Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File:                     qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier:          g9hO9lqmVgGJJGNmIxGIVPyANbzcV4AwcXH5plsX3+0=
Subject key identifier:   8F:93:7C:5C:E7:6A:7A:C4:50:CC:AD:70:3E:26:BE:C7:34:CE:C7:67
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer:       /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial:       01A0CE5A8B631EB000C0F561F67BD0179632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number:          18A0
Signing time:             Wed 23 Sep 2026 13:00:35 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:35 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:35 +0000
Files and hashes:         1: H2T8PA1785l6gX-iVp9IuPaA4Nc.roa (hash: 6faWeYIv5Ai9qI/fX55pW1xZn22WZewYCnXhS25+v6I=)
                          2: Xz4dqhqCzoZvF10IK-TkgPiAc5Q.roa (hash: ZFUgfRsBRCs1X5BDvrArX90/CdgfBgfrW7Rw9sq2N84=)
                          3: lyOH-P2_hH5Ugem7r8kpnkt99SI.roa (hash: GiPFjQfoJkQaMedHXbS4M3+BR9UAmP0J6PtJlsbWkGg=)
                          4: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: 73RAtwU7FHkGuAzbYPQswwID5R98wZ005gKlZBbqh5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:8b:63:1e:b0:00:c0:f5:61:f6:7b:d0:17:96:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
        Validity
            Not Before: Sep 23 13:00:35 2026 GMT
            Not After : Sep 24 13:00:35 2026 GMT
        Subject: CN=8f937c5ce76a7ac450ccad703e26bec734cec767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:b7:e0:bc:91:e6:67:a4:8c:99:9e:88:a6:
                    05:ee:a7:11:ae:60:6c:f7:de:a5:eb:95:08:d2:ff:
                    65:c2:3c:25:20:ba:d0:26:b1:73:c3:ab:2b:bc:43:
                    fd:2b:8d:f2:22:71:ee:6f:25:05:8e:77:d4:6e:76:
                    a7:1b:08:0a:2f:09:85:62:c9:37:aa:c7:44:e6:03:
                    6e:86:eb:a1:62:00:eb:7d:64:ea:af:07:ff:7c:ba:
                    38:f4:d3:66:d3:03:14:ad:54:c1:9f:36:30:57:31:
                    4b:26:c7:fd:2c:fc:eb:75:77:65:d5:5a:32:4c:de:
                    22:e7:a9:e5:29:e5:bb:d3:58:7a:ab:75:c8:91:a1:
                    ca:4a:c5:c6:30:de:5c:11:51:e3:63:fe:73:48:4e:
                    be:f4:f8:62:d1:e8:49:e1:66:24:46:ac:bc:1c:b9:
                    0f:0f:77:3e:c3:47:f0:f3:a0:2b:34:60:2c:14:81:
                    20:14:7b:0e:b4:7c:17:36:bd:02:83:8a:f7:72:34:
                    b3:d6:d9:e4:38:ec:68:37:a1:d9:f5:89:07:55:c8:
                    8d:3f:72:d0:8e:dc:4c:9b:4c:23:c9:a3:ce:2f:2e:
                    c9:14:65:9f:d6:64:88:ad:ca:69:38:47:df:c4:7e:
                    96:4e:1f:dc:9b:c2:eb:37:1e:77:39:53:77:95:e7:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:93:7C:5C:E7:6A:7A:C4:50:CC:AD:70:3E:26:BE:C7:34:CE:C7:67
            X509v3 Authority Key Identifier:
                keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:58:54:44:81:5c:ba:45:ac:d2:b5:71:99:70:4f:21:93:a2:
         04:34:e7:09:b8:d1:bc:f2:d5:26:de:9e:de:2d:56:42:e4:aa:
         0c:7b:ed:48:96:5d:54:17:ae:15:12:d6:c0:4a:3e:29:2f:8d:
         ad:5f:a5:b9:28:cd:5e:f3:5d:40:3d:a7:d8:c1:c7:d8:11:44:
         a4:73:92:5a:38:9f:c8:fb:e4:59:9b:cd:13:02:0d:53:30:ce:
         d2:7c:0b:90:e0:8b:52:6d:bb:fc:91:c9:9c:37:79:40:67:01:
         32:da:a6:c1:0c:5f:a4:44:d3:a7:ef:f1:7d:f6:2b:13:60:fc:
         b3:40:8d:57:07:2b:b3:9e:fb:5e:12:8e:eb:4b:6f:94:29:72:
         d4:ff:33:8d:5d:b7:1d:c4:42:14:2f:8d:38:b2:60:e2:9d:c4:
         03:8e:81:f5:68:59:5b:3a:00:41:e3:c9:bc:bb:bb:9e:24:f5:
         76:a6:df:ff:32:62:84:eb:49:a1:d4:8e:c4:7d:3e:f4:f8:7f:
         94:1f:04:ef:5a:01:f2:93:19:9d:33:f3:76:80:d1:a2:93:a4:
         da:1f:ad:90:4c:ab:94:33:ec:63:8b:42:68:ae:93:04:5e:bd:
         bd:06:3f:3d:d2:46:5d:3f:07:11:09:27:6b:32:3c:b0:43:e6:
         09:5c:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:56:57 2026 by rpki-client