Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File:                     2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier:          x3mRbR0FZSOVv3dQwQEner4je7FSI6d6XNqxIaeu6Uk=
Subject key identifier:   7C:EE:83:6F:A7:6B:EE:18:F7:74:27:0C:74:62:68:ED:EC:1E:1B:C8
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer:       /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial:       01A0C9D96678D6A5ABF4A5707DC7D51F5EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number:          0B14
Signing time:             Tue 22 Sep 2026 16:01:02 +0000
Manifest this update:     Tue 22 Sep 2026 16:01:02 +0000
Manifest next update:     Wed 23 Sep 2026 16:01:02 +0000
Files and hashes:         1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: QAC8YeN1Fkuap/WPu6CZWRZx6eTJzMGm2kHjM0wSDSg=)
                          2: iZ4FmBUmzQ1jjTqXhvURrWn4Be4.roa (hash: 2U9RkTvh/CP+gL154cvBJ8P7xRzyHflZ/rH4Y3M1elw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d9:66:78:d6:a5:ab:f4:a5:70:7d:c7:d5:1f:5e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
        Validity
            Not Before: Sep 22 16:01:02 2026 GMT
            Not After : Sep 23 16:01:02 2026 GMT
        Subject: CN=7cee836fa76bee18f774270c746268edec1e1bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:4d:28:eb:39:2a:cd:17:c9:78:e9:ca:5d:
                    15:e7:28:51:29:35:3e:da:cf:fc:91:33:45:8b:65:
                    b8:81:4d:c9:67:63:2a:10:69:9a:da:88:2e:73:74:
                    fb:06:b5:e6:23:46:57:1a:11:fc:0a:aa:3a:be:8c:
                    ba:fe:ea:f3:b3:7e:84:ed:c3:86:0b:53:13:25:db:
                    d6:f0:9e:fb:9b:da:a6:76:8e:b0:2c:3b:fe:76:c9:
                    0b:82:bf:71:2d:49:f5:d4:e6:6a:c1:44:85:2c:5c:
                    96:a9:ea:cf:dd:e9:b8:2e:d9:b1:4a:47:85:8e:62:
                    70:b4:32:e8:2d:a5:cc:80:01:42:2c:57:83:48:28:
                    7a:91:c7:12:47:4c:9f:f1:4b:14:68:78:cc:fc:e0:
                    28:7f:77:22:99:04:b2:33:14:80:61:c6:6d:fb:1b:
                    65:2b:13:ec:0b:0e:e8:e1:ec:bb:c4:31:05:72:ea:
                    52:33:94:63:57:a3:90:c2:05:63:4c:cb:d6:48:08:
                    b4:45:e4:ee:79:65:fc:cd:cc:f6:c1:17:ca:72:62:
                    3b:a5:dd:8b:11:92:c9:5c:c0:58:ff:a3:ac:df:1c:
                    0b:fd:c7:68:3f:d0:f3:67:1d:aa:aa:9a:c2:e1:29:
                    a9:45:d2:62:3f:fd:68:2d:ee:fa:9b:e1:65:11:b7:
                    3b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EE:83:6F:A7:6B:EE:18:F7:74:27:0C:74:62:68:ED:EC:1E:1B:C8
            X509v3 Authority Key Identifier:
                keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:b2:a6:1b:86:4b:b9:3a:d1:3a:8c:33:72:95:96:ac:0c:
         e6:51:a6:df:ee:4e:81:94:71:ca:f5:39:72:3e:59:98:20:61:
         a5:2c:18:ec:34:8f:7e:21:d7:a1:ab:bc:e8:ed:4d:b7:e1:1f:
         13:87:99:53:59:c5:00:5e:32:ea:c3:db:0b:ef:14:5c:36:be:
         85:77:9d:c4:0f:dc:a5:4e:55:3c:e3:19:0b:43:b1:02:8a:a4:
         c8:1d:cb:bd:73:79:68:bb:bd:67:26:42:a6:2e:02:f9:6d:43:
         e2:45:af:84:0a:21:b7:26:20:47:5f:d8:43:f0:f2:49:96:78:
         ed:29:56:42:0a:a1:c4:9d:81:ad:06:d3:6c:01:09:71:41:c0:
         2c:27:c6:a9:bb:47:e1:30:bc:72:47:13:91:58:72:bf:fc:4f:
         fe:90:1b:3a:6b:38:c1:bd:12:01:6b:1e:82:f3:26:df:fa:4d:
         7e:e7:5d:61:87:18:5d:cb:9a:7e:8f:8f:c0:86:dd:84:36:38:
         dd:31:47:01:60:8a:bb:4d:53:0c:3c:3a:55:d5:e7:d6:09:b2:
         6e:d7:bc:82:54:1c:75:a3:a6:56:1a:c1:64:10:0b:92:04:bf:
         66:37:8c:d8:0e:90:67:3d:39:f1:53:7c:64:6d:45:80:10:5d:
         50:25:a3:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2WZ41qWr9KVwfcfVH17+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDc4NGZkODFkNDllYzQ0NWEwOWIyZDA2ZjhlNTYwY2Rh
YTA2YTYwHhcNMjYwOTIyMTYwMTAyWhcNMjYwOTIzMTYwMTAyWjAzMTEwLwYDVQQD
Eyg3Y2VlODM2ZmE3NmJlZTE4Zjc3NDI3MGM3NDYyNjhlZGVjMWUxYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEJNKOs5Ks0XyXjpyl0V5yhRKTU+
2s/8kTNFi2W4gU3JZ2MqEGma2oguc3T7BrXmI0ZXGhH8Cqo6voy6/urzs36E7cOG
C1MTJdvW8J77m9qmdo6wLDv+dskLgr9xLUn11OZqwUSFLFyWqerP3em4LtmxSkeF
jmJwtDLoLaXMgAFCLFeDSCh6kccSR0yf8UsUaHjM/OAof3cimQSyMxSAYcZt+xtl
KxPsCw7o4ey7xDEFcupSM5RjV6OQwgVjTMvWSAi0ReTueWX8zcz2wRfKcmI7pd2L
EZLJXMBY/6Os3xwL/cdoP9DzZx2qqprC4SmpRdJiP/1oLe76m+FlEbc75QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzug2+na+4Y93QnDHRiaO3sHhvIMB8GA1UdIwQY
MBaAFNkHhP2B1J7ERaCbLQb45WDNqgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQt
MTYxMGEwYzk5M2I0LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQtMTYxMGEwYzk5M2I0
LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThCyphuG
S7k60TqMM3KVlqwM5lGm3+5OgZRxyvU5cj5ZmCBhpSwY7DSPfiHXoau86O1Nt+Ef
E4eZU1nFAF4y6sPbC+8UXDa+hXedxA/cpU5VPOMZC0OxAoqkyB3LvXN5aLu9ZyZC
pi4C+W1D4kWvhAohtyYgR1/YQ/DySZZ47SlWQgqhxJ2BrQbTbAEJcUHALCfGqbtH
4TC8ckcTkVhyv/xP/pAbOms4wb0SAWsegvMm3/pNfuddYYcYXcuafo+PwIbdhDY4
3TFHAWCKu01TDDw6VdXn1gmybte8glQcdaOmVhrBZBALkgS/ZjeM2A6QZz058VN8
ZG1FgBBdUCWjsQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:52:21 2026 by rpki-client