Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File:                     q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier:          rnBsIjjP2OroKk9A8hMsp0EiBhDEhI0Dn9mjN0fRBh8=
Subject key identifier:   C8:8E:21:21:88:E4:20:0D:0A:F3:61:D4:36:5A:B8:2C:E0:ED:7D:48
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer:       /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial:       01A0F97CCC7E483DBE2A5D74E9D502B501CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number:          1ABB
Signing time:             Thu 01 Oct 2026 22:01:40 +0000
Manifest this update:     Thu 01 Oct 2026 22:01:40 +0000
Manifest next update:     Fri 02 Oct 2026 22:01:40 +0000
Files and hashes:         1: 9AQTjaHWKJCXsC30oHllY8BTYu0.roa (hash: 7fmthrhoa3IJWK083wDCI4y5oXM7TE8HLdralxn1zCQ=)
                          2: D8zt2B-zZXXGmbmFyYrVgX5VlhE.roa (hash: 7mktpizMJp0UVGb90YuRIUsj5vrCk7DRcIeq+0Shwlw=)
                          3: FR0TMzudRUII0Fa6Jf04w_3WI20.roa (hash: AJPhPEVbqaILZMRzPtnEJF9G4HZjyUJiNfN1jrcINf4=)
                          4: buqYzFTyi7wPpzd9BAt1N0qAHXU.roa (hash: 7fssqNhBi5yImjk1Vr2WL9ol/xv6RFd9KhgAwqTB6Mg=)
                          5: cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa (hash: iFLFl7A8YTDlZs6b2ZtDXNK2nv2uM/FdHMVOEy9wgkc=)
                          6: ffozWOJhdYTlZsYd3LUTrpAH84g.roa (hash: LqRzq5DyTPzo0AG3Z9lInY0bhS/P0365y/30CPyVkNM=)
                          7: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: m5Xn37uiHLQ2QDorS815FgDZMrW6+YVQo7PHLH4yL3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:7c:cc:7e:48:3d:be:2a:5d:74:e9:d5:02:b5:01:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
        Validity
            Not Before: Oct  1 22:01:40 2026 GMT
            Not After : Oct  2 22:01:40 2026 GMT
        Subject: CN=c88e212188e4200d0af361d4365ab82ce0ed7d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:b6:15:2a:a2:a1:c5:0a:c5:0a:bb:ab:3e:
                    5d:1c:52:aa:ec:7b:77:f8:2d:97:9d:22:89:bc:08:
                    7d:8e:9b:dd:da:be:ce:07:72:ea:21:a9:80:f2:2d:
                    1d:08:0b:07:f0:13:b2:c3:e8:ab:f3:b0:c2:71:aa:
                    af:3b:e6:50:62:05:66:92:d9:15:88:e4:7a:f4:b2:
                    10:1c:4a:c5:7e:aa:12:09:08:65:0e:f9:41:14:80:
                    ce:9c:c1:9e:c4:4b:0c:e1:ee:e8:0e:62:43:26:5b:
                    83:30:73:68:a5:4a:df:ef:0c:ce:e7:db:96:08:2f:
                    69:d0:0e:12:60:78:6b:63:4a:74:02:20:c8:a6:23:
                    55:9a:ed:1e:ef:d1:5a:e3:d6:46:b5:9c:c0:82:44:
                    f7:1f:09:af:21:69:76:b7:b8:23:93:de:aa:d8:7b:
                    14:22:d4:fa:9e:b4:c4:d7:52:8d:61:ca:29:8e:d2:
                    06:8e:7a:b3:03:63:9c:32:6f:4e:af:2c:7e:51:d9:
                    64:56:09:64:de:29:83:2d:24:fc:a9:d8:b6:32:49:
                    68:36:6d:da:5c:07:b8:d2:e7:e3:5a:c2:4b:34:fb:
                    d9:6b:5a:32:01:69:68:4c:18:cc:01:0e:c7:4a:5e:
                    f5:56:67:8a:9c:3a:38:5e:fe:24:e1:0b:9a:77:8a:
                    1e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8E:21:21:88:E4:20:0D:0A:F3:61:D4:36:5A:B8:2C:E0:ED:7D:48
            X509v3 Authority Key Identifier:
                keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:55:9d:9f:95:d2:0f:02:75:05:70:91:31:db:3d:23:2b:97:
         a0:41:df:dc:36:8f:74:f8:12:a5:f1:be:57:95:ac:c8:2c:5c:
         fd:b7:e8:29:a2:95:f5:ba:57:94:44:61:ef:1e:7e:e6:5e:e1:
         a0:08:af:5d:d0:43:56:06:1c:ed:df:3d:27:dc:88:a0:f0:3c:
         1b:fc:e5:4d:30:d7:d4:e8:df:79:6b:e7:cb:87:73:66:f7:11:
         0b:50:6f:3b:05:7a:4e:b0:be:b3:44:1d:8d:bd:c7:7c:26:6b:
         50:ae:c0:d5:50:68:3b:3b:9f:af:c8:af:6d:c0:dd:1b:6a:32:
         f0:fe:0b:f8:ce:46:ef:cf:94:67:c9:48:27:8d:26:f2:54:27:
         b0:77:27:1e:7f:1f:c6:30:3a:53:6d:52:e0:c9:3b:ab:5e:67:
         e7:5f:8e:0e:4c:a4:6a:e6:a1:54:50:b2:c4:cd:8e:e3:6a:9e:
         82:35:a1:80:06:09:38:c5:26:d0:2b:04:36:ca:50:33:e9:22:
         fb:0b:2d:98:f4:59:24:68:30:7c:33:47:74:5e:4d:4a:59:28:
         91:b0:ac:3b:ac:e7:76:44:81:34:80:c4:40:df:16:2c:ad:90:
         0c:6f:33:01:5b:99:8c:95:08:a1:e0:dd:4f:f9:59:84:18:a7:
         2b:3a:1d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 13:26:44 2026 by rpki-client