Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
File:                     qFERp16dOcxDDqhbjSkgYNnop8I.mft (raw, json)
Hash identifier:          mzVZ/kXkwIHWOeIMA2GSJfC4BtJfPQFI8E1dQImLAfQ=
Subject key identifier:   9A:05:9F:40:B4:8F:05:5B:18:15:D5:3C:28:FC:03:6A:82:CD:BA:26
Authority key identifier: A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
Certificate issuer:       /CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Certificate serial:       01A0C444D3F4ACF5A7E82BC989E1FFB3D697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
Manifest number:          010F
Signing time:             Mon 21 Sep 2026 14:00:40 +0000
Manifest this update:     Mon 21 Sep 2026 14:00:40 +0000
Manifest next update:     Tue 22 Sep 2026 14:00:40 +0000
Files and hashes:         1: h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa (hash: wHSgIizYN0GV/TTAR4CRTTTf21VDW35ePjsqiIQojnU=)
                          2: qFERp16dOcxDDqhbjSkgYNnop8I.crl (hash: m4+6qVfghC0r57coOoNgRU9eytDLWbOKfyOGOmo4DJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:44:d3:f4:ac:f5:a7:e8:2b:c9:89:e1:ff:b3:d6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
        Validity
            Not Before: Sep 21 14:00:40 2026 GMT
            Not After : Sep 22 14:00:40 2026 GMT
        Subject: CN=9a059f40b48f055b1815d53c28fc036a82cdba26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:07:f2:91:13:12:01:cf:d8:ed:0c:d6:dd:
                    3a:14:19:3e:36:4f:a7:4a:4d:60:42:ea:e1:a8:af:
                    0b:c4:fc:9e:c3:54:a2:7c:47:0c:9b:82:e0:7a:68:
                    10:87:85:26:3f:e0:3d:48:e6:a2:15:39:fc:39:9e:
                    ee:db:c4:be:fc:be:78:9f:a0:9b:13:12:4d:b7:41:
                    05:0e:c3:38:70:46:50:70:32:38:b1:68:e4:0f:3b:
                    77:d0:b9:65:22:0a:90:b0:cf:a7:9c:6f:c7:8f:da:
                    94:ee:d6:39:3c:ea:db:b8:48:38:b7:09:fd:1e:59:
                    9d:12:5f:19:2f:a4:08:47:39:86:5f:12:af:8a:a9:
                    33:b2:68:eb:e1:2b:14:0c:30:86:de:22:39:fb:6b:
                    d4:3a:dc:b7:52:6b:0e:ab:d8:a9:d4:b8:1b:b9:b1:
                    28:2b:1b:6d:60:b0:b8:4c:89:5c:dd:11:f3:08:a5:
                    d6:88:0e:95:5b:4b:9c:6b:95:fb:b4:9a:32:ad:11:
                    ad:1f:54:da:3d:1d:80:15:8d:20:12:f5:5f:aa:ba:
                    8d:c0:34:26:ae:3a:e8:1e:ce:f1:70:c8:15:0a:e3:
                    4e:ad:ae:af:90:6b:2e:f0:c8:69:85:49:33:62:13:
                    b6:e3:69:48:92:0f:8f:04:ec:38:68:0d:26:b8:44:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:9F:40:B4:8F:05:5B:18:15:D5:3C:28:FC:03:6A:82:CD:BA:26
            X509v3 Authority Key Identifier:
                keyid:A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:58:cd:18:17:e5:b8:17:eb:e0:ce:1b:da:18:86:0a:27:3a:
         c5:0c:15:6d:96:2a:21:54:d6:94:7d:7f:ed:b2:d7:ea:2f:bd:
         16:5f:ed:5b:88:35:00:22:67:0f:60:27:2c:88:09:22:23:df:
         e1:5e:55:73:eb:d1:15:15:85:d2:ce:2e:2d:44:37:c2:0f:2e:
         4a:25:a0:09:ce:78:4e:64:8c:77:fd:e8:76:5e:31:24:ee:9e:
         45:88:cf:e0:75:55:c5:32:a5:08:8f:e1:9e:71:a0:5c:0a:7e:
         6d:4b:a2:7b:76:3d:df:d1:35:ec:9f:58:83:cb:31:ce:78:49:
         c4:e6:bf:8b:78:cb:e1:f6:26:e1:91:ee:b0:43:82:38:c0:2d:
         49:0a:68:86:fd:a8:9e:e1:3c:33:f4:8d:25:5b:08:07:b5:6e:
         59:73:4f:c2:4b:3a:bc:92:04:e2:ad:8b:9f:fd:5f:27:3e:1f:
         a8:f1:4f:c8:ef:95:8e:38:46:47:b7:11:73:b7:85:a9:4f:c2:
         6b:cc:56:39:78:73:13:bf:50:2a:ce:0b:c4:2b:a4:72:c9:e3:
         09:c9:6b:f0:92:74:1c:82:29:0b:56:08:8f:2f:93:4a:1c:02:
         5d:1f:93:09:ad:c9:33:ba:20:d3:f9:9a:fb:bf:83:08:d1:d6:
         4e:75:d6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:03:36 2026 by rpki-client