Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File:                     qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier:          k2Tn2fqxfxudVND1OsKNeRVhDsNf04sZFrKW5ewUmgI=
Subject key identifier:   10:F7:9F:39:DC:E4:32:CE:71:CA:16:D8:0C:02:77:5B:0F:64:43:4A
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer:       /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial:       01A13FDDDC07442103BBDADA3C6B215B804E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number:          1016
Signing time:             Thu 15 Oct 2026 14:01:06 +0000
Manifest this update:     Thu 15 Oct 2026 14:01:06 +0000
Manifest next update:     Fri 16 Oct 2026 14:01:06 +0000
Files and hashes:         1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
                          2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: LRDMFWb0mFMBFjEd3NTBK0BWidgDpR3xm6EilkDEtt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:dd:dc:07:44:21:03:bb:da:da:3c:6b:21:5b:80:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
        Validity
            Not Before: Oct 15 14:01:06 2026 GMT
            Not After : Oct 16 14:01:06 2026 GMT
        Subject: CN=10f79f39dce432ce71ca16d80c02775b0f64434a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:f1:7f:bd:37:b4:79:19:1d:13:74:7b:4b:
                    d6:2a:50:f4:0d:62:38:b6:da:64:87:62:0f:87:a4:
                    a7:67:05:c3:ae:7f:0c:67:12:da:7c:12:8b:af:21:
                    78:e4:37:a1:7a:7f:af:22:86:4f:64:6f:28:b9:5b:
                    5d:d5:79:bb:e0:b2:c4:ee:61:c9:a4:c5:1c:48:a3:
                    26:a6:fa:f9:bd:b9:15:bb:6f:ca:d2:8c:8a:85:56:
                    79:b3:88:3f:e7:67:ed:ee:0b:ed:87:64:1a:54:ae:
                    e2:e7:00:39:7b:3c:82:e1:79:b8:08:0f:41:fd:72:
                    d3:4d:97:92:5b:da:db:b0:eb:e5:d8:46:b9:d0:e4:
                    5d:c0:2e:ba:ae:3e:c5:af:a2:6b:6c:48:79:5b:02:
                    5c:26:a9:6c:cf:d4:49:b1:ed:e8:09:3b:75:71:e6:
                    1a:a9:26:ec:56:5a:dd:bc:28:df:26:66:bb:3e:bb:
                    03:8e:aa:f2:47:56:52:2d:14:06:7c:ab:61:ae:64:
                    bc:2b:14:11:a9:aa:73:a6:7a:f1:c1:68:1e:23:33:
                    b5:0e:c3:db:9e:e7:62:39:86:8d:a5:73:55:77:93:
                    d4:13:8c:a8:77:f6:60:b6:c7:61:ed:1a:8e:83:4a:
                    b0:d1:09:04:99:23:95:13:29:df:fc:18:05:90:f4:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F7:9F:39:DC:E4:32:CE:71:CA:16:D8:0C:02:77:5B:0F:64:43:4A
            X509v3 Authority Key Identifier:
                keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:05:9d:a7:51:74:d1:8c:28:6b:d1:70:71:25:db:7c:f7:84:
         6c:a6:64:be:b9:e4:63:cf:2e:22:8a:e3:95:27:d9:ec:de:25:
         19:c8:c7:11:50:4e:7b:2e:5e:a9:1b:0d:75:7e:74:c4:c7:a8:
         82:7a:7e:e0:d4:1f:fc:fc:be:20:f8:c8:4b:88:56:6f:33:e7:
         b3:89:3e:65:d3:eb:b4:e2:aa:7a:02:0d:12:0a:b9:40:10:2d:
         60:94:77:ff:86:52:d5:85:af:29:b5:8a:5c:d2:63:b8:5c:fb:
         c4:f5:51:f2:03:eb:9c:69:4b:5a:ee:7e:57:8c:de:4c:1f:9d:
         d3:ab:10:27:fb:cb:5f:34:a9:ee:c4:22:48:40:bb:23:c8:8d:
         86:31:c0:2c:b2:4a:ba:89:f6:04:51:b7:3c:30:76:81:c0:a9:
         51:1f:fe:1d:1b:5b:a3:5d:56:20:32:3c:9d:d3:83:a1:68:f3:
         95:ca:49:70:52:05:37:53:e0:b2:cb:23:64:98:71:21:bb:65:
         96:24:fe:1f:66:05:89:20:16:1d:43:56:54:d1:b5:e8:1b:8f:
         f5:00:57:a0:db:a5:3e:85:b9:db:9a:3d:ca:5e:c3:d9:65:17:
         54:6e:e3:c1:08:06:38:76:f1:ef:13:0d:8f:39:de:78:b5:99:
         0f:58:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:14:44 2026 by rpki-client