Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File:                     SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier:          zeMidCXOLisOOvn1BDWSh3cw9t6nhz+HxpSdEWeqxCI=
Subject key identifier:   32:07:C9:4D:6D:BE:0E:B4:FF:75:10:12:FE:23:0D:16:71:FF:57:D0
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer:       /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial:       01A12BB202477C5A6D00EA51D1D802137679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number:          17B2
Signing time:             Sun 11 Oct 2026 16:00:48 +0000
Manifest this update:     Sun 11 Oct 2026 16:00:48 +0000
Manifest next update:     Mon 12 Oct 2026 16:00:48 +0000
Files and hashes:         1: 5f7j3zGx8jvsXJiygSNasWYx_Zs.asa (hash: TjoqTdv343Ue7LWqKvDsc7lZXvzPyAhZYFhPUJ6/iB0=)
                          2: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: +qWZpYGQYXtonacE24e5mXFqjf9lKkJot24mFPdPjTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:b2:02:47:7c:5a:6d:00:ea:51:d1:d8:02:13:76:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
        Validity
            Not Before: Oct 11 16:00:48 2026 GMT
            Not After : Oct 12 16:00:48 2026 GMT
        Subject: CN=3207c94d6dbe0eb4ff751012fe230d1671ff57d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:7e:04:dc:79:b8:64:98:1c:5d:59:96:25:
                    b6:ae:d4:41:07:02:5c:75:bc:73:d6:1e:61:e9:87:
                    ad:b5:5c:de:97:0b:0c:e5:6d:f9:a5:51:a5:ab:e5:
                    ba:c4:ac:26:be:89:bf:be:5d:6b:20:82:70:bb:85:
                    96:6f:0d:89:6f:0a:bb:83:ce:26:9c:43:38:1d:fb:
                    f3:ed:6a:cf:81:72:d4:91:b1:d8:38:91:84:67:f3:
                    0c:68:f8:35:9d:c3:16:c6:3b:da:9a:5e:1c:95:70:
                    b1:6c:ec:2d:26:34:77:fb:d5:bc:6e:bc:83:ad:d9:
                    de:2f:28:29:6e:c3:9e:ab:53:c0:da:d0:2c:68:c8:
                    be:47:96:d8:dd:19:8e:17:1e:3c:20:cd:48:91:6e:
                    15:d5:4c:9e:08:c0:01:1a:d6:73:f9:53:b3:5a:f7:
                    c6:dc:ff:eb:ee:1a:d0:bf:46:0d:64:41:3b:db:d9:
                    82:f3:a5:3a:bc:c0:bd:a7:84:3c:3b:48:41:61:4c:
                    57:ec:c8:b8:1f:59:ea:9a:16:34:a7:c3:00:66:16:
                    1c:a2:a1:19:20:36:f8:f5:7e:c3:70:08:fe:61:0c:
                    fc:57:6a:29:4c:60:b9:58:1f:c3:60:3e:39:20:2e:
                    b2:87:91:39:0c:30:11:a6:70:b3:4b:02:0d:b0:bc:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:07:C9:4D:6D:BE:0E:B4:FF:75:10:12:FE:23:0D:16:71:FF:57:D0
            X509v3 Authority Key Identifier:
                keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:61:d0:de:1a:3c:40:18:af:a0:42:e1:4c:1d:3f:5f:1b:b6:
         e8:b8:87:53:f3:a4:d2:b2:80:7f:da:67:8f:59:20:86:9b:95:
         87:d2:48:8c:93:53:62:4a:86:4d:06:37:88:54:79:10:3d:be:
         d5:f5:aa:6a:9b:85:25:18:7e:a0:af:e3:4b:9d:77:7c:cb:31:
         5d:fe:b0:9d:55:99:da:be:f3:6b:02:ff:3e:7e:64:87:e9:ae:
         21:0c:79:ce:0c:27:86:05:73:f4:f9:96:b7:53:19:f5:5c:31:
         a5:6b:70:02:28:08:8e:fe:4e:06:dd:7f:1d:52:7a:6e:0e:fd:
         2c:a6:57:f7:43:81:86:da:ca:30:22:25:20:10:df:be:99:af:
         29:e6:24:cd:f0:8b:ea:e3:f5:24:3d:b5:26:7e:3d:6c:62:0a:
         44:c5:49:b6:46:8b:87:ed:97:2d:89:08:78:96:e9:ef:95:f6:
         54:dc:d0:44:3f:f9:86:ae:9e:27:57:83:24:1f:4c:52:f4:c6:
         cc:21:16:f3:5c:19:6d:06:3a:37:a5:6b:af:79:62:75:e9:cf:
         6e:05:c4:db:f9:6d:c4:ca:33:91:37:f7:a9:20:35:d4:71:ca:
         01:da:80:10:6d:76:e2:c9:3a:e8:7d:dc:05:a5:57:6a:c3:ab:
         05:d6:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:14 2026 by rpki-client