Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File:                     Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier:          jvbYyWnddiCzIIBKCrgxlWI8QNbpNRxuFXbhLviKv7k=
Subject key identifier:   5C:18:0B:EF:DD:22:A4:2A:B5:4D:C7:F9:17:0C:3F:50:5A:33:44:E9
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer:       /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial:       01A13E26331640C8B0EC79F790919ED3DC45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number:          1AA9
Signing time:             Thu 15 Oct 2026 06:00:53 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:53 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:53 +0000
Files and hashes:         1: 7kcTDPtrsAccIFtq7M7wM_oA42o.asa (hash: jfkqgTwMmeuO5g0zs7rfVVOHUNY0M+VynB68Y9zU2I4=)
                          2: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
                          3: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: EifxiSaJG+WiAGb5garp+ZhJNa5oendy1eG/pKPSwDU=)
                          4: kKPUL3XL5kfL6DXSXiFlJFUqzf8.roa (hash: MqfgECWtHRXZOaXWHtLXuKHhrTsYhuIDOqY4suEA3jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:33:16:40:c8:b0:ec:79:f7:90:91:9e:d3:dc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
        Validity
            Not Before: Oct 15 06:00:53 2026 GMT
            Not After : Oct 16 06:00:53 2026 GMT
        Subject: CN=5c180befdd22a42ab54dc7f9170c3f505a3344e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:40:0f:7e:ad:ba:73:25:f2:f4:16:e4:9f:
                    be:42:da:a6:cb:12:27:d8:b5:3d:60:52:ff:e1:3a:
                    b3:be:6a:5c:3c:a8:bb:a4:c9:8f:60:4d:c8:1a:47:
                    29:34:5d:ca:e1:be:17:bd:78:c2:dd:ed:1e:cb:5d:
                    af:0a:13:57:36:b2:7e:17:fd:21:88:8c:e1:20:54:
                    22:21:b7:83:50:d2:e4:55:97:c9:5f:db:4e:a2:61:
                    17:76:df:92:10:0a:81:25:d9:4e:5a:af:0e:a4:00:
                    d5:e2:68:56:ae:9b:bc:9a:f0:7b:df:4e:06:ac:4b:
                    40:d1:02:cc:d1:1a:63:df:6d:65:53:66:aa:b0:68:
                    9f:46:0a:fc:4c:3a:7f:0c:29:73:02:69:ac:00:e9:
                    78:0c:17:63:9d:45:5e:e6:24:94:c0:80:16:50:27:
                    24:ce:e5:30:a1:81:f3:11:3d:69:77:b0:09:38:d7:
                    19:21:38:90:3a:18:fc:07:67:b4:98:e1:cb:ab:16:
                    7c:8c:ca:80:4f:a2:c1:da:3d:90:1a:c9:47:3e:7e:
                    57:85:54:40:33:3c:85:2f:5f:16:82:2b:76:39:14:
                    48:d5:3f:d4:b7:87:23:35:22:22:d0:bb:1c:e8:dd:
                    20:79:15:82:e0:40:e4:d0:49:74:5d:bd:5c:72:de:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:18:0B:EF:DD:22:A4:2A:B5:4D:C7:F9:17:0C:3F:50:5A:33:44:E9
            X509v3 Authority Key Identifier:
                keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:30:ab:04:4a:96:ac:0c:74:d0:8d:96:4a:f1:d0:9c:3d:
         fe:be:32:8a:32:b4:2a:de:3e:f9:be:e5:41:59:23:5b:e5:e1:
         5a:c2:b3:6c:0f:34:64:e6:3b:ac:2a:0a:fe:b5:b5:99:84:21:
         ee:9f:61:c3:d4:16:a1:4c:82:25:4b:a3:3a:e1:ef:88:a2:c4:
         9d:dd:6c:5f:2a:e3:c2:de:d7:0a:9c:fc:f8:be:25:27:d2:ad:
         0b:2e:80:b5:34:8d:0a:b2:20:97:85:04:7e:45:18:41:fd:1a:
         bb:41:ce:4d:94:c6:6b:21:48:69:ed:96:2f:87:28:4c:c4:fd:
         49:08:ba:e3:8e:4c:4e:fe:5b:e5:64:76:09:43:e2:df:8d:39:
         22:b2:dc:26:35:a1:d9:2b:2f:ed:8b:ac:4b:3e:95:2c:10:fa:
         2d:ee:93:20:98:33:eb:17:00:b1:04:f1:49:76:09:4e:33:7a:
         0f:bb:06:e4:d0:34:79:4e:d9:ef:f6:fe:df:b3:a5:ce:71:0a:
         7a:f1:4f:91:40:91:08:ae:10:d5:05:a6:1a:49:18:7c:30:57:
         7f:ae:b1:4d:4b:74:e5:bf:5b:8b:c6:83:42:6f:21:71:58:79:
         37:d3:b7:6f:d1:a1:5d:76:b8:4e:62:d9:a1:6f:a6:9f:b0:ea:
         3e:aa:a1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:02:02 2026 by rpki-client