Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
File:                     qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft (raw, json)
Hash identifier:          Xl6G1EelAW66rKW/sro8186G+hbLDcPUYPq6RD0lgS8=
Subject key identifier:   B9:18:EE:25:48:1B:5B:E4:8E:C3:12:84:4A:CB:0B:83:A5:B0:4B:9B
Authority key identifier: AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98
Certificate issuer:       /CN=ab02bac8f78a6caafc33f36dfb68bccf698b2f98
Certificate serial:       01A137482C42C51265FD35647A1B78D1CD33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
Manifest number:          0168
Signing time:             Tue 13 Oct 2026 22:00:39 +0000
Manifest this update:     Tue 13 Oct 2026 22:00:39 +0000
Manifest next update:     Wed 14 Oct 2026 22:00:39 +0000
Files and hashes:         1: b4vi65uPTdNMY5XRr0qRTdhUpU0.roa (hash: NRN7alUSZG6XI/7Dcq7RGDyml4DdAwSF0Hh0/rTSFCE=)
                          2: qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl (hash: eikOAtLTLcYThf0LywTnaE4IuchChND9oFfIkgRZw8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:48:2c:42:c5:12:65:fd:35:64:7a:1b:78:d1:cd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab02bac8f78a6caafc33f36dfb68bccf698b2f98
        Validity
            Not Before: Oct 13 22:00:39 2026 GMT
            Not After : Oct 14 22:00:39 2026 GMT
        Subject: CN=b918ee25481b5be48ec312844acb0b83a5b04b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:df:37:7f:73:a9:ef:f8:fa:ad:c8:30:89:
                    3e:55:d4:eb:41:d0:00:48:a5:d4:59:9b:c1:7b:ae:
                    e6:91:3d:07:f3:65:9a:7b:a9:26:51:7f:4f:61:cf:
                    49:e0:ac:b8:69:3d:8b:02:c0:ff:ae:3f:b9:f4:48:
                    43:82:7e:44:7f:55:4a:8c:33:59:4e:d7:52:b7:1f:
                    ce:62:95:88:da:0b:5f:d9:31:90:4f:bd:b2:6f:fc:
                    16:11:54:d4:bf:87:3f:21:69:80:dc:f8:d4:07:e8:
                    55:6b:78:48:20:d0:65:6c:7f:46:54:f4:02:13:c5:
                    42:93:52:3e:06:0d:d6:d4:c9:3a:61:34:6a:ce:d9:
                    77:69:a9:01:74:23:0c:c6:86:99:d2:fa:fe:82:57:
                    26:b7:1b:b9:33:3f:0c:61:ac:43:ff:b5:ee:6b:ae:
                    37:b5:0d:b5:33:f8:7b:21:82:a3:b0:7e:44:32:ac:
                    f9:a0:05:f6:77:d2:6b:59:f9:b2:89:7a:27:db:52:
                    a2:42:01:75:0d:cb:fa:37:12:37:3b:41:4e:23:80:
                    43:25:b6:04:3b:64:cf:34:22:70:c3:9e:0f:14:bd:
                    f9:05:9b:6f:8d:0f:cf:5a:bf:6e:de:0e:e3:0f:87:
                    61:1f:1e:44:2a:37:d8:d4:82:de:55:dc:98:4a:f2:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:18:EE:25:48:1B:5B:E4:8E:C3:12:84:4A:CB:0B:83:A5:B0:4B:9B
            X509v3 Authority Key Identifier:
                keyid:AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:3b:de:57:bc:da:64:2c:bb:b8:22:d6:b8:6a:a4:11:8d:
         0e:38:3a:e8:96:17:fb:8d:15:ac:c1:87:20:a9:38:f2:86:08:
         ee:63:6c:61:e0:c0:c3:8e:5d:60:bf:d2:e9:8a:28:9f:e4:0d:
         b8:53:d4:d5:8d:79:b5:a6:ce:de:48:d4:40:49:18:d5:27:75:
         df:38:47:5d:5c:46:bd:fe:26:84:50:e0:d3:4a:81:89:90:5d:
         45:c1:78:da:7c:b7:14:5d:f0:fe:c5:6c:b2:6e:e1:ad:41:85:
         7d:1e:4f:ea:0b:96:5c:21:34:e8:b8:5e:4d:2a:3f:a5:0e:26:
         d5:07:cf:23:28:1b:9f:d3:59:fa:b5:3a:c4:43:b0:e0:42:a4:
         51:5d:53:a7:8d:c1:2e:02:49:4f:a9:5e:08:88:d5:bb:ab:96:
         6e:0d:55:0b:b7:db:b3:be:79:17:46:9d:02:66:a3:7d:fa:8e:
         be:8c:75:0c:e0:c8:7f:27:e4:00:61:7c:86:8a:15:63:92:52:
         cd:4e:91:18:43:dc:75:43:e2:41:20:68:73:11:6c:aa:e1:14:
         88:f2:75:6b:10:ae:92:7f:82:d3:1c:04:49:82:05:ab:58:10:
         74:5c:a8:10:d9:7c:53:b9:68:ea:7d:35:aa:f0:ed:2e:ae:72:
         29:21:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:34:37 2026 by rpki-client