Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          isKVomUzih6rUTK2gLV5G1C+T0z1cuUQ602mvZdkqXI=
Subject key identifier:   84:56:8A:CE:2B:AA:99:CC:64:55:5B:B9:2F:4D:2A:2D:64:48:9E:D3
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       01A0C444DFA66775F27BB689D2577E7809DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          1A7C
Signing time:             Mon 21 Sep 2026 14:00:43 +0000
Manifest this update:     Mon 21 Sep 2026 14:00:43 +0000
Manifest next update:     Tue 22 Sep 2026 14:00:43 +0000
Files and hashes:         1: 7qTepYATqKVXyyn2qZtoxxFTcjA.roa (hash: zj/P1u6iWoahM98pNTDlWucnNtLUswY/H6W+OVzgPg0=)
                          2: CxTPA5mUFSfM5zzjG_pBiZdndNM.roa (hash: +LuWTLTvb4XLHwaIc7XtaBKu05lC9tlVeMmuHJRwLok=)
                          3: FmqdkGuPwkHtcktyjB7p6qiaaA0.roa (hash: N+eixnx0ef9WfVBXPd6Nijvy/VigzdNIgybnerIGWxw=)
                          4: J037jcIbssptRuiF7QThwckkgYA.roa (hash: VzXGhtcRmbTMvgupmIWbk2ydVSdHNyFjivXfWRp24D8=)
                          5: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: 0sf2ftntKTJ4j/8D8n8lcGEZLMX8Z0jnf1BtYafCr58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:44:df:a6:67:75:f2:7b:b6:89:d2:57:7e:78:09:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Sep 21 14:00:43 2026 GMT
            Not After : Sep 22 14:00:43 2026 GMT
        Subject: CN=84568ace2baa99cc64555bb92f4d2a2d64489ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:ac:15:ea:27:b1:19:2b:f8:ba:a3:89:32:
                    02:cc:65:ff:bf:13:e4:84:79:52:c8:04:fd:4c:af:
                    cf:1e:d8:66:0b:4f:4c:a0:48:40:7c:92:13:55:18:
                    7d:36:6c:7b:b5:a6:0f:6c:55:70:1d:a8:3c:3b:8c:
                    32:5f:c4:eb:f1:01:db:1b:c4:00:af:cb:38:a4:58:
                    d3:db:92:de:6a:72:7c:65:28:3f:72:4a:db:7b:16:
                    55:fd:e1:f4:1e:00:48:38:3d:bb:e7:7d:01:0b:6c:
                    a4:3f:5a:a9:55:06:34:ac:82:63:eb:bf:4a:b2:fc:
                    1c:8a:2b:a8:7d:1d:96:81:1c:83:df:0b:04:09:5e:
                    3a:06:48:61:9c:e7:05:e2:61:cd:41:1b:76:ad:1a:
                    fb:6c:85:f2:74:40:0d:29:fe:24:12:a3:db:78:0c:
                    65:62:73:cb:80:d7:7f:87:a1:fd:e3:51:6d:50:7e:
                    dd:6c:5d:eb:f5:90:b1:74:52:ad:bd:e4:84:a1:56:
                    ce:85:3e:df:ba:74:6d:a7:3f:c5:6d:14:c4:35:c9:
                    11:71:24:d9:93:56:1c:03:22:0b:ae:6f:89:70:9c:
                    18:20:e3:f9:0f:c7:d2:d7:39:b7:4a:c6:68:a0:c5:
                    c7:b7:44:fc:b8:1e:7d:e4:df:f8:ae:e8:2d:77:d3:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:8A:CE:2B:AA:99:CC:64:55:5B:B9:2F:4D:2A:2D:64:48:9E:D3
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6b:91:4f:bf:9d:8e:f0:ff:41:2e:e2:bf:2c:94:ce:e7:16:
         0a:33:99:71:c8:3c:f8:93:a7:56:bc:42:0f:06:58:55:03:dd:
         c8:db:e2:54:59:0d:9a:51:d1:52:ce:29:ce:63:4a:da:54:bd:
         ce:65:10:74:54:90:8f:2e:20:34:2c:4d:ab:94:b9:e5:cb:cf:
         2f:05:7b:e6:1b:62:52:cc:14:fd:c9:c1:19:24:f4:4b:64:79:
         75:6e:78:60:d9:78:aa:01:21:ad:34:e5:c4:74:03:20:08:2e:
         64:19:34:d3:b5:73:08:03:05:5d:02:f1:dd:d4:84:30:6e:20:
         04:31:3e:03:35:8f:69:f3:3c:44:39:3b:5b:24:b0:54:76:93:
         7b:7b:05:04:fc:73:50:7c:df:60:3d:a9:b4:cc:52:86:9c:f4:
         ae:50:2b:1f:0a:9e:fd:5d:46:3f:90:ba:27:0c:ec:1d:60:fe:
         7e:50:0d:79:eb:0d:33:cf:a8:8f:aa:77:12:ad:ed:d6:5b:75:
         63:be:8c:3a:f1:e7:0b:75:71:f4:b2:90:9a:1f:ba:f4:ca:f6:
         df:7a:94:0d:ce:80:80:5d:9b:d6:b3:73:ce:e4:50:07:c3:d2:
         5e:df:39:e8:f0:8b:f2:65:d7:dc:7b:f8:22:ba:33:6a:d3:a9:
         f7:5c:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:58:45 2026 by rpki-client