Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft
File:                     qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft (raw, json)
Hash identifier:          dARlk3aiXx9Nscvl7smuuSPqppGQXBj8ard3GzV8UlE=
Subject key identifier:   6F:3F:6C:4B:FC:B3:E8:D1:FD:D8:1E:36:6C:FE:7E:24:A4:4F:AA:3A
Authority key identifier: A9:D2:EC:C9:A6:17:81:AE:87:F4:F6:F8:2C:11:9B:B1:4B:82:23:E6
Certificate issuer:       /CN=a9d2ecc9a61781ae87f4f6f82c119bb14b8223e6
Certificate serial:       01A128E7CA5033EE6590E19868B11BF6D058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft
Manifest number:          0113
Signing time:             Sun 11 Oct 2026 03:00:41 +0000
Manifest this update:     Sun 11 Oct 2026 03:00:41 +0000
Manifest next update:     Mon 12 Oct 2026 03:00:41 +0000
Files and hashes:         1: qCwleTge9FVIeDSIaTyl_itGPJc.roa (hash: GgyYwHCuTtAxDd7Rw8YrnVjz+mlCUAVIVNVqA/oXPUc=)
                          2: qdLsyaYXga6H9Pb4LBGbsUuCI-Y.crl (hash: 4K3XzrnwARgILxPIwaNddQ0FFJjf8ykGYr468VieAJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e7:ca:50:33:ee:65:90:e1:98:68:b1:1b:f6:d0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d2ecc9a61781ae87f4f6f82c119bb14b8223e6
        Validity
            Not Before: Oct 11 03:00:41 2026 GMT
            Not After : Oct 12 03:00:41 2026 GMT
        Subject: CN=6f3f6c4bfcb3e8d1fdd81e366cfe7e24a44faa3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:fe:f2:0d:1b:72:67:a3:fd:66:db:d4:4e:
                    2a:a9:aa:24:5c:b7:ab:cf:28:6d:83:05:dd:80:c6:
                    87:8c:6e:69:fb:02:b1:02:f8:43:e9:48:5d:fc:d0:
                    46:b3:9c:3f:bc:cc:f0:1c:1b:c8:9d:17:6f:0c:e7:
                    bd:0b:b6:02:71:9c:32:3b:e1:1b:52:53:ff:5a:c6:
                    94:fb:a4:92:0a:89:29:28:8e:40:63:19:20:a3:b5:
                    44:72:47:b8:ce:4c:3d:55:d2:db:99:2b:19:5e:30:
                    8e:d4:d7:8a:8c:dc:26:c0:7e:0f:ba:8a:d3:04:1f:
                    26:ba:7c:f0:d1:d9:5e:64:0f:3e:76:01:58:9f:8b:
                    6f:14:3b:6d:de:33:19:0f:e6:2b:54:bc:b1:3f:21:
                    0d:3e:ed:f0:14:f7:87:d9:f8:cf:cf:1b:b0:f1:06:
                    33:d5:f7:d9:63:7e:a0:86:2b:22:f6:e5:71:d0:d7:
                    e9:28:8f:aa:cf:d4:19:7b:43:b9:e3:ba:50:34:d7:
                    3c:c0:f9:ed:d6:af:36:5f:1f:f5:a0:fb:c8:b6:f4:
                    88:23:a3:25:49:b6:bf:44:9e:20:68:6d:99:0d:4c:
                    e9:f6:4e:70:a9:75:48:e9:d9:a9:01:cf:34:0b:90:
                    17:34:54:91:d7:9b:4a:e4:52:84:09:91:18:7e:f6:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3F:6C:4B:FC:B3:E8:D1:FD:D8:1E:36:6C:FE:7E:24:A4:4F:AA:3A
            X509v3 Authority Key Identifier:
                keyid:A9:D2:EC:C9:A6:17:81:AE:87:F4:F6:F8:2C:11:9B:B1:4B:82:23:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:86:e7:45:cb:b1:c9:5c:42:c6:14:e5:6b:8d:c2:a7:36:e8:
         62:cd:d4:f7:8a:5c:57:98:b8:0f:da:92:ad:a7:10:0b:fc:76:
         22:81:dd:7f:72:a0:e7:1d:2e:4f:aa:0d:e6:ac:eb:e4:e3:b7:
         b6:ea:d5:44:c7:e6:ad:d6:c8:e1:ea:f1:83:76:15:ed:25:61:
         73:d5:32:64:18:e2:52:3d:ec:f9:4d:69:28:7d:1d:b2:cb:38:
         91:38:22:27:bc:b0:52:70:e0:a5:35:5e:07:a9:45:d6:09:4c:
         48:47:f6:3e:82:ec:bd:f0:83:e9:bc:63:ef:36:4a:7a:c0:33:
         e3:51:72:62:ef:89:f6:7d:ba:c2:85:53:ae:50:36:b2:91:94:
         fe:3b:a4:6a:15:35:96:d0:9b:5b:a8:89:89:58:de:ab:b2:eb:
         fc:f3:46:1a:cc:19:ae:74:94:24:2d:40:51:42:b9:20:13:ee:
         4c:f5:40:cb:98:d5:08:e6:b8:1e:5d:79:a2:83:e9:10:f3:ac:
         32:a5:12:fa:e3:91:f8:18:aa:68:00:f7:0d:26:a9:90:cd:e1:
         e0:91:ef:9a:13:1b:eb:1c:b6:f0:9b:b0:df:07:74:d9:82:bb:
         05:10:71:80:07:e4:7f:13:71:6c:85:d7:19:f6:7f:ba:8e:3e:
         68:fb:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:29:19 2026 by rpki-client