Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
File:                     sqvUconMbNnByAJ0KiztUMY0vTs.mft (raw, json)
Hash identifier:          WVxBDJPSI+wuYfwqLhe0uT4ao3dnVlTtFvjxy7Izfag=
Subject key identifier:   CC:00:6B:40:35:B4:A1:E4:39:3B:E7:21:45:49:34:AE:95:E4:FC:C1
Authority key identifier: B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
Certificate issuer:       /CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Certificate serial:       01A1238A8FC1DF25DD993B518F26F754093A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
Manifest number:          0C6B
Signing time:             Sat 10 Oct 2026 02:00:45 +0000
Manifest this update:     Sat 10 Oct 2026 02:00:45 +0000
Manifest next update:     Sun 11 Oct 2026 02:00:45 +0000
Files and hashes:         1: omOIkUQB-zmqOTkf6AoePranFhs.roa (hash: y1D2TurDR5SSMCMDBMYJgq8CTPaet7Qns9/ynfcmAsc=)
                          2: sqvUconMbNnByAJ0KiztUMY0vTs.crl (hash: bMkZyS1q5Q2ejrwoazTuwf3KmppatLu3hBES38Fj7Ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:8a:8f:c1:df:25:dd:99:3b:51:8f:26:f7:54:09:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
        Validity
            Not Before: Oct 10 02:00:45 2026 GMT
            Not After : Oct 11 02:00:45 2026 GMT
        Subject: CN=cc006b4035b4a1e4393be721454934ae95e4fcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:87:2a:e2:4e:2f:5f:7b:c7:f3:48:9c:f7:
                    5f:c3:1c:59:2b:6d:e4:2f:ac:da:8e:f8:1a:d7:f6:
                    a8:1f:3a:41:e3:24:93:5a:05:da:fd:4d:6d:f3:3e:
                    7a:62:fc:d0:a5:47:a9:c8:9d:c6:8e:13:de:16:75:
                    d1:42:bf:c9:15:0a:5c:63:17:d4:45:b9:47:a9:68:
                    de:04:69:75:80:8e:bb:aa:d7:e6:61:c0:37:ab:ea:
                    8e:bd:f2:b7:c4:1e:f2:a5:0c:8c:36:8e:07:9b:df:
                    37:bc:c7:4c:a7:e4:43:fc:cf:d5:f5:cd:59:c8:63:
                    0a:34:03:76:53:8f:ea:1b:35:da:2d:f5:33:84:13:
                    0e:70:b5:e3:9e:23:ef:bd:42:26:78:9f:96:46:da:
                    62:1e:c8:dc:e1:54:f1:b6:ed:6d:2f:7b:19:6e:07:
                    3a:9f:dd:c7:0f:90:59:65:cb:77:2c:43:88:e0:5d:
                    e2:77:aa:14:5c:d3:1e:25:3a:dd:8c:1c:13:1f:32:
                    df:a4:51:7e:ee:f7:1b:7a:5d:73:48:cf:78:34:06:
                    b5:58:03:b8:53:0c:82:7b:52:e1:0c:e4:c5:32:5f:
                    8e:6d:47:6e:a7:02:a1:8f:ef:51:d0:c6:95:a1:13:
                    a2:5d:c3:de:1c:55:d7:38:24:20:1a:8a:ad:c2:11:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:6B:40:35:B4:A1:E4:39:3B:E7:21:45:49:34:AE:95:E4:FC:C1
            X509v3 Authority Key Identifier:
                keyid:B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:48:4f:e4:47:44:34:69:09:9b:66:c9:be:3c:22:76:ea:8a:
         a7:80:66:3d:7d:f5:06:d5:ea:45:b4:14:96:0d:18:0f:9f:55:
         f2:7c:09:99:03:85:9e:e8:12:77:49:30:91:1f:84:a8:cc:24:
         57:25:cd:52:8c:0d:92:2a:3d:a7:b9:1f:b8:30:84:0e:56:45:
         f5:f8:c0:2a:39:8b:79:e2:c8:cd:17:5d:e0:88:38:7c:f3:38:
         cb:b1:20:62:c1:af:ac:9b:a7:13:71:44:9d:6a:58:98:87:10:
         a3:c2:37:36:21:75:3c:64:7b:32:b2:10:b1:61:9c:f0:45:82:
         e5:7f:5f:ac:fb:6e:86:41:4e:ab:ab:24:7b:6d:17:4a:2e:67:
         4a:1d:fb:95:c1:d4:c3:50:2e:b5:46:3c:c5:64:9e:61:dc:a9:
         ae:16:04:9b:8a:d8:4c:0c:83:7c:9b:07:66:f2:12:f9:74:26:
         c0:e6:a9:de:0b:d0:78:8e:c6:a6:40:d6:3e:12:47:12:a1:85:
         16:d5:7c:ad:b1:ea:72:d9:9f:8c:3f:b8:f2:77:20:f5:80:b7:
         a8:12:55:6f:09:b0:78:bd:40:a2:56:c7:d5:a5:24:b2:b4:75:
         ec:da:fd:68:a5:04:65:e9:30:09:b0:a8:d5:7f:41:97:a6:25:
         5a:6d:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:03:16 2026 by rpki-client