Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
File:                     quDn_oLDpsQmokwM_6ILDjowT6I.mft (raw, json)
Hash identifier:          KgjRZrQNoS6IG6xBFv7QU1I3K7AUUhLGVE0rMAaivLc=
Subject key identifier:   EB:C5:25:43:86:19:20:0A:E4:B6:E8:16:6D:44:CA:95:AD:04:00:9F
Authority key identifier: AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2
Certificate issuer:       /CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
Certificate serial:       01A0DD97EC72C1D771712F20C00A28597603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
Manifest number:          EC
Signing time:             Sat 26 Sep 2026 12:01:56 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:56 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:56 +0000
Files and hashes:         1: UL8l5IwcVO4oalkF_m08Q-lh138.roa (hash: Ft4/BZpxSn/GVsZnEbmyHTlyfLxd+14L0O7a+0FPi2w=)
                          2: quDn_oLDpsQmokwM_6ILDjowT6I.crl (hash: INZpn9jyEbSSyIvIQ074TmV79D0BCaXJvfMSjyi5hSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:ec:72:c1:d7:71:71:2f:20:c0:0a:28:59:76:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
        Validity
            Not Before: Sep 26 12:01:56 2026 GMT
            Not After : Sep 27 12:01:56 2026 GMT
        Subject: CN=ebc525438619200ae4b6e8166d44ca95ad04009f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:7f:c8:70:39:93:db:e9:f9:64:20:5d:4b:
                    fe:c4:0d:8d:35:47:b0:9a:d7:14:f2:c9:2d:c1:de:
                    3a:49:fa:57:61:db:e0:6c:e4:c6:43:3c:d8:6d:eb:
                    64:cd:4b:ba:91:a2:ba:44:8f:c8:65:3a:f1:57:ad:
                    f2:be:65:d9:cf:fc:f8:d0:09:5c:30:b2:30:df:55:
                    8d:41:15:f2:46:dd:42:98:ed:17:10:fd:08:7a:88:
                    01:3b:da:e0:bb:7d:36:ea:d0:a5:07:f3:c0:40:73:
                    fb:ef:5e:40:8e:dd:92:07:7b:3d:50:68:3e:10:38:
                    23:93:45:6d:83:e6:b0:cd:f8:41:1f:ae:c2:7b:20:
                    69:a8:c7:eb:94:76:ae:8d:72:ca:a5:26:03:55:e6:
                    d1:39:c4:f4:3b:1a:e6:7f:5c:45:ce:5c:2f:c4:19:
                    53:93:b8:2d:ae:ef:d8:da:31:4a:31:94:07:e1:f6:
                    b7:fb:de:b6:b3:79:35:67:17:7c:ad:75:ed:17:b5:
                    64:14:0a:c8:31:8e:52:09:58:f2:79:11:81:fa:6e:
                    75:f1:c8:91:26:fe:3c:1b:55:72:1a:dc:db:09:f8:
                    a6:f1:83:ee:bc:84:32:eb:f7:f5:70:81:12:a8:2f:
                    65:01:ca:d9:af:18:75:26:5d:2c:08:13:cd:63:9a:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C5:25:43:86:19:20:0A:E4:B6:E8:16:6D:44:CA:95:AD:04:00:9F
            X509v3 Authority Key Identifier:
                keyid:AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:f4:97:86:36:fb:5b:32:03:b5:75:9b:f0:75:bb:d4:ba:
         ff:8a:66:8c:5c:a2:68:d4:be:68:5f:0f:0c:4c:91:41:c3:15:
         28:5a:59:a8:0f:70:7e:c7:2b:a6:cf:df:73:6d:ac:14:64:e7:
         8b:48:09:d2:73:ff:99:10:65:6d:8e:af:0d:b4:ac:cd:40:97:
         c2:bb:56:bf:a2:fc:f5:99:ca:a5:fd:51:9f:cc:05:44:1d:9b:
         cf:ba:57:a0:0b:cb:7e:1b:32:85:f9:fd:2b:a7:04:78:a3:14:
         2f:52:05:7d:b0:50:4b:05:8c:bf:e3:9c:01:56:1a:09:36:1c:
         b5:4a:e9:61:b4:65:bd:90:33:f2:a0:b4:83:aa:ab:09:a2:2c:
         c0:6f:27:d5:2e:42:90:51:76:3b:c7:16:4f:50:8e:dd:8d:8d:
         26:21:4a:6d:fe:8e:46:aa:29:5f:e1:d8:4e:f8:7d:ad:18:b5:
         84:bf:aa:8d:58:b6:40:d4:71:8e:d1:4f:a5:07:6b:c2:83:db:
         9e:08:bb:31:01:7a:7c:17:87:16:85:29:c6:d1:69:32:54:0e:
         39:71:2e:64:9c:15:68:77:10:ed:d6:f2:24:48:e8:16:2c:24:
         03:21:6a:59:3a:b0:4e:21:27:96:0a:50:8d:e3:1c:c4:7d:e7:
         15:2a:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:42:50 2026 by rpki-client