Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          4EJVn+fG/qZtauvuRolFFBpoySSKeC0bdJQhzo9h7D4=
Subject key identifier:   6A:81:17:9E:24:9C:A8:79:46:F8:B8:A7:CF:AB:0E:18:7A:1C:B4:BE
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       01A0C7B3A14DEF7B3E313243111AA12F9AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          1A8E
Signing time:             Tue 22 Sep 2026 06:00:33 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:33 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:33 +0000
Files and hashes:         1: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
                          2: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
                          3: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
                          4: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
                          5: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
                          6: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
                          7: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
                          8: b4ESO_pvGgCqVp88yRCz-5OoSf0.roa (hash: gzB0VXXq99U/xkP9oWFBiaWwqsbZ9lY1uOT5L1wm/Fk=)
                          9: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
                          10: dNznR1-S7vVnFASVh_hci4jZkMQ.roa (hash: zQ1QJ64mxnosKyQobzETFihGQBbENfar+9z/U7xN1lc=)
                          11: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: GyHVsKE8aIqBPvOgFJt5+FsrzGimG4A9/rJpyWFuFX4=)
                          12: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
                          13: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
                          14: lkbj_rHQ3odPB7yMiampsN-UZno.roa (hash: qptKUULvCznnpcjyPdRsDYHUthdNfWlbjNhIIyjJ/gg=)
                          15: mcWyzJOHr9Zx7r67vsArKVYzm-M.roa (hash: jPJa6OTo4Vh6SlUAyeSF3ybtpQx5852t+NVU3VYBCWg=)
                          16: p5-KSOQJoRc-a4h6VGwthwBmpAw.roa (hash: Oaku+ye04iIHVUwLwL5t3yBGhVH08pyoMvs2MjpbNqY=)
                          17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
                          18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
                          19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
                          20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
                          21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
                          22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
                          23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:a1:4d:ef:7b:3e:31:32:43:11:1a:a1:2f:9a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Sep 22 06:00:33 2026 GMT
            Not After : Sep 23 06:00:33 2026 GMT
        Subject: CN=6a81179e249ca87946f8b8a7cfab0e187a1cb4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ce:a7:31:d6:7a:ad:79:e0:29:ac:39:52:fc:
                    36:ca:95:25:d4:1d:d7:22:55:3a:c7:42:33:e2:00:
                    a1:7e:0e:51:f1:8d:da:86:42:af:f9:48:93:15:04:
                    f7:d0:dc:e3:1f:61:64:44:7f:96:09:5b:a0:48:d7:
                    0e:2a:84:25:ce:e0:6b:70:83:ff:a0:37:04:53:e0:
                    df:1d:5c:99:4a:7d:bd:f4:c4:14:3c:c7:b7:17:47:
                    d9:7d:f1:d6:7f:93:57:7e:5e:a0:9f:fd:54:67:3e:
                    75:b0:d9:e4:e2:c8:48:bd:41:f0:e6:40:a5:a4:77:
                    4a:2e:80:21:95:75:2b:6c:0c:0d:60:5d:d3:de:93:
                    b7:27:74:8e:79:87:ca:a6:c2:23:0f:f3:35:2e:73:
                    c6:36:1a:d8:59:43:e0:76:ac:8f:0a:81:3f:98:af:
                    86:ce:73:6e:d7:77:00:af:aa:8e:f5:eb:30:1c:2d:
                    ab:35:b0:e6:61:a7:91:95:48:d8:70:68:83:19:ae:
                    f9:9e:5a:79:d6:0a:95:f8:ea:32:80:aa:f0:c8:7f:
                    46:62:b9:07:e2:d0:44:f7:2f:3b:ca:36:9f:f2:8a:
                    cc:c1:1c:94:ee:67:81:d1:f4:8b:00:2d:53:7c:31:
                    5a:0d:82:d8:de:5c:e7:ba:a5:00:b5:c5:62:55:bd:
                    1b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:81:17:9E:24:9C:A8:79:46:F8:B8:A7:CF:AB:0E:18:7A:1C:B4:BE
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:66:6b:76:e8:14:4d:a0:69:49:0c:39:b7:ca:ab:7d:83:9f:
         69:a6:cf:d6:89:fa:35:a2:fe:82:15:f0:78:51:dc:b3:b3:93:
         41:b4:1f:c1:54:b6:69:35:4b:23:69:f7:c0:1c:e2:b3:47:85:
         ba:eb:40:9e:c8:08:6a:05:13:50:29:b4:f0:c4:85:d5:a9:e0:
         eb:98:11:e8:40:65:92:1b:e4:d4:a3:f6:a6:2f:03:64:a6:5c:
         e6:0a:48:d8:4c:3d:20:09:a5:22:39:71:57:b8:45:96:f4:2b:
         78:98:e0:80:3c:f9:5e:67:f5:58:c2:bf:98:a7:23:98:54:b7:
         ef:73:29:2a:26:5d:3a:12:ea:2f:08:c2:8b:3a:7a:0b:c2:44:
         9e:70:3f:b0:f1:b8:9b:11:71:06:32:4a:14:ed:d9:ce:a4:ae:
         38:d5:09:d1:7b:59:1d:2d:08:a1:e0:87:9d:f0:d4:68:b5:d8:
         3b:7e:a4:3c:00:0a:d7:3f:c6:a4:52:cd:54:e6:d2:7c:2c:24:
         14:f6:17:28:46:33:6b:8d:a5:e8:e8:e6:9e:e6:6b:a2:5f:d3:
         31:e2:45:7d:7c:b0:61:a7:7c:6e:f6:03:2a:a6:7a:32:5c:a8:
         ae:86:bf:6c:1e:88:80:f7:f7:f9:ec:36:56:73:8d:f8:dd:97:
         a7:70:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:24 2026 by rpki-client