Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File:                     qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier:          n37lFzX8+KGiie+tuuBp60cyUOYJjKfaOgFT4eh6FUE=
Subject key identifier:   7D:CA:4D:96:86:1C:6E:71:A9:02:D9:D3:57:A2:61:6E:0C:16:66:EB
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer:       /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial:       01A1317D5287751A559853DEFA84E325A18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number:          111F
Signing time:             Mon 12 Oct 2026 19:00:59 +0000
Manifest this update:     Mon 12 Oct 2026 19:00:59 +0000
Manifest next update:     Tue 13 Oct 2026 19:00:59 +0000
Files and hashes:         1: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: 1ZmBASIVX2o568N5fB1pRVkgPtbH2U+dU11Qg4VVRyw=)
                          2: skeAadI4AP4ZvpAKWtTlCV07X48.roa (hash: teA/npSH8zrPPm6lOFHsXXFeJadHqVvDUxx+vJRFlGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:7d:52:87:75:1a:55:98:53:de:fa:84:e3:25:a1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
        Validity
            Not Before: Oct 12 19:00:59 2026 GMT
            Not After : Oct 13 19:00:59 2026 GMT
        Subject: CN=7dca4d96861c6e71a902d9d357a2616e0c1666eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:8e:bb:38:09:f7:84:4e:85:70:1b:7f:40:
                    57:60:32:13:4f:79:a7:d9:2e:a9:39:fa:4a:d7:13:
                    13:1e:63:7d:78:28:85:40:58:40:41:6f:1d:05:ad:
                    aa:01:1b:93:89:de:84:94:c1:8f:73:6e:23:22:0d:
                    86:6f:99:8e:35:8f:3b:b8:89:81:35:e5:c0:07:32:
                    50:f0:ef:25:42:4c:aa:70:6e:e3:33:8c:e9:ed:dc:
                    db:b6:ef:bf:58:b4:ec:8c:ca:55:2e:be:43:1b:ae:
                    91:00:aa:3c:a4:ec:d6:12:f4:b7:71:53:df:a7:de:
                    8b:43:cc:18:76:ac:56:83:df:61:f6:e0:56:24:dd:
                    da:19:0c:d8:18:c2:86:53:5d:33:45:03:cf:b3:b8:
                    31:f3:f1:9a:4e:ce:06:d3:df:11:e5:7d:a3:b3:b3:
                    ad:06:7f:0c:fa:2b:53:f2:76:ba:6c:a2:66:f8:ba:
                    36:9d:93:c5:76:c9:d9:e0:7c:94:a7:55:07:ad:38:
                    4b:c8:20:f0:a2:f2:3d:89:02:0d:5f:bf:4c:52:41:
                    f1:1c:69:16:2a:1a:71:14:6d:15:19:68:05:07:d0:
                    53:c1:24:95:0b:0f:29:ea:e7:8b:fc:05:1f:09:62:
                    3e:c4:a7:18:3d:a0:97:79:21:80:f5:42:f0:02:09:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CA:4D:96:86:1C:6E:71:A9:02:D9:D3:57:A2:61:6E:0C:16:66:EB
            X509v3 Authority Key Identifier:
                keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:2e:33:c5:fe:3b:6e:48:06:8a:91:65:99:ba:11:59:e9:
         4c:2e:9e:55:70:ed:e6:08:96:39:4d:9d:01:35:90:47:c8:d7:
         4f:95:58:50:87:7b:1d:b3:a5:1b:02:79:f8:90:cc:7e:3c:eb:
         aa:9f:0d:1d:5c:07:73:ab:1c:6d:7e:e0:13:21:6c:84:09:a7:
         47:f2:db:7a:48:0a:5d:84:87:1d:a3:57:b2:76:a7:01:ff:62:
         6a:e2:8a:60:59:aa:7c:69:2b:ef:8e:95:4e:d1:1f:5a:8f:b3:
         4b:83:cd:0e:aa:20:0f:b2:cb:9c:63:c1:09:43:03:6a:37:5b:
         b5:6a:22:0a:f6:38:f3:b9:af:18:9e:34:7e:ce:fd:c6:2c:67:
         f5:d2:97:c0:28:61:93:60:be:dc:73:94:f7:6e:a3:c6:d0:37:
         75:20:88:61:5e:06:d3:00:50:19:dc:c1:d6:1b:c5:9e:d1:76:
         6d:d8:2a:7d:aa:2d:17:13:d9:49:bf:ca:e1:31:28:44:dd:db:
         76:7f:48:e7:c4:17:a3:63:f7:5d:fb:1d:b2:1b:ca:37:87:34:
         4f:95:0f:cd:41:4a:f0:9c:fe:e3:dd:d0:5b:de:69:b8:eb:da:
         79:77:27:54:f2:f2:4a:2b:2b:31:16:1b:4a:25:88:bf:e1:fc:
         66:61:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:28:49 2026 by rpki-client