Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          P4HMsDwW7wXa4VudNsGuUu9rqlXMhTMEvdACRoNjwmI=
Subject key identifier:   67:1A:FA:E0:D4:B7:9F:89:25:7A:67:F2:21:6F:DA:E1:88:0A:D3:DD
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       01A0CB904E78F6368A30FB247309B7F4B0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          1A90
Signing time:             Wed 23 Sep 2026 00:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:27 +0000
Files and hashes:         1: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
                          2: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
                          3: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
                          4: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
                          5: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
                          6: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
                          7: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
                          8: b4ESO_pvGgCqVp88yRCz-5OoSf0.roa (hash: gzB0VXXq99U/xkP9oWFBiaWwqsbZ9lY1uOT5L1wm/Fk=)
                          9: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
                          10: dNznR1-S7vVnFASVh_hci4jZkMQ.roa (hash: zQ1QJ64mxnosKyQobzETFihGQBbENfar+9z/U7xN1lc=)
                          11: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: /eAFTWjWC1ifOPREAa2qS0cLW3D/s5HVesZBJW8SvXg=)
                          12: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
                          13: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
                          14: lkbj_rHQ3odPB7yMiampsN-UZno.roa (hash: qptKUULvCznnpcjyPdRsDYHUthdNfWlbjNhIIyjJ/gg=)
                          15: mcWyzJOHr9Zx7r67vsArKVYzm-M.roa (hash: jPJa6OTo4Vh6SlUAyeSF3ybtpQx5852t+NVU3VYBCWg=)
                          16: p5-KSOQJoRc-a4h6VGwthwBmpAw.roa (hash: Oaku+ye04iIHVUwLwL5t3yBGhVH08pyoMvs2MjpbNqY=)
                          17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
                          18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
                          19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
                          20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
                          21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
                          22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
                          23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:4e:78:f6:36:8a:30:fb:24:73:09:b7:f4:b0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Sep 23 00:00:27 2026 GMT
            Not After : Sep 24 00:00:27 2026 GMT
        Subject: CN=671afae0d4b79f89257a67f2216fdae1880ad3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:0b:2a:80:31:b7:91:27:79:12:31:7e:be:
                    cb:c7:d4:b9:c7:14:3f:c7:a3:8a:c3:39:f0:ef:56:
                    15:57:f5:0d:47:19:c4:3d:1c:89:c9:63:b4:3d:4a:
                    09:5c:35:cb:c5:b1:91:35:77:93:91:df:4c:52:ec:
                    7b:22:4c:dc:6a:13:94:b6:0c:f7:36:f8:a0:a2:db:
                    c0:45:e3:d1:9e:71:de:c8:ef:bf:d5:a6:17:4c:58:
                    00:4d:09:4c:a5:e9:08:fd:65:af:de:32:37:5c:b2:
                    61:3c:7d:fe:05:b8:09:7b:65:a4:05:f0:4c:eb:41:
                    14:c9:d7:ad:35:09:b4:db:53:10:67:67:20:b1:51:
                    d1:0f:0a:f7:25:84:e9:13:45:9c:cf:13:69:ff:68:
                    f5:cd:3d:4c:69:78:eb:e7:41:28:b1:fa:01:ac:5b:
                    26:e0:66:95:95:c6:75:92:6f:b5:0c:06:81:36:08:
                    e9:45:13:56:a7:79:e9:42:55:5e:9e:72:82:6d:00:
                    c2:ad:d1:f7:3b:1a:e5:ab:df:7e:0e:ec:30:ac:82:
                    d8:9a:70:e3:e2:7c:ef:7e:71:ee:bb:9b:23:09:e5:
                    0c:fc:76:75:0b:a7:23:32:29:71:cf:4f:4b:a8:3a:
                    94:3d:f2:c3:4a:a3:80:a2:7e:49:08:56:f8:7b:16:
                    49:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1A:FA:E0:D4:B7:9F:89:25:7A:67:F2:21:6F:DA:E1:88:0A:D3:DD
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:b5:fb:c5:02:cd:5f:ce:c4:09:e5:26:0a:d9:90:94:3f:
         12:d9:00:ad:6e:8e:22:61:b6:c4:fa:66:09:10:6a:ea:b6:d5:
         65:16:34:b4:d9:27:16:2a:f3:80:d3:2d:19:22:00:65:ff:3c:
         88:20:ee:9b:3a:1e:22:98:a4:60:21:4f:9d:12:c8:b4:98:03:
         0e:bd:9c:d2:ab:e7:31:bd:57:41:8a:fb:17:00:b6:47:23:d5:
         04:87:a7:61:de:2e:3b:93:03:52:0a:d5:bd:90:e9:69:49:14:
         20:70:38:df:12:91:9c:a1:ec:a1:e9:48:88:73:37:87:e3:43:
         1d:ac:01:44:f1:42:8b:60:22:20:d0:48:f7:cf:98:cc:17:78:
         37:bf:92:8f:0e:19:79:4a:84:da:47:fa:04:1a:08:dd:eb:ac:
         1f:c1:4f:d9:a2:3e:15:64:12:35:14:26:bc:10:ab:8e:ae:f1:
         15:9c:ff:25:94:d8:14:5d:fa:80:60:af:b8:0a:56:a6:09:58:
         8b:4c:05:89:d2:23:35:1a:bf:f1:a6:95:96:5d:37:9c:27:ef:
         f9:3d:ae:8a:58:14:e7:12:80:5c:e7:90:0b:50:97:ad:b7:50:
         a3:da:08:37:a9:8b:b7:e5:9c:47:69:42:6b:a5:09:3f:9a:67:
         b0:17:41:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:37 2026 by rpki-client