Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File:                     qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier:          4Zc7QNtAgfWNX/cr7jT6j5BFWV6UIgb86apxprcHOzg=
Subject key identifier:   66:59:5D:43:48:7B:74:7B:62:AC:A9:9D:D7:A4:01:C1:3A:96:0F:2E
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer:       /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial:       01A13A80078996D6201D9EACE31E5CFEC5D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number:          0E4A
Signing time:             Wed 14 Oct 2026 13:00:31 +0000
Manifest this update:     Wed 14 Oct 2026 13:00:31 +0000
Manifest next update:     Thu 15 Oct 2026 13:00:31 +0000
Files and hashes:         1: 1-lRhzID0tFMbdlzS02IqfVXKBIE.roa (hash: 1hKVs8qteOkHFrAM6Jt7PWsCcQe8VwZ1ACSk67ugkU0=)
                          2: 1yNxCmePPnXYmANALvF6crPNDSc.roa (hash: NnbT8iaws5JgljNe+UvSj+hAMr2jidNTvDwKfdnsRJM=)
                          3: IjH8Bw6khS3HfsHRDOq7KVhCvtE.roa (hash: xqV8sj84jv/de5gXJFmozbmUfKDQmxucnoddgaBj3m4=)
                          4: cMufgoQU0L0jv10NNeCceGj__mo.roa (hash: nQdacmV+KrpQrHaTQNA9qp4TW/zHU/aMagi4CQEt/fQ=)
                          5: o4XRIYaubJYsaKle7Mq2zp2yQPU.roa (hash: /2hj0m+hPdpMrzwdZKFg60yCkkhQ3QugnRJdjSqOsJc=)
                          6: osiPIqZHFwJFJVDnL4CHHio8HdM.roa (hash: vGPA8SjpFPALGX8zEZpTARWGQMkoh1k17+6L+YmNaLY=)
                          7: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: 7vfzzL6Nr5/MCBOzvq3v1E5Yo9f4ElBITvx7o9rnW1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:80:07:89:96:d6:20:1d:9e:ac:e3:1e:5c:fe:c5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
        Validity
            Not Before: Oct 14 13:00:31 2026 GMT
            Not After : Oct 15 13:00:31 2026 GMT
        Subject: CN=66595d43487b747b62aca99dd7a401c13a960f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:0d:47:ba:83:b0:bc:10:c8:c6:ef:37:6c:
                    9c:a2:32:34:15:ac:f4:74:36:7f:74:3c:d2:e3:51:
                    e5:1f:7d:07:9f:33:16:5a:f9:2c:7e:9f:55:82:08:
                    9c:da:08:02:ea:f5:20:3e:b4:29:61:cf:50:4f:a9:
                    1d:a5:88:78:f1:60:06:34:6c:3b:1e:15:43:d4:54:
                    47:7d:3e:b4:1f:18:84:71:7e:e7:6f:4f:a9:bc:b5:
                    5f:fc:bf:bb:35:ce:5e:a6:82:da:0d:6d:91:6d:16:
                    bb:0b:6b:2d:37:7c:e9:02:06:9b:a6:3e:70:32:83:
                    ab:26:ad:32:93:f6:48:c8:53:22:cb:d3:72:1f:25:
                    2e:51:b6:bb:46:14:15:67:09:cb:be:f4:b1:e0:2c:
                    81:84:51:72:fd:d5:88:73:8d:28:03:15:fe:e1:5b:
                    40:f9:87:a9:b7:31:5b:38:a4:73:ed:69:82:00:b8:
                    c7:45:3d:d8:88:9e:7a:cc:1b:9a:23:b1:00:04:16:
                    da:3d:58:a4:fc:d3:26:ac:55:d7:ae:2d:15:a1:2e:
                    ea:e3:88:8e:c7:f2:6a:47:cd:d2:d7:fd:3a:8f:27:
                    3b:a2:6d:05:09:87:a3:78:1a:5e:e2:44:97:34:63:
                    d4:5f:a3:3f:ff:20:f2:78:f0:ac:b8:b8:f7:1b:7f:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:59:5D:43:48:7B:74:7B:62:AC:A9:9D:D7:A4:01:C1:3A:96:0F:2E
            X509v3 Authority Key Identifier:
                keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:b7:7f:fc:d5:59:fe:91:6d:44:d1:94:bd:10:d0:c7:0c:
         28:5e:b7:a4:21:ca:eb:a4:ba:5b:ea:5e:b0:91:47:65:5e:32:
         7e:f4:04:de:bb:bf:6c:32:3e:ae:2c:d8:64:4c:22:20:9f:9b:
         42:69:e4:46:a6:cc:82:a5:6c:45:d4:e1:eb:80:29:1f:ba:ca:
         21:d9:37:f5:4e:04:e1:ee:31:a9:42:3c:a7:30:ad:7b:d5:97:
         3c:a8:ea:c0:39:ae:07:6b:bb:32:e6:81:48:62:ad:c3:d1:85:
         ab:ad:dc:cc:5f:b5:75:9e:b2:7d:f6:8f:b4:ea:64:6b:fd:6c:
         9c:fa:75:a4:11:cd:df:06:6a:de:2d:2f:d8:d7:95:b9:fe:c2:
         13:b1:f4:21:e6:4b:56:fc:25:8b:67:1d:55:55:9f:75:21:5f:
         31:df:51:8b:2a:01:34:98:4a:94:97:e1:1e:df:99:50:74:d2:
         9a:f3:b2:43:62:37:0c:84:b1:a4:d1:42:d3:3d:33:f9:31:6b:
         68:6f:5e:9e:e3:97:64:bf:c8:c4:15:7d:a1:bc:bc:df:4d:30:
         a5:d0:ce:ca:43:7a:32:9a:c8:2e:2a:e7:0a:f7:54:cc:3b:69:
         2e:89:5e:58:03:15:e7:92:7a:f9:6c:57:d1:5b:5d:83:cd:08:
         9b:7a:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:32:36 2026 by rpki-client