Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          Mg51wSTImOUXpfgFUI+tAth7qS/fupdSYMakzocgLxw=
Subject key identifier:   53:9C:82:B3:34:0F:F9:15:31:8F:C0:0F:93:C1:7A:58:BE:9D:77:4B
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       01A0F832C19591705560DE1F89C96E3DE9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          155E
Signing time:             Thu 01 Oct 2026 16:01:10 +0000
Manifest this update:     Thu 01 Oct 2026 16:01:10 +0000
Manifest next update:     Fri 02 Oct 2026 16:01:10 +0000
Files and hashes:         1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: IWRHJ98vnzH48PLgg+QywUrzs2xuGcYyRIAocM3pWUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f8:32:c1:95:91:70:55:60:de:1f:89:c9:6e:3d:e9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: Oct  1 16:01:10 2026 GMT
            Not After : Oct  2 16:01:10 2026 GMT
        Subject: CN=539c82b3340ff915318fc00f93c17a58be9d774b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bb:df:be:9f:f0:da:d7:7b:e4:49:17:7b:fd:
                    19:99:e9:5c:ed:7d:e4:0f:86:9e:c9:66:ee:ce:41:
                    83:3b:ad:5e:fe:ac:17:d8:5b:64:bc:38:06:d4:fb:
                    8a:d4:b2:b8:aa:c2:67:98:f5:d3:84:43:b4:0f:2c:
                    9e:80:bc:ab:8f:fe:28:4b:42:61:84:34:0e:71:7b:
                    88:70:fb:b1:11:62:92:a5:13:16:92:5e:75:6f:6a:
                    11:c9:d9:f2:25:41:bd:cb:b5:a7:cc:de:5d:4e:42:
                    58:0a:a6:bc:e1:47:0a:21:5a:8a:89:c6:26:02:e4:
                    7e:05:fb:66:49:a3:c3:02:03:33:b5:b7:70:97:17:
                    82:0f:a8:30:30:52:4f:9c:40:9b:f7:ce:5f:b2:55:
                    88:02:a2:d0:e9:e5:81:60:de:5a:65:b6:40:d0:80:
                    da:e0:6a:b2:df:24:1c:92:dd:3b:66:6e:94:01:4f:
                    5d:5d:ee:c3:00:1c:5c:41:6a:57:4a:01:e9:13:ee:
                    cc:c5:58:28:66:62:e6:7f:a0:70:f6:1e:bd:3a:53:
                    db:f3:f6:cd:a3:b6:85:57:0d:94:a6:53:4e:d7:f2:
                    28:18:c5:77:7d:40:5f:e3:c1:4a:b4:fd:a2:db:2c:
                    99:1b:55:17:49:a4:65:50:92:64:ca:4c:2f:94:08:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9C:82:B3:34:0F:F9:15:31:8F:C0:0F:93:C1:7A:58:BE:9D:77:4B
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:12:dc:0b:2b:e2:10:87:a6:ec:3b:c7:b4:6e:94:20:7c:d5:
         d5:61:34:62:d1:71:ca:3d:27:14:01:cc:46:81:0e:e2:30:17:
         4f:fd:65:bf:a5:c0:08:a5:a5:3c:dd:77:ab:e6:6c:94:39:11:
         e1:58:da:a0:aa:5b:ec:33:00:af:de:f4:59:33:9d:81:64:ba:
         00:ab:7e:1b:ad:94:1d:46:af:97:49:a7:3b:b3:06:54:c0:3e:
         93:a0:41:97:03:06:8c:20:86:2a:7c:b2:0f:e0:e0:dd:74:67:
         5d:82:e7:0c:91:5d:83:64:9a:f9:23:e4:92:78:fa:89:3c:af:
         a8:9b:45:f1:aa:20:9a:5a:30:b8:2d:27:4b:64:b3:3a:0b:46:
         15:5f:31:83:6d:5c:b9:00:f2:e2:51:05:19:71:57:26:df:9b:
         96:84:64:59:56:04:73:bc:8a:af:ba:4b:25:a0:64:89:79:51:
         63:4c:c8:9b:db:a3:86:e5:08:79:4e:a8:84:6a:f4:46:92:e7:
         82:5f:9c:42:7c:6d:93:45:2b:9a:05:35:3d:8f:e5:fc:4e:7b:
         f5:bb:ab:6f:a1:b0:c0:23:de:e7:7e:6d:88:9b:f4:d5:8e:8a:
         b7:4b:ed:c8:a5:c2:5a:f2:be:a4:68:db:02:14:8b:b7:8d:f7:
         35:de:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 01:24:38 2026 by rpki-client