Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File:                     1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier:          RlI6nGqYWx0FsZDRWxskbmKhVjZIaUAzPTwQp10TPoY=
Subject key identifier:   F0:82:93:28:AE:14:8D:CC:98:61:29:9A:80:E9:7F:15:D5:51:0A:B2
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer:       /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial:       01A0CE244B961575D5BBB8561C3BA1ED37FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number:          0E78
Signing time:             Wed 23 Sep 2026 12:01:19 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:19 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:19 +0000
Files and hashes:         1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: nek9OjFViXhmME2+9YwrzDehTepc590PTb4OLU7Xg9Y=)
                          2: nPnN-mV_c2-YF1lYIozKulfXb-I.roa (hash: Vt2SDSHBDDSYSW6xQWsdmfz8p7B5Lt8QbmhuE6bmJeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:4b:96:15:75:d5:bb:b8:56:1c:3b:a1:ed:37:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
        Validity
            Not Before: Sep 23 12:01:19 2026 GMT
            Not After : Sep 24 12:01:19 2026 GMT
        Subject: CN=f0829328ae148dcc9861299a80e97f15d5510ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8f:c5:e2:f8:d3:fc:4d:b4:be:46:ad:73:b5:
                    f9:6b:2e:57:7c:22:cd:45:ce:d9:5f:cd:21:08:5c:
                    ef:e0:08:79:2b:0b:43:fc:f7:5a:1e:40:f3:17:17:
                    33:cd:0a:f3:df:8f:22:d4:a8:38:43:02:e8:63:81:
                    a6:8f:ca:6e:97:d5:0a:fd:6d:98:ee:22:5c:d6:b0:
                    df:70:f4:f7:ba:e5:aa:f2:ee:09:1f:86:41:94:cd:
                    75:80:fd:7b:50:9c:d2:2c:02:51:72:43:23:75:05:
                    9d:72:78:e6:b6:84:7f:30:cc:7d:df:51:c8:45:72:
                    fb:d4:4a:dd:49:00:2d:a5:ad:49:8a:1e:09:21:69:
                    23:96:d6:01:8f:8d:bf:5c:f8:59:63:af:67:e4:1a:
                    13:97:cb:06:c8:65:c7:e9:58:92:45:d7:54:df:56:
                    cb:cf:72:a4:4b:89:37:e1:74:18:30:da:68:d8:ca:
                    09:7d:4d:46:e6:ae:b6:36:db:f7:7e:f6:aa:48:d5:
                    04:55:78:43:b4:73:0c:3e:16:ff:24:34:54:10:48:
                    91:a3:81:a7:13:21:40:b7:0f:a1:c1:64:6b:c7:ed:
                    38:98:e2:f1:67:e7:6b:0c:e6:8c:87:d7:1f:f9:c8:
                    37:3f:99:6a:4c:e1:b9:b1:a1:76:a5:9d:7f:62:35:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:82:93:28:AE:14:8D:CC:98:61:29:9A:80:E9:7F:15:D5:51:0A:B2
            X509v3 Authority Key Identifier:
                keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:af:26:87:d7:97:53:11:30:a1:af:72:7c:1e:d0:19:02:43:
         9b:85:6e:67:36:80:1a:fb:55:fe:2f:d7:0f:96:ce:28:98:24:
         ce:79:2c:bb:44:18:b4:85:3c:12:d6:9c:ae:02:28:43:74:ff:
         7e:74:50:fb:5d:8a:ef:94:55:65:01:77:24:a6:59:3d:fa:a1:
         cc:27:b6:ed:bd:2d:66:bf:57:e3:9c:0c:06:35:59:a1:76:07:
         91:93:8e:9a:38:23:39:2c:b8:a0:73:0c:6d:50:1b:59:0d:a2:
         dc:ff:2c:82:ee:bf:0f:74:19:76:a1:7f:52:d0:95:cd:9f:7e:
         51:db:a9:c8:80:b9:6b:10:2e:c9:a9:a5:47:a7:6a:d4:5f:c9:
         c3:4c:4b:eb:ee:1f:c7:21:24:ab:c4:86:74:a1:9f:02:32:5b:
         bc:ec:ef:d9:03:22:59:a0:04:51:35:b7:1e:df:f8:63:67:5c:
         4c:b4:79:d3:1c:04:3d:94:e1:16:06:73:d9:dc:01:f5:44:17:
         aa:6b:dd:cb:6b:f3:77:71:1d:7e:48:b3:1a:aa:aa:ff:a0:e7:
         de:2c:c1:59:f2:47:7c:cb:98:0b:1c:59:1c:50:bf:f6:51:97:
         ad:0f:1a:03:7b:0d:02:96:d7:71:fb:83:3a:fa:c3:94:09:25:
         61:4a:e7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:34:12 2026 by rpki-client