Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File:                     qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier:          suMcAjB29Yh/cEdWuBvDV4iipOGEvWP9up0SGs3fkC4=
Subject key identifier:   9F:CA:05:53:93:A9:37:DB:DA:6B:2E:46:42:F5:4C:78:DF:99:95:A2
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer:       /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial:       019E1EDA6B4DF7923A4019BC9C62EC52A591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number:          037F
Signing time:             Wed 13 May 2026 01:01:31 +0000
Manifest this update:     Wed 13 May 2026 01:01:31 +0000
Manifest next update:     Thu 14 May 2026 01:01:31 +0000
Files and hashes:         1: ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa (hash: 11RGKugOQUaTnt/hJwS9BTO4yUW3mvsWT6IHYcZEL9U=)
                          2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: T07VVAlFLbq4pEZ2NzIhxUCihqlrqfiLFcY6tDzYosQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:6b:4d:f7:92:3a:40:19:bc:9c:62:ec:52:a5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
        Validity
            Not Before: May 13 01:01:31 2026 GMT
            Not After : May 14 01:01:31 2026 GMT
        Subject: CN=9fca055393a937dbda6b2e4642f54c78df9995a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f3:0b:08:81:c5:96:a2:6f:88:21:15:6b:6d:
                    c6:2a:1a:95:dc:12:6d:16:6f:e6:7e:b9:f9:e5:cd:
                    29:40:b5:8f:97:9c:84:ab:14:58:c9:b8:29:8a:71:
                    51:46:e0:5e:41:9b:e7:7b:c2:9a:09:ce:7e:80:65:
                    a3:50:49:a9:dc:bd:8d:40:c1:98:0c:88:0f:71:3d:
                    30:c6:e7:23:a9:26:11:10:e9:fb:e1:56:53:60:69:
                    da:7b:73:bc:ff:d3:cb:d6:54:46:aa:6a:1b:d4:c8:
                    ac:d3:91:17:15:8e:05:29:4e:3a:ae:23:14:ff:4a:
                    de:ff:74:7f:16:be:4c:fb:34:7b:d9:23:00:c1:e6:
                    41:8d:fb:7a:7b:76:e0:a3:df:13:e8:ad:3b:b2:2c:
                    15:06:53:93:10:4b:29:4e:09:34:90:19:c9:be:0f:
                    1d:9f:4b:79:20:b4:2b:32:53:f7:ee:4c:01:43:5f:
                    52:8b:b4:81:a7:3b:cb:53:7d:c9:69:0e:3d:b7:61:
                    a0:ed:e4:8d:a5:4d:b2:4a:02:0f:bf:a0:0c:eb:db:
                    0d:fb:ce:bf:23:a4:69:e6:f3:8e:33:80:5c:80:75:
                    4c:d5:e3:d3:d4:36:b2:35:4e:ac:f7:4d:d5:d0:e0:
                    15:4b:4b:80:b4:69:8b:e8:54:b4:58:9d:27:23:14:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CA:05:53:93:A9:37:DB:DA:6B:2E:46:42:F5:4C:78:DF:99:95:A2
            X509v3 Authority Key Identifier:
                keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:b8:fa:c6:29:e5:13:5c:a1:81:21:29:00:19:4a:77:8c:
         68:f2:5f:9b:1a:a6:45:12:d8:3d:24:ff:8a:97:bd:da:d3:0d:
         29:8e:49:54:af:2a:c3:a9:fa:ab:b0:d6:7b:b7:f2:02:8a:bb:
         09:5c:10:cc:f4:d3:2b:af:85:ba:de:c2:94:dd:56:f0:2d:83:
         5c:6f:34:94:0c:51:a6:36:63:be:9f:3f:04:e0:02:19:e3:74:
         ed:b3:ee:32:bf:07:72:8c:68:fe:45:b1:40:01:96:b4:e9:81:
         7e:69:a1:bf:30:61:ea:8d:3c:38:0b:cd:b7:dc:7e:9b:45:5e:
         14:47:7d:35:7d:ab:c4:3f:fb:d2:49:d3:45:06:50:4c:f6:24:
         22:ee:79:7d:1a:36:de:74:f8:b7:43:38:5d:f7:61:c9:97:01:
         52:c9:71:5e:11:63:0f:fb:d8:a0:1a:43:4a:68:da:74:cc:13:
         b2:ad:13:73:f7:ee:fd:68:29:8f:89:92:01:50:0e:9e:1a:30:
         66:2e:ad:90:2e:da:69:cd:81:83:ca:62:f1:cb:08:8c:14:36:
         1e:ca:93:cd:70:72:c1:a3:4d:5f:dc:37:62:90:11:ca:12:d0:
         c7:8c:74:36:d7:b4:6b:a6:45:07:19:2c:e3:9a:4f:90:75:1f:
         f2:f3:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:05 2026 by rpki-client