Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          fE0uTxnhpVg/rAuVnEhMfjeLjz3jxKmJgvf3n/kVVlA=
Subject key identifier:   24:C1:17:7D:5A:1A:8C:D8:1A:5B:59:FB:EC:89:41:81:FF:59:2E:41
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       01A0C96AC37B20D45FBACF0D74B80D364C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          1A6D
Signing time:             Tue 22 Sep 2026 14:00:12 +0000
Manifest this update:     Tue 22 Sep 2026 14:00:12 +0000
Manifest next update:     Wed 23 Sep 2026 14:00:12 +0000
Files and hashes:         1: HqmBNUdmEip8S3rZUAEXbYeiMDE.roa (hash: g5QXvRrB37nz+UezkbR2qYuv3hfWDz55OyBzCv5F3cs=)
                          2: TnnOKxtf4EPhpaijnm_BNONRxwU.roa (hash: /oEc2dWACsObBTpte8m7CBKnG6qM7AzaqS7eowDmmPE=)
                          3: gn4jpmqvHPR6rBGCBxZHXL4XW7Q.roa (hash: zEyp0ISXI99Ue+kTnL8hqnoTwJyraQRvQCykId/nY+Q=)
                          4: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: HmBUBFpKw+dOfcWfcNYlbDRyEnkz27jtvYYJbmp9sok=)
                          5: vFoLoBh7oWb6usXmjNjvyipGBRI.roa (hash: 0j1EDxGflRhorx1jgVNGqb1+St0JzyMh9AI0pVLut9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:6a:c3:7b:20:d4:5f:ba:cf:0d:74:b8:0d:36:4c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Sep 22 14:00:12 2026 GMT
            Not After : Sep 23 14:00:12 2026 GMT
        Subject: CN=24c1177d5a1a8cd81a5b59fbec894181ff592e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:ae:68:22:c6:5d:94:09:ac:ac:82:8e:17:
                    f7:20:06:b8:aa:cf:88:76:9b:50:4d:7d:67:74:9e:
                    29:a5:20:17:b2:2b:f7:88:2b:60:cc:4a:e4:93:fa:
                    a0:a0:4a:04:e3:f2:e0:39:6c:31:3c:1b:b0:a6:22:
                    67:56:cb:ea:4a:22:66:ce:73:3e:ed:b7:7c:70:a8:
                    95:27:9b:bf:b0:54:1a:49:ce:74:ce:52:09:34:b6:
                    d8:d0:7e:e8:08:2a:18:d7:78:89:93:01:db:1d:34:
                    42:78:bb:1e:89:1a:5f:43:2c:62:4d:a3:78:92:ce:
                    85:a3:ce:8f:6f:55:57:75:7e:ca:ae:4c:cb:10:f8:
                    ef:c0:f1:d6:43:bb:7a:47:5b:3d:c8:de:1d:df:78:
                    c9:19:e0:21:03:8c:80:9b:b8:8f:a4:f2:55:88:43:
                    5d:3a:4a:a3:67:92:84:d5:23:62:3b:d5:9e:d3:c6:
                    bc:6f:c4:c7:95:b8:31:3d:a5:72:ad:79:73:cf:7c:
                    63:eb:ed:67:6b:38:8d:6c:b4:dc:76:aa:cd:e5:eb:
                    75:aa:94:56:f8:99:16:d6:0b:21:c7:c9:e7:2a:ed:
                    89:5d:c1:0f:e7:a7:bb:b7:02:df:7a:1c:4c:e0:03:
                    bd:11:fa:77:76:fe:6e:8c:cb:42:c2:fc:d5:6f:ec:
                    2b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C1:17:7D:5A:1A:8C:D8:1A:5B:59:FB:EC:89:41:81:FF:59:2E:41
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:96:52:8f:08:33:0c:07:b7:66:79:b4:5f:09:ef:0c:8c:
         49:3d:13:da:d3:a2:7d:09:09:9c:d1:a0:db:13:4b:7c:81:aa:
         82:f6:8d:8b:b9:83:db:59:5e:15:08:05:a0:0c:c5:b9:4c:ea:
         0e:b7:9f:e5:3d:56:03:21:86:c4:a8:7f:c2:a3:2d:be:ef:6b:
         ab:cc:a9:16:a0:b2:76:dd:05:0a:1b:f4:57:eb:f2:d6:be:d2:
         41:32:6b:46:49:e8:7f:47:06:63:0e:df:1d:1f:79:18:40:8d:
         16:fb:c0:2c:88:db:35:d2:71:a1:be:33:b2:59:59:78:fa:97:
         65:44:52:5b:69:49:1d:46:28:c2:5b:74:54:09:5e:24:cd:b1:
         1d:ac:1d:a2:62:42:7d:50:cc:6f:6e:9b:af:92:b5:83:2c:ea:
         2f:35:c3:10:85:96:76:cc:9a:b9:c7:44:b9:5b:40:ec:80:49:
         ad:dd:23:eb:75:38:16:1d:d8:ef:29:34:d9:4c:16:b5:c1:f2:
         5e:3b:74:9d:b1:a5:11:7f:28:ef:f1:b5:77:94:a2:84:4c:eb:
         07:4f:4f:67:94:26:42:7d:3c:2c:04:3e:e7:a1:1d:9c:3f:e4:
         bd:af:c8:6d:31:1f:5b:77:80:2f:20:bb:91:d0:31:60:c9:f5:
         27:cc:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:50:41 2026 by rpki-client