Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File:                     qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier:          NtNzwu1zgMdfDiETVfcfgaULrU0mInBl5ZiJ3xhThxc=
Subject key identifier:   90:34:C2:88:E6:25:85:DF:F2:F0:60:90:05:6A:53:C7:BC:ED:7B:22
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer:       /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial:       01A0E5199E4C9EE9EB8C27E9C92E9868EA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number:          0FE7
Signing time:             Sun 27 Sep 2026 23:00:56 +0000
Manifest this update:     Sun 27 Sep 2026 23:00:56 +0000
Manifest next update:     Mon 28 Sep 2026 23:00:56 +0000
Files and hashes:         1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
                          2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: 0L8o3Biog37YBoGVeajIxXub/OZP3FWXWmrBR0zHj5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:19:9e:4c:9e:e9:eb:8c:27:e9:c9:2e:98:68:ea:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
        Validity
            Not Before: Sep 27 23:00:56 2026 GMT
            Not After : Sep 28 23:00:56 2026 GMT
        Subject: CN=9034c288e62585dff2f06090056a53c7bced7b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:23:18:46:18:ea:48:f0:87:06:60:df:c5:
                    2c:8a:c3:4a:72:4f:9a:a1:0f:a2:24:f4:4f:64:fe:
                    b9:c2:0a:29:75:14:07:e8:e1:a3:01:2b:c9:4a:8b:
                    b4:e5:e4:e8:81:03:91:17:f7:42:43:60:4c:39:e6:
                    9a:73:ea:24:10:37:fa:34:2f:4f:a5:40:90:2c:c4:
                    a2:b7:b5:b5:8d:f1:65:82:7d:84:57:c2:35:d7:61:
                    af:37:0d:f4:a2:5a:20:91:01:8a:03:5a:ff:55:6d:
                    85:7e:44:f2:67:92:9d:bb:ee:70:4a:d7:ce:b3:cc:
                    37:3f:69:09:0b:53:c0:fd:f7:22:45:69:2d:0c:bf:
                    25:d1:d8:25:9c:0f:8b:e0:70:b7:e5:ce:6b:32:69:
                    40:ca:3a:34:a7:ca:0b:5a:bb:4a:7f:0b:55:ee:88:
                    69:cb:b9:d6:62:c8:09:50:89:48:cb:bc:a8:70:c4:
                    2a:f9:23:60:30:a5:cc:52:f2:6d:1f:70:b5:50:e8:
                    9c:4b:59:fc:46:33:7c:ad:df:9a:ef:a0:e8:95:92:
                    97:85:c2:b3:4c:0f:f2:c1:5d:8d:ac:1f:bc:66:1e:
                    7e:f4:d7:98:63:f4:12:83:39:d2:01:be:f2:6e:69:
                    48:ed:4d:67:7e:3f:05:e6:5a:6b:05:c1:43:8e:42:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:34:C2:88:E6:25:85:DF:F2:F0:60:90:05:6A:53:C7:BC:ED:7B:22
            X509v3 Authority Key Identifier:
                keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:06:1d:6d:57:e3:7f:33:ff:09:17:fe:e6:09:3a:53:f4:b6:
         56:30:ce:d7:c1:f6:c6:b0:d6:e2:36:32:88:4d:5c:ce:f7:0f:
         ba:88:43:a0:c5:4f:1c:4b:9b:97:d4:36:6d:19:5f:00:d7:18:
         ed:3b:b9:b9:b9:10:35:40:1d:9a:dc:38:78:3c:cb:69:f2:bd:
         95:26:c0:81:30:b3:ae:24:5a:ef:b9:2b:b1:f2:3b:b4:ee:39:
         09:51:2f:a4:ce:87:dc:c3:20:a5:4c:89:11:51:b0:8b:23:9a:
         8d:e1:be:a4:2e:c4:51:8a:9a:5e:ec:e4:d2:d8:eb:f5:26:1e:
         22:74:c6:92:d3:87:ec:b9:da:3a:7b:43:cb:3c:3a:34:2a:71:
         9e:c2:91:79:51:cf:2e:fa:a9:e7:81:b7:b0:35:df:60:11:78:
         7f:6b:f1:93:bb:41:c2:53:02:b3:54:22:40:1d:41:a4:71:39:
         22:fa:65:fa:05:0e:58:ae:9a:2e:30:3f:9e:38:dc:14:6b:3f:
         50:6b:a6:f1:b6:89:50:86:4a:20:fe:87:56:c2:13:22:71:2c:
         ff:93:a7:cf:27:c0:25:a3:85:bd:53:1a:5e:13:9d:b4:f2:6a:
         67:0a:42:9f:cd:9a:e0:02:f5:8f:e7:16:bc:a4:ab:aa:c7:af:
         e7:3e:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 08:41:27 2026 by rpki-client