Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          XKJ8A9YnHB4Swa3sLAQET2sJOTyHYFeCrzA8/4Iutro=
Subject key identifier:   C2:32:77:44:C1:35:E1:B0:8B:F6:2B:71:E0:F1:35:8F:B6:78:C5:C0
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       01A0D34A9D3C65C4BBDDBB837E0C5461263D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          1A94
Signing time:             Thu 24 Sep 2026 12:01:17 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:17 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:17 +0000
Files and hashes:         1: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
                          2: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
                          3: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
                          4: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
                          5: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
                          6: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
                          7: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
                          8: b4ESO_pvGgCqVp88yRCz-5OoSf0.roa (hash: gzB0VXXq99U/xkP9oWFBiaWwqsbZ9lY1uOT5L1wm/Fk=)
                          9: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
                          10: dNznR1-S7vVnFASVh_hci4jZkMQ.roa (hash: zQ1QJ64mxnosKyQobzETFihGQBbENfar+9z/U7xN1lc=)
                          11: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: YelxkZOFkG7aYsllFRPEm+l8r4PdkmkilJ0ry3wkN7c=)
                          12: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
                          13: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
                          14: lkbj_rHQ3odPB7yMiampsN-UZno.roa (hash: qptKUULvCznnpcjyPdRsDYHUthdNfWlbjNhIIyjJ/gg=)
                          15: mcWyzJOHr9Zx7r67vsArKVYzm-M.roa (hash: jPJa6OTo4Vh6SlUAyeSF3ybtpQx5852t+NVU3VYBCWg=)
                          16: p5-KSOQJoRc-a4h6VGwthwBmpAw.roa (hash: Oaku+ye04iIHVUwLwL5t3yBGhVH08pyoMvs2MjpbNqY=)
                          17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
                          18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
                          19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
                          20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
                          21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
                          22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
                          23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:9d:3c:65:c4:bb:dd:bb:83:7e:0c:54:61:26:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Sep 24 12:01:17 2026 GMT
            Not After : Sep 25 12:01:17 2026 GMT
        Subject: CN=c2327744c135e1b08bf62b71e0f1358fb678c5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:6b:6e:b1:06:b5:78:30:f5:96:78:42:39:
                    97:cc:27:1c:96:78:12:84:f2:1f:e8:e7:4d:0e:19:
                    61:56:2f:7e:c3:48:7e:3a:6e:c2:0a:03:a8:32:c7:
                    e6:95:78:65:5f:00:3f:4e:8f:57:32:76:66:39:95:
                    2f:12:b8:ff:97:86:ce:44:79:2f:e1:e6:6b:ce:9e:
                    44:d9:8f:c3:bc:b5:9d:ad:ea:7e:53:f9:9a:cf:d8:
                    2f:80:5f:72:2b:c8:f1:ca:2a:e1:ab:13:87:3a:ef:
                    50:e7:ab:24:67:5e:02:f9:aa:1e:b3:a2:42:86:ba:
                    ed:b6:3e:22:52:f0:ba:cf:f0:59:e2:7d:28:7f:b2:
                    bb:a3:b0:ac:9d:87:b5:5f:31:a4:d7:23:5a:b2:59:
                    50:8d:71:ca:30:25:f4:11:88:00:73:51:6a:64:3f:
                    f2:ac:9e:f3:15:3a:b4:1d:28:4e:47:1e:47:ff:fd:
                    ad:2e:2d:9a:d2:70:25:85:b5:3c:fe:d2:91:44:99:
                    b2:f2:52:47:f1:38:42:6a:3f:56:8f:cb:3b:1f:88:
                    f3:80:ae:fd:1b:0c:e3:6c:0c:19:0d:c1:53:46:da:
                    32:d7:84:e5:8e:20:98:a4:dc:72:b1:04:91:44:4c:
                    fa:0b:e0:59:48:bb:ae:fd:0f:5e:c1:1a:cc:d5:1e:
                    7e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:32:77:44:C1:35:E1:B0:8B:F6:2B:71:E0:F1:35:8F:B6:78:C5:C0
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:26:0d:6c:4c:73:a4:0b:19:22:ec:4b:ae:03:a8:29:40:04:
         19:38:65:86:28:65:f4:5c:46:c7:3d:1b:ed:4f:bd:39:2a:8c:
         9a:d6:d7:67:6a:c2:72:d5:f4:5f:75:df:3d:00:f0:65:4e:d6:
         9e:f9:2f:b4:07:cb:f2:cb:cf:87:53:66:ce:e9:93:e7:05:18:
         1e:66:f3:80:bf:f3:53:f3:ca:00:b3:1c:71:54:c5:d9:85:13:
         d0:ea:7c:14:54:7b:03:74:af:41:59:63:c1:b8:9b:eb:fb:9d:
         58:21:98:48:46:36:53:67:59:29:2e:ba:34:43:e8:fa:f1:10:
         51:47:78:68:89:bc:c0:c2:c7:ec:44:bb:bf:59:64:73:f6:38:
         92:e8:a2:7f:26:e6:2e:88:1e:67:dd:f8:c0:4c:d7:e6:99:d1:
         e5:b3:98:65:ca:69:74:9a:27:a0:38:81:01:2e:e7:75:38:1e:
         0d:8d:e4:ec:60:a2:8a:94:f0:02:ec:55:5a:a1:21:57:c1:6e:
         8c:b3:aa:51:33:bc:c5:82:3d:2b:57:7c:f0:94:5a:3d:7c:b3:
         7e:f0:5d:91:67:62:b4:c3:6b:60:28:10:70:b6:a5:b6:00:23:
         da:39:eb:cb:78:e1:fa:c3:36:94:4b:8d:53:22:71:51:b1:6f:
         c3:6d:1f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:09 2026 by rpki-client