Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          2V9ywXzpwqK3ucTOfe1vpxpncKH52Y6bovEG4QJZcrQ=
Subject key identifier:   FB:22:7E:8E:2F:21:FE:D5:8A:33:C4:8A:39:DE:FF:35:63:5E:C3:16
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       01A12AD6E5EAC06CBB21202AF33A2F2CA784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          1A2C
Signing time:             Sun 11 Oct 2026 12:01:28 +0000
Manifest this update:     Sun 11 Oct 2026 12:01:28 +0000
Manifest next update:     Mon 12 Oct 2026 12:01:28 +0000
Files and hashes:         1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=)
                          2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: H37q6i21AE+immKkFlupYeVH5aEIRWMieZhKaKGtRCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d6:e5:ea:c0:6c:bb:21:20:2a:f3:3a:2f:2c:a7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: Oct 11 12:01:28 2026 GMT
            Not After : Oct 12 12:01:28 2026 GMT
        Subject: CN=fb227e8e2f21fed58a33c48a39deff35635ec316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:22:71:6c:9c:53:a8:f4:d6:77:00:04:32:4c:
                    69:07:1a:bf:dc:89:1c:28:ed:d3:7e:1a:2e:96:ee:
                    14:73:d1:4a:a5:04:12:a2:2f:db:e2:df:2b:6f:2a:
                    2a:4f:30:5b:74:62:dd:7d:13:c4:2d:73:ca:34:52:
                    b2:b2:dc:80:b5:3a:6a:80:75:1a:f5:53:77:d8:e5:
                    e5:bb:ce:24:17:66:c9:d7:96:d1:fb:70:97:05:ee:
                    2f:95:33:b0:a0:ad:00:53:df:d5:e5:3a:63:be:e8:
                    a9:bd:dc:a8:b1:48:47:18:09:ad:cc:52:c6:4a:d4:
                    b4:51:af:69:d9:60:ed:55:48:cb:ad:cc:8f:8c:74:
                    ce:cb:27:7b:85:99:85:7a:1a:66:36:7d:44:58:53:
                    9c:8e:e2:af:79:2d:0b:07:85:10:13:1c:b6:d3:58:
                    cf:c8:cc:59:fb:98:f8:8c:79:a3:e8:d4:d3:6c:27:
                    20:77:b6:c5:87:57:8f:e1:a9:22:62:20:44:1c:5f:
                    35:29:64:98:ce:ac:51:01:d7:b2:ef:6a:ac:4d:fd:
                    6e:07:65:86:d5:57:8e:0e:90:5d:f3:63:8a:cf:ee:
                    4e:d8:19:33:87:eb:70:24:4b:f9:dd:a4:17:32:01:
                    c9:a3:47:c9:90:5f:2f:1b:18:c7:55:82:86:0f:8a:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:22:7E:8E:2F:21:FE:D5:8A:33:C4:8A:39:DE:FF:35:63:5E:C3:16
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1b:b4:2a:64:40:76:4c:0b:bc:e9:2e:f8:c9:74:aa:2f:0f:
         69:c2:4c:7e:d2:08:c9:e4:9f:1a:2a:fd:65:67:23:2e:b7:06:
         93:3c:07:be:0f:b0:60:03:be:e9:aa:a6:9e:bd:67:76:1f:fe:
         57:96:60:0d:74:be:7a:15:bd:c0:e6:87:1e:14:ff:c3:f7:43:
         3d:44:cb:47:c2:b2:17:51:63:85:24:67:26:fb:49:63:71:25:
         ad:70:5d:39:bc:0e:14:60:5c:30:45:37:75:b1:0a:c9:b5:74:
         c9:c8:ba:e8:b6:a7:f5:5f:66:90:4a:ed:59:a4:60:d5:5a:0a:
         e9:9f:74:18:64:37:e7:e5:35:39:88:17:c7:0e:ac:00:3f:71:
         59:c9:a2:12:34:f5:47:d6:a5:aa:40:d4:5b:61:e9:14:ca:0f:
         25:46:4e:a0:e5:1d:69:3b:c4:55:2b:06:d0:28:22:23:c8:a8:
         db:60:7d:fc:98:e4:e1:57:16:37:a0:2d:31:62:5d:15:96:27:
         4a:44:ec:5a:ac:96:46:ce:0f:50:f1:a0:88:3f:4e:bf:b9:19:
         65:04:7a:38:91:e2:cc:7a:43:50:29:b9:8f:fa:f4:6a:81:b6:
         65:8b:98:57:35:1c:7c:a0:84:da:23:bc:80:c4:04:ce:b7:1b:
         ae:0b:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:25:07 2026 by rpki-client