Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          EgNMUsE3aZ9lj6flXlCWBXIW8CNnm+JeuwAx0gOgiZE=
Subject key identifier:   B0:26:57:D9:ED:97:0F:30:0F:D5:66:ED:5F:6A:03:ED:59:F0:96:97
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       01A0CF6D10288C6B80A03AA8041F443872EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          1654
Signing time:             Wed 23 Sep 2026 18:00:26 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:26 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:26 +0000
Files and hashes:         1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
                          2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
                          3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: cVHGwcczG13ahPasTy4DqWj1sFwzSDGAxJ1wyLFmEKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:10:28:8c:6b:80:a0:3a:a8:04:1f:44:38:72:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: Sep 23 18:00:26 2026 GMT
            Not After : Sep 24 18:00:26 2026 GMT
        Subject: CN=b02657d9ed970f300fd566ed5f6a03ed59f09697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:c6:44:96:07:ef:ff:38:a2:fb:47:1b:f9:
                    7d:78:20:f9:f1:91:ef:0f:00:f4:2a:d9:ee:f2:95:
                    7d:41:77:24:77:67:f4:ab:79:cc:9e:12:8f:a2:e0:
                    ed:94:e7:43:f2:af:8f:02:e1:85:f1:36:5b:11:74:
                    20:1d:7e:94:82:bb:4f:25:c2:f6:d8:d7:95:a3:27:
                    58:a5:56:c1:7c:d2:25:9c:0e:ef:40:9b:94:e7:7a:
                    0c:c6:68:f6:aa:85:24:c4:ff:f6:bb:cd:ba:0a:dd:
                    f4:c8:36:25:c8:4a:cc:ef:81:0a:db:54:f2:fc:eb:
                    e5:63:9f:44:13:62:24:43:bd:51:b6:36:41:e6:79:
                    e2:e0:11:fd:db:6d:68:b8:4f:b9:6e:71:e7:ae:a0:
                    7b:4c:d3:29:eb:99:2f:01:58:4a:24:fb:a4:af:21:
                    c4:79:32:48:c5:82:5f:1b:74:cd:1e:99:18:c0:fe:
                    d6:9f:94:74:f0:23:95:0e:11:01:f0:38:4e:04:b5:
                    e3:7c:95:50:49:e6:19:dd:79:07:e6:04:b9:bb:f8:
                    34:ea:1f:be:1d:e6:b3:62:e0:af:cd:7c:fa:d4:e7:
                    83:f5:c5:27:2f:78:0d:cd:60:74:d0:3f:de:72:ba:
                    92:da:a2:54:e1:b7:8f:28:c8:1f:60:7c:11:6a:9b:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:26:57:D9:ED:97:0F:30:0F:D5:66:ED:5F:6A:03:ED:59:F0:96:97
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c9:b9:bc:98:ff:c0:23:47:f2:db:5c:53:79:24:0b:86:be:
         a1:06:86:88:3c:7d:d7:4e:64:f3:ca:a9:10:7d:62:c1:0a:6c:
         0c:53:e3:b4:fb:be:13:e3:15:4d:1b:ea:14:de:0b:d3:9b:c7:
         ef:77:7a:92:6a:c2:54:12:f0:61:34:cd:3d:0c:e8:6e:6b:15:
         f2:72:80:1c:88:88:cb:5b:cd:f9:45:ce:e0:91:7c:4b:b4:35:
         7d:66:56:3a:47:75:80:de:bd:ff:8b:20:94:91:4c:00:33:5f:
         66:03:7b:b2:f8:12:3c:95:18:30:7d:dc:6f:22:7c:47:77:18:
         c0:58:c1:f9:68:31:24:74:da:de:d9:1e:d9:3f:20:58:62:ad:
         58:1c:69:a2:26:85:a1:0e:14:3f:08:56:74:3a:0c:d8:97:1b:
         a3:51:ab:8b:6c:30:aa:88:f1:9e:72:89:f8:80:81:e7:6a:fe:
         db:c8:f5:ff:65:15:35:e1:16:d9:1a:5a:90:d3:7e:cf:5b:24:
         5b:89:42:85:18:68:81:f8:89:f8:99:45:80:f2:70:97:f9:39:
         6e:b1:e5:46:40:41:44:18:f6:6a:a7:9b:80:39:f2:50:16:ea:
         78:17:87:8d:60:07:2f:4a:29:03:81:03:e5:04:73:58:39:fa:
         07:a3:cd:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbRAojGuAoDqoBB9EOHLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWM5Yzk1YTU4YzM4MTFiZGE5NWRjODNjMmU0ODdhMjAw
YzRjMjUwHhcNMjYwOTIzMTgwMDI2WhcNMjYwOTI0MTgwMDI2WjAzMTEwLwYDVQQD
EyhiMDI2NTdkOWVkOTcwZjMwMGZkNTY2ZWQ1ZjZhMDNlZDU5ZjA5Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA153GRJYH7/84ovtHG/l9eCD58ZHv
DwD0Ktnu8pV9QXckd2f0q3nMnhKPouDtlOdD8q+PAuGF8TZbEXQgHX6UgrtPJcL2
2NeVoydYpVbBfNIlnA7vQJuU53oMxmj2qoUkxP/2u826Ct30yDYlyErM74EK21Ty
/OvlY59EE2IkQ71RtjZB5nni4BH9221ouE+5bnHnrqB7TNMp65kvAVhKJPukryHE
eTJIxYJfG3TNHpkYwP7Wn5R08COVDhEB8DhOBLXjfJVQSeYZ3XkH5gS5u/g06h++
HeazYuCvzXz61OeD9cUnL3gNzWB00D/ecrqS2qJU4bePKMgfYHwRapswmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAmV9ntlw8wD9Vm7V9qA+1Z8JaXMB8GA1UdIwQY
MBaAFKqcnJWljDgRvaldyDwuSHogDEwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2Et
NDFhMDY3NmVkZDYxLzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2EtNDFhMDY3NmVkZDYx
LzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMm5vJj/
wCNH8ttcU3kkC4a+oQaGiDx9105k88qpEH1iwQpsDFPjtPu+E+MVTRvqFN4L05vH
73d6kmrCVBLwYTTNPQzobmsV8nKAHIiIy1vN+UXO4JF8S7Q1fWZWOkd1gN69/4sg
lJFMADNfZgN7svgSPJUYMH3cbyJ8R3cYwFjB+WgxJHTa3tke2T8gWGKtWBxpoiaF
oQ4UPwhWdDoM2Jcbo1Gri2wwqojxnnKJ+ICB52r+28j1/2UVNeEW2RpakNN+z1sk
W4lChRhogfiJ+JlFgPJwl/k5brHlRkBBRBj2aqebgDnyUBbqeBeHjWAHL0opA4ED
5QRzWDn6B6PNpQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:59:38 2026 by rpki-client