Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File:                     qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier:          rAkg2jefPy3ab99JLpJnUXbv+Nqpuc+Pe5SEDBcsaAQ=
Subject key identifier:   BE:7E:E1:B2:C6:D8:5C:F2:45:94:F0:0B:2E:78:70:BA:19:25:F4:4F
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer:       /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial:       01A13F3997CA4BE1C84A9D1EB03421CB9529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number:          096E
Signing time:             Thu 15 Oct 2026 11:01:41 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:41 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:41 +0000
Files and hashes:         1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=)
                          2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: adxlGvRsyL0vGbeCYkcUKc2kCwlfCg2MaD6OZ04fPKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:97:ca:4b:e1:c8:4a:9d:1e:b0:34:21:cb:95:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
        Validity
            Not Before: Oct 15 11:01:41 2026 GMT
            Not After : Oct 16 11:01:41 2026 GMT
        Subject: CN=be7ee1b2c6d85cf24594f00b2e7870ba1925f44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:eb:d9:da:f6:bd:66:f7:ac:ca:92:a7:3f:
                    1e:f4:14:dd:76:fd:03:1a:e1:aa:12:09:bf:be:48:
                    61:6a:a4:ba:d4:17:08:ae:04:58:8e:52:9a:c5:8c:
                    a8:81:95:7d:81:63:9d:89:38:01:81:dd:b6:3a:71:
                    33:46:bc:66:b5:b9:de:0c:87:4e:77:e9:6a:7e:1b:
                    6c:a6:d5:dd:98:a4:97:80:b1:c2:7d:e7:63:fb:69:
                    c6:40:fc:31:f7:84:29:94:54:a6:90:ab:10:9d:01:
                    9e:fc:3c:30:07:b5:12:70:a1:18:0f:f0:c3:f6:aa:
                    59:ab:bd:db:0f:8b:be:32:34:66:fd:7d:72:2e:f5:
                    e5:45:d5:5c:28:56:7e:8a:8a:f7:b0:2f:6e:2c:6a:
                    fd:b0:ad:7e:a8:8c:5d:4c:38:02:b7:4b:5d:7c:5d:
                    cf:9e:18:f6:40:a0:8d:2f:f1:f3:1b:15:6e:f7:f2:
                    f0:98:8c:3d:67:d9:1c:98:65:c6:36:c9:10:b5:8c:
                    15:0e:68:5b:f0:81:cb:b5:b9:bf:7c:5b:b2:a0:9f:
                    3d:c2:66:c4:f8:43:a5:1d:b4:c8:a2:25:74:a0:89:
                    18:34:84:5c:b3:02:fc:9e:c4:b3:7d:96:e3:8e:e3:
                    80:f5:67:f6:3c:2e:38:52:78:a0:67:ae:fc:95:0b:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7E:E1:B2:C6:D8:5C:F2:45:94:F0:0B:2E:78:70:BA:19:25:F4:4F
            X509v3 Authority Key Identifier:
                keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:f8:34:bb:b2:f6:c6:cd:b6:dc:7e:5c:2f:a3:dc:bd:1f:
         de:ce:70:f0:e5:00:d7:f3:ad:64:92:a6:5c:1b:cf:83:02:5d:
         87:9c:9b:28:66:11:f9:7c:c9:92:a8:20:09:0b:3d:89:9f:24:
         7e:f0:ca:11:d4:a7:cc:fa:fb:81:bf:33:d1:fd:13:eb:43:79:
         b3:a6:b7:fb:9d:bf:b3:88:0e:05:6d:2d:56:51:17:03:fc:33:
         dd:d6:6f:a5:45:92:a8:1f:32:16:67:0c:cf:b4:20:c7:6c:a0:
         84:ea:9b:72:9f:5f:3d:2c:0c:2d:35:12:66:82:71:a4:2a:2d:
         fb:5d:39:8f:89:ee:8f:57:39:11:68:a0:ca:c7:0f:67:bd:28:
         10:a3:1a:df:78:27:cd:f8:fb:23:ed:85:28:55:ea:2d:9b:83:
         a1:43:05:40:1e:b2:63:26:0c:0d:c2:d0:11:c7:28:3c:7f:66:
         f6:75:27:ef:e4:49:21:52:df:f7:69:47:11:fb:39:7b:82:9c:
         c5:db:68:19:59:aa:58:b2:f5:0d:42:96:0f:34:e8:ba:b2:4e:
         85:c1:32:37:6a:b9:a8:90:d0:a6:ae:15:89:c2:64:2c:12:40:
         73:83:4a:26:28:5e:5d:f1:c5:05:38:42:34:06:67:6b:df:b1:
         c6:ae:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:27:38 2026 by rpki-client