Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File:                     0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier:          XiXuxEE8XJusOHga+42eTzQWRD4ELsVU07tVG+sLG2o=
Subject key identifier:   50:D3:8E:CA:41:49:10:CD:20:D0:F0:AD:34:B3:C3:0F:0E:B7:DE:30
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer:       /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial:       01A0C745ADFF3080AB0AA791FA67064F636C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 04:00:27 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:27 +0000
Manifest next update:     Wed 23 Sep 2026 04:00:27 +0000
Files and hashes:         1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: MLwTgEH2MkjQ0VsBTt2Tzj7pt+WIgYJSkhkKDLxZcos=)
                          2: 25O7M2UWZLtjZfht3TvmhhoKUbU.roa (hash: aHZMolfVFoYqPERvCPULtiENfnmx30XYIbMKIT0hRPE=)
                          3: DdN7vkJnOB--YPWssHLoFQourZw.roa (hash: 4Xwtg1/EpdhFY06tPduHwk9/msCJ+le6Q0TbeFIOaTA=)
                          4: ik9bQHA3wdhcXWdy4pApX4ViEtA.roa (hash: YUhchzwns71ZrkZmZzkm82sDpa46jMSA30HHNbNFaao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:45:ad:ff:30:80:ab:0a:a7:91:fa:67:06:4f:63:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
        Validity
            Not Before: Sep 22 04:00:27 2026 GMT
            Not After : Sep 23 04:00:27 2026 GMT
        Subject: CN=50d38eca414910cd20d0f0ad34b3c30f0eb7de30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:d5:1b:7f:b1:41:55:6b:78:e6:da:4d:0c:
                    31:98:7d:8b:90:d5:f5:8e:f4:af:1f:42:8f:67:1b:
                    3f:ae:ee:df:39:5e:01:cb:7f:00:cf:95:20:af:6a:
                    b4:39:39:19:d9:3a:27:2b:5b:69:6c:92:32:0a:f3:
                    fe:8f:15:3b:fe:98:3b:a6:9a:47:3c:a6:f8:b2:72:
                    03:a5:7d:d9:97:91:5b:86:f6:a9:80:2b:b8:40:68:
                    59:e7:98:e0:52:99:3c:b1:c7:67:13:8f:15:e7:52:
                    0b:bb:60:23:ad:a1:c3:2c:61:90:6f:af:0b:93:74:
                    10:52:1e:de:d0:e7:07:ba:20:e5:3d:6b:b9:41:77:
                    0b:f6:d1:70:49:81:91:ff:c5:e7:cd:71:8d:aa:19:
                    33:97:ad:d9:13:e4:3c:a7:44:03:6f:55:30:bf:5f:
                    a9:b7:c5:bd:33:be:ee:ac:dc:b5:2d:f7:6f:3d:19:
                    5a:5a:6a:80:c9:2b:f1:c9:96:5c:2b:a9:66:a4:b3:
                    ee:c6:3a:67:a4:36:6b:a8:0e:b1:4f:a7:bc:3a:ee:
                    27:4a:59:1c:78:cf:23:da:86:b2:cc:30:55:09:ba:
                    97:73:26:2e:13:13:eb:2e:7c:20:05:f5:f7:f8:f3:
                    96:81:81:f5:3d:d9:d6:f8:93:ee:39:33:f8:f1:8c:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D3:8E:CA:41:49:10:CD:20:D0:F0:AD:34:B3:C3:0F:0E:B7:DE:30
            X509v3 Authority Key Identifier:
                keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:77:2e:3a:4d:d6:e5:19:6f:0b:ec:cc:91:59:77:c8:27:a2:
         99:96:f9:1f:ee:c6:ec:17:0c:11:d5:2f:34:0e:19:c1:98:d9:
         96:cb:ef:33:5e:07:f5:a3:0f:51:88:89:d6:8f:12:ba:46:e1:
         dd:ec:e6:73:21:e1:6e:e2:2a:d4:7d:d4:66:60:ce:56:03:b8:
         12:69:68:25:8a:76:a0:53:62:c1:00:68:70:cb:25:5f:b3:05:
         43:4a:00:6d:a9:2a:3c:d2:a5:11:24:fc:66:3a:46:c8:ac:77:
         d8:68:13:76:88:18:e5:09:35:bc:33:c1:84:53:ab:16:7c:2f:
         fc:8a:04:0e:5a:05:ee:ac:be:0a:cc:27:d8:c2:8b:51:28:29:
         d1:66:c0:d2:5c:6a:d7:15:2b:e9:96:79:d1:99:2b:fc:cc:61:
         6d:7f:0a:eb:1f:4d:1e:22:23:c5:4b:f4:f7:e4:e3:46:25:9f:
         a3:e9:ed:2d:70:64:50:49:af:78:ca:93:a2:96:4e:ef:cf:3e:
         1b:99:ec:85:57:c3:44:d7:53:65:a2:86:f9:af:0a:a1:be:08:
         6b:94:d0:78:a3:d7:ce:1d:fd:ba:ba:2b:36:97:96:2f:a8:35:
         5a:88:6e:15:63:15:9e:6a:ec:98:ab:a3:6f:79:b6:25:af:35:
         d1:ee:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:41:33 2026 by rpki-client