial:       01A0C7B3B6549DDDBA53F27A13CB3B20DEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number:          0DEB
Signing time:             Tue 22 Sep 2026 06:00:38 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:38 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:38 +0000
Files and hashes:         1: gefx2fr_MDXtvtuWxylmxEbY_9I.roa (hash: DoV6a6Zcce+W+t7QXHihpVY0/SyCf2V+1wNo94geZZ0=)
                          2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: CQuAT9l2jWow+YhW4jfLjlF9MdLf6VWQ4kAOQ2A9x4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:b6:54:9d:dd:ba:53:f2:7a:13:cb:3b:20:de:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
        Validity
            Not Before: Sep 22 06:00:38 2026 GMT
            Not After : Sep 23 06:00:38 2026 GMT
        Subject: CN=2b3277b9f42f751aff16aba8e0a31cd2448009fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:16:e8:a5:33:2f:0f:e3:80:09:7b:45:a9:
                    25:1c:04:96:0a:0d:aa:65:a8:c1:7a:e6:3f:1c:35:
                    17:34:46:c9:4f:4f:c9:41:76:5a:db:61:3c:49:f4:
                    21:4d:c3:fd:aa:94:39:63:5e:51:c3:48:a4:9f:2a:
                    42:4b:97:99:bb:85:c5:17:b6:bf:2f:dc:23:64:99:
                    ac:94:d0:9c:82:d4:86:ff:c8:92:4a:25:b1:a1:01:
                    49:66:86:64:60:08:50:05:14:96:57:10:34:c8:81:
                    ba:f7:5f:56:df:d0:93:71:ef:f2:60:81:26:c2:49:
                    90:f4:be:1f:32:2e:0e:5d:46:c7:6e:8e:8c:e0:cd:
                    4c:42:1d:35:25:65:a4:97:af:b6:eb:5f:6d:11:63:
                    6c:cf:4a:20:15:0d:26:9c:ae:27:75:50:0c:82:8f:
                    32:a5:34:cc:d6:88:85:17:f3:cc:72:00:8b:1d:d0:
                    fa:48:42:3f:ed:45:37:be:17:ac:a0:42:0d:68:95:
                    e1:82:0d:6b:e3:81:1a:28:be:6d:af:35:60:05:00:
                    ef:ea:fd:70:38:bc:4d:f9:41:53:99:20:54:8c:03:
                    2c:57:7d:b6:b3:b4:16:c2:bb:69:22:fe:05:45:ee:
                    ea:75:b0:71:e7:6f:f5:39:3e:66:be:be:e8:85:6e:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:32:77:B9:F4:2F:75:1A:FF:16:AB:A8:E0:A3:1C:D2:44:80:09:FB
            X509v3 Authority Key Identifier:
                keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:38:b8:eb:42:ec:71:0c:7d:7e:28:56:9e:81:78:8d:0e:ca:
         d1:01:43:eb:72:ea:d1:ae:b1:02:98:1b:aa:53:42:43:93:6a:
         4e:41:cf:3e:91:f1:c5:5c:48:c2:55:53:fa:1a:16:e7:ca:76:
         28:82:c3:41:e8:9d:9e:0a:35:e4:6a:96:80:ee:e0:7f:e5:99:
         97:51:6e:bd:05:62:1c:b9:63:04:6e:67:4b:73:ed:74:e4:de:
         53:ab:7b:bb:74:4f:3b:02:e4:57:58:d8:2e:45:9c:8c:2c:a6:
         e2:90:7c:2f:1e:d3:d3:0a:8e:8a:b3:a6:ef:a0:85:d8:8f:22:
         16:71:92:f0:9d:e4:b1:82:5e:cd:b1:5b:cc:5c:21:42:44:a1:
         74:48:e2:e0:a0:54:1e:dd:57:45:4c:37:a8:7d:00:2e:fa:df:
         ab:f0:0b:39:48:66:f4:bb:24:00:2c:12:f1:e1:1c:05:93:a5:
         de:d2:99:45:ca:6d:eb:5d:ca:53:5a:48:bc:ff:7f:e7:1d:ec:
         5f:0f:c3:6e:8c:80:77:56:a6:bd:62:a2:6a:1b:a2:db:97:c4:
         50:53:e9:95:bf:c7:8c:52:4e:2d:ba:93:72:98:5f:d9:6d:a7:
         c6:e6:89:67:12:be:5f:14:59:7a:fa:05:9f:bc:bd:15:c3:6e:
         c3:90:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:17:03 2026 by rpki-client