Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File:                     qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier:          XsL/6O6onz21FrtZtjlLek3Hnr/vYTHUm6CPYiI0YfE=
Subject key identifier:   4A:EA:BD:2A:A6:B4:4C:D9:04:83:50:C2:6C:E6:8C:2D:13:E9:5A:10
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer:       /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial:       01A1A2C9C80BF33713AF18085124AFD7D2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number:          0939
Signing time:             Tue 03 Nov 2026 19:01:35 +0000
Manifest this update:     Tue 03 Nov 2026 19:01:35 +0000
Manifest next update:     Wed 04 Nov 2026 19:01:35 +0000
Files and hashes:         1: aHdJjEV_MZGQhS1-oSIoUxNhu0w.roa (hash: V1XVv/qtFeaO0uUYLoorR9Olh/izTLbjNE3cg3DaNhc=)
                          2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: I5SFRkYmlvEbEBYm5j6JwasGIUcejwPeA3/w8ky2GKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 16:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a2:c9:c8:0b:f3:37:13:af:18:08:51:24:af:d7:d2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
        Validity
            Not Before: Nov  3 19:01:35 2026 GMT
            Not After : Nov  4 19:01:35 2026 GMT
        Subject: CN=4aeabd2aa6b44cd9048350c26ce68c2d13e95a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:04:5a:db:bd:a6:22:02:cc:72:e0:e4:33:
                    e0:6f:9a:4e:4e:1a:ef:fb:c6:94:a2:55:9e:d5:e4:
                    a8:f5:71:f7:db:3e:79:13:7a:a3:77:6c:ac:1d:bf:
                    c3:f9:fd:3b:ee:38:aa:ce:e8:85:35:e6:28:1e:b4:
                    f2:25:c4:a0:cd:83:11:ba:e9:d9:ea:ce:56:f8:58:
                    f4:0e:ed:cb:e5:74:ec:50:75:9a:77:da:e6:a3:57:
                    d6:95:c7:5c:11:54:2a:d2:13:f0:9f:da:86:ac:a0:
                    97:8c:0a:8e:00:8b:41:a6:45:43:2c:3c:25:6e:20:
                    0f:b1:0c:cc:fe:f7:2f:07:26:f4:31:1e:99:86:0a:
                    18:89:66:2d:c9:99:82:7e:23:62:8f:0a:97:3b:25:
                    6e:69:4c:80:7b:00:dd:09:41:2b:ef:55:40:1e:f4:
                    98:9f:cd:ef:7d:d1:bd:af:21:c1:bd:65:8b:cf:3d:
                    1d:54:40:f4:3a:3b:c8:30:7a:7e:2e:c8:ec:05:64:
                    65:e3:5f:fc:02:e2:d1:58:1a:c5:f9:8a:76:9c:28:
                    57:2b:82:a9:5b:58:5f:01:1a:08:d4:b4:e4:07:f4:
                    4b:da:bf:95:2a:7d:24:1c:0e:15:2a:9e:33:db:09:
                    10:33:0e:9f:46:17:2b:eb:52:9c:85:28:b0:98:27:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EA:BD:2A:A6:B4:4C:D9:04:83:50:C2:6C:E6:8C:2D:13:E9:5A:10
            X509v3 Authority Key Identifier:
                keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:05:b3:4c:8b:7c:97:42:35:37:2c:89:e3:a4:d1:5b:8d:af:
         68:48:30:d2:46:1c:40:b6:32:53:f8:0a:a5:6b:93:fe:5f:8f:
         60:1e:f7:55:9c:13:cc:b6:04:f6:e8:bb:b5:7c:d4:25:43:2f:
         a2:74:71:49:8e:ad:39:f7:e1:6d:cd:98:da:a5:38:aa:8e:1b:
         08:be:59:ea:68:9d:fe:aa:b2:fa:eb:34:cc:b3:95:fe:c9:8b:
         94:44:d8:62:ae:b4:14:28:26:e1:78:bd:f0:ec:e6:f3:15:61:
         28:e8:eb:05:d4:10:a8:24:4b:84:b5:d2:3d:84:bf:9f:e3:4b:
         b6:ad:f7:66:be:7e:b2:43:e0:58:14:d8:ba:e4:04:6a:30:ec:
         f9:f0:4f:7a:6c:f4:69:72:90:3e:7c:23:dc:54:de:8a:04:71:
         1f:71:b6:62:85:03:c6:ca:ba:f0:11:3a:ae:b9:99:8a:ac:a5:
         cb:03:ce:d6:a6:62:23:fb:94:55:9c:f1:41:b8:56:58:4b:3f:
         fe:e2:54:95:5f:44:d6:f2:76:3e:3f:d1:fd:a5:c8:ce:54:12:
         98:db:19:7e:1f:b2:58:2f:d1:d7:26:bc:f5:db:4a:cc:ef:f1:
         77:d4:2a:95:62:85:92:f2:4f:e1:85:8a:25:e1:36:46:ce:1c:
         a8:58:1e:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGiycgL8zcTrxgIUSSv19KyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZThlOWI0ZDhkYjk0NmJiMjBjY2Y1MTI3OTcwNzVjOGFm
ZDgzY2QwHhcNMjYxMTAzMTkwMTM1WhcNMjYxMTA0MTkwMTM1WjAzMTEwLwYDVQQD
Eyg0YWVhYmQyYWE2YjQ0Y2Q5MDQ4MzUwYzI2Y2U2OGMyZDEzZTk1YTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuEEWtu9piICzHLg5DPgb5pOThrv
+8aUolWe1eSo9XH32z55E3qjd2ysHb/D+f077jiqzuiFNeYoHrTyJcSgzYMRuunZ
6s5W+Fj0Du3L5XTsUHWad9rmo1fWlcdcEVQq0hPwn9qGrKCXjAqOAItBpkVDLDwl
biAPsQzM/vcvByb0MR6ZhgoYiWYtyZmCfiNijwqXOyVuaUyAewDdCUEr71VAHvSY
n83vfdG9ryHBvWWLzz0dVED0OjvIMHp+LsjsBWRl41/8AuLRWBrF+Yp2nChXK4Kp
W1hfARoI1LTkB/RL2r+VKn0kHA4VKp4z2wkQMw6fRhcr61KchSiwmCflwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErqvSqmtEzZBINQwmzmjC0T6VoQMB8GA1UdIwQY
MBaAFKro6bTY25RrsgzPUSeXB1yK/YPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgt
Zjg5MDU2NzJlNTlkLzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgtZjg5MDU2NzJlNTlk
LzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAWzTIt8
l0I1NyyJ46TRW42vaEgw0kYcQLYyU/gKpWuT/l+PYB73VZwTzLYE9ui7tXzUJUMv
onRxSY6tOffhbc2Y2qU4qo4bCL5Z6mid/qqy+us0zLOV/smLlETYYq60FCgm4Xi9
8Ozm8xVhKOjrBdQQqCRLhLXSPYS/n+NLtq33Zr5+skPgWBTYuuQEajDs+fBPemz0
aXKQPnwj3FTeigRxH3G2YoUDxsq68BE6rrmZiqylywPO1qZiI/uUVZzxQbhWWEs/
/uJUlV9E1vJ2Pj/R/aXIzlQSmNsZfh+yWC/R1ya89dtKzO/xd9QqlWKFkvJP4YWK
JeE2Rs4cqFgerA==
-----END CERTIFICATE-----
Generated at Wed Nov 4 00:25:48 2026 by rpki-client