Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
File:                     quDn_oLDpsQmokwM_6ILDjowT6I.mft (raw, json)
Hash identifier:          HQc0yE0QymSebgWbyqcD3kvya28Uk/VVZeKNBsKXr6c=
Subject key identifier:   C2:78:79:1A:9A:D0:F1:0B:95:AD:80:8D:0B:82:AF:AE:7B:A8:47:55
Authority key identifier: AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2
Certificate issuer:       /CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
Certificate serial:       01A0DBA987276F1A2A046D6DD13F0D1D7771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:01:55 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:55 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:55 +0000
Files and hashes:         1: UL8l5IwcVO4oalkF_m08Q-lh138.roa (hash: Ft4/BZpxSn/GVsZnEbmyHTlyfLxd+14L0O7a+0FPi2w=)
                          2: quDn_oLDpsQmokwM_6ILDjowT6I.crl (hash: +/+ZZlfbZNLbgTbDZRMbmyarZ3+pNKEVj9q8OR2qKds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:87:27:6f:1a:2a:04:6d:6d:d1:3f:0d:1d:77:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
        Validity
            Not Before: Sep 26 03:01:55 2026 GMT
            Not After : Sep 27 03:01:55 2026 GMT
        Subject: CN=c278791a9ad0f10b95ad808d0b82afae7ba84755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:21:56:ac:72:54:4d:8a:50:01:42:af:94:
                    c5:f4:dc:b0:e0:2e:64:94:18:4b:66:c3:26:9e:ce:
                    ef:b0:bc:d2:8c:4d:5d:1c:a2:34:10:fd:93:6a:3f:
                    79:8f:c8:b3:22:9a:ee:52:2c:6a:03:52:b1:e2:64:
                    8e:ea:37:c7:bd:94:cb:20:45:18:75:cb:67:6f:c6:
                    28:c3:4a:96:69:27:7f:4c:9d:6b:6d:64:ee:52:7e:
                    6e:ea:4c:8f:73:50:08:fd:90:54:77:d2:78:15:f7:
                    89:c0:2d:ad:48:6a:57:e6:c0:30:95:05:41:b6:99:
                    7f:13:d3:2a:8c:58:c6:94:ad:b0:16:20:69:1c:8d:
                    83:72:d1:39:5a:cf:4d:cb:5a:f0:c7:cb:cc:fe:8a:
                    db:cf:71:76:8b:a2:82:e9:1a:8a:13:63:4b:be:a7:
                    43:20:62:d9:41:fb:fc:85:45:59:0e:50:ca:10:b0:
                    05:4b:73:be:d9:a8:5a:db:98:b8:bb:d0:a2:71:ca:
                    e1:22:1c:ab:01:21:c6:b4:a7:89:52:ab:c6:de:12:
                    9d:0c:99:14:4c:01:67:d1:00:9c:de:f4:b5:ef:bd:
                    1d:98:64:f2:15:8c:a1:5f:8c:9a:eb:a5:e8:bf:fb:
                    70:74:28:4f:26:93:bd:33:58:37:ff:6c:db:fc:f8:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:78:79:1A:9A:D0:F1:0B:95:AD:80:8D:0B:82:AF:AE:7B:A8:47:55
            X509v3 Authority Key Identifier:
                keyid:AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1e:53:c6:0d:d4:92:bf:63:6f:02:d1:66:7d:cc:be:b9:af:
         09:cb:3a:1b:c2:e9:31:62:df:59:12:09:38:15:6e:32:16:2c:
         80:4f:51:6c:54:09:99:10:70:43:07:0f:18:e9:b9:e9:68:d5:
         81:ed:5a:43:c2:2a:b4:93:5f:7e:42:5f:00:72:92:42:1d:2c:
         77:42:23:bf:c7:ea:07:70:34:91:65:37:2f:82:ef:8b:83:47:
         d5:7d:09:4a:f0:ae:55:9a:3b:70:a0:04:21:28:bc:dd:4f:50:
         ac:a1:87:d6:7f:34:96:15:57:d6:2e:a9:5b:10:fa:bc:69:1d:
         55:fc:c0:89:8c:11:a1:69:63:7a:91:84:67:73:c0:0b:62:67:
         24:3d:3b:da:34:50:39:a2:ef:d4:29:1c:35:66:8f:81:64:dd:
         7a:f3:4f:5e:5c:72:a8:3d:c4:6d:22:47:65:d6:cb:2d:62:d6:
         4f:b2:a0:fb:ab:9a:05:43:e5:b9:3f:52:92:b6:7d:ac:b2:40:
         b6:ad:a5:af:64:22:21:5b:84:e4:f6:9b:e1:3c:86:51:0a:fd:
         05:45:00:64:7d:66:93:be:7f:2c:30:b6:12:65:f8:3a:84:b6:
         30:db:7b:01:fc:95:67:db:0c:7d:d8:82:a6:dd:21:f2:0e:09:
         87:c3:a0:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqYcnbxoqBG1t0T8NHXdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZTBlN2ZlODJjM2E2YzQyNmEyNGMwY2ZmYTIwYjBlM2Ez
MDRmYTIwHhcNMjYwOTI2MDMwMTU1WhcNMjYwOTI3MDMwMTU1WjAzMTEwLwYDVQQD
EyhjMjc4NzkxYTlhZDBmMTBiOTVhZDgwOGQwYjgyYWZhZTdiYTg0NzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt10hVqxyVE2KUAFCr5TF9Nyw4C5k
lBhLZsMmns7vsLzSjE1dHKI0EP2Taj95j8izIpruUixqA1Kx4mSO6jfHvZTLIEUY
dctnb8Yow0qWaSd/TJ1rbWTuUn5u6kyPc1AI/ZBUd9J4FfeJwC2tSGpX5sAwlQVB
tpl/E9MqjFjGlK2wFiBpHI2DctE5Ws9Ny1rwx8vM/orbz3F2i6KC6RqKE2NLvqdD
IGLZQfv8hUVZDlDKELAFS3O+2aha25i4u9CiccrhIhyrASHGtKeJUqvG3hKdDJkU
TAFn0QCc3vS1770dmGTyFYyhX4ya66Xov/twdChPJpO9M1g3/2zb/PhwawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ4eRqa0PELla2AjQuCr657qEdVMB8GA1UdIwQY
MBaAFKrg5/6Cw6bEJqJMDP+iCw46ME+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVEbl9vTERwc1Ftb2t3TV82SUxEam93VDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzIt
ZTE4YWFjNTA1NGE5LzEvcXVEbl9vTERwc1Ftb2t3TV82SUxEam93VDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzItZTE4YWFjNTA1NGE5
LzEvcXVEbl9vTERwc1Ftb2t3TV82SUxEam93VDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPh5Txg3U
kr9jbwLRZn3MvrmvCcs6G8LpMWLfWRIJOBVuMhYsgE9RbFQJmRBwQwcPGOm56WjV
ge1aQ8IqtJNffkJfAHKSQh0sd0Ijv8fqB3A0kWU3L4Lvi4NH1X0JSvCuVZo7cKAE
ISi83U9QrKGH1n80lhVX1i6pWxD6vGkdVfzAiYwRoWljepGEZ3PAC2JnJD072jRQ
OaLv1CkcNWaPgWTdevNPXlxyqD3EbSJHZdbLLWLWT7Kg+6uaBUPluT9SkrZ9rLJA
tq2lr2QiIVuE5Pab4TyGUQr9BUUAZH1mk75/LDC2EmX4OoS2MNt7AfyVZ9sMfdiC
pt0h8g4Jh8OgaQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:09:58 2026 by rpki-client