Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File:                     qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier:          IohpNdKHKoCjWyj9kMt1qNVZdd6CpWGCUqxxXSKZ0rs=
Subject key identifier:   61:BC:8E:2F:C5:12:4D:E1:7E:10:CE:1C:3E:2D:E0:7E:26:73:C8:F9
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer:       /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial:       01A0D94C6614D58593F43C845074419C9989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number:          160D
Signing time:             Fri 25 Sep 2026 16:00:57 +0000
Manifest this update:     Fri 25 Sep 2026 16:00:57 +0000
Manifest next update:     Sat 26 Sep 2026 16:00:57 +0000
Files and hashes:         1: V_7nI2rclmISW7ugXTvlUt42zwc.roa (hash: dgCH/3weKUPvWu32YRYMJtSWtM0AYHSCUPBoJHsRJj8=)
                          2: gH9SOFGnHPwoUMA2V0WudJj9Q74.roa (hash: qynBe2yLaxPIvjQZTw4fuQC6WMeX9Hc3FmOm9LE7GH8=)
                          3: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: 81aoIz8UycC25FIZXhjxPLwAfQduTF3srQFwBNMk8nw=)
                          4: vC57wbOLFiAKhCB_1aTbbKiskGA.roa (hash: n6ntOBWK7goFgSVFaq97RplF4ii7t5Z5AdSbkU7hXp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4c:66:14:d5:85:93:f4:3c:84:50:74:41:9c:99:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
        Validity
            Not Before: Sep 25 16:00:57 2026 GMT
            Not After : Sep 26 16:00:57 2026 GMT
        Subject: CN=61bc8e2fc5124de17e10ce1c3e2de07e2673c8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:ac:8b:c9:d7:b9:17:71:0d:68:bc:c7:59:
                    d1:c8:a9:14:07:8f:e3:ae:83:95:8b:14:8b:14:1f:
                    f2:5c:b8:f8:30:14:29:71:0b:56:bf:67:ff:04:98:
                    c3:bf:3e:89:30:7b:9c:67:c8:d0:7d:a0:2b:40:8e:
                    ef:96:78:f5:96:63:4d:61:ac:35:ce:ef:77:d4:52:
                    98:37:89:1f:8a:ae:1d:7e:97:1c:05:e6:95:d4:ca:
                    8a:b6:0e:a9:f5:66:98:b9:15:81:28:54:29:97:96:
                    3d:a7:b3:43:a9:cf:75:47:c4:26:ef:bf:ec:b9:75:
                    86:0f:a7:ad:7b:2e:dd:47:6c:f7:95:32:f6:87:cb:
                    a7:87:e1:3b:48:ae:91:7c:dd:36:1e:dc:55:27:f4:
                    6c:2e:81:37:f7:2a:20:5e:33:a2:38:37:e2:4a:58:
                    af:d5:40:7a:f7:02:21:e5:9b:31:8d:5d:e7:8b:a2:
                    c5:78:bb:84:0a:dc:f9:f5:b8:c7:e0:e6:20:c0:1e:
                    66:cc:5c:85:c7:08:5b:c2:46:6d:b8:28:d7:6e:ba:
                    e2:9d:4f:72:48:8d:08:b3:90:60:91:bb:6b:ed:01:
                    5d:aa:17:8d:b2:39:3b:38:25:c8:fd:6e:ed:15:79:
                    68:19:61:39:2b:57:ea:59:90:e0:c5:b7:45:a9:51:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BC:8E:2F:C5:12:4D:E1:7E:10:CE:1C:3E:2D:E0:7E:26:73:C8:F9
            X509v3 Authority Key Identifier:
                keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:16:c8:6a:4a:a1:62:ea:19:50:1d:a2:07:e7:bd:14:af:02:
         46:b5:52:70:77:99:c4:c7:73:9a:a4:75:7a:1e:32:d4:81:43:
         6d:8d:e0:f7:b6:49:ae:e2:ee:98:fb:d7:29:25:58:1a:17:35:
         99:5c:d9:67:cf:76:4e:30:74:95:fa:71:68:ad:a6:42:4d:5e:
         38:cc:7a:2f:15:25:44:df:c0:08:1a:c0:47:a0:80:ba:3e:b2:
         39:28:c8:26:dd:7d:e1:67:ed:1e:e2:a3:3b:34:da:da:20:3d:
         63:99:e3:0f:37:b8:6a:c3:d7:bf:41:9e:89:f0:6b:2e:a6:5d:
         ab:18:d2:17:55:0e:38:51:ed:d0:e9:3d:9d:9c:eb:b7:0f:f7:
         d4:a9:2d:b6:96:36:d7:32:c4:52:3f:44:81:c0:9f:73:bd:d4:
         b8:7d:fb:40:d3:89:32:2b:84:ae:ce:b7:10:0d:7b:c5:8b:6b:
         36:74:f0:4a:d2:86:24:0c:81:bb:5d:6b:82:af:e5:15:65:b2:
         80:e4:ef:a5:8c:65:ec:20:15:e4:07:a3:6f:8b:1b:39:1f:44:
         9c:f9:06:3c:a7:c3:f3:c4:51:df:02:1c:d7:1d:a7:40:e7:85:
         ad:9a:39:fb:53:34:82:fe:6f:ba:26:84:84:44:a8:b0:27:8f:
         e7:e9:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:48:36 2026 by rpki-client