Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File:                     qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier:          V7mwN6zhvJXXJey88R5a/X0EY8OhKh3Jb0oXNWacZUg=
Subject key identifier:   4E:D6:C8:0F:C0:F9:D3:E4:E3:A8:45:8D:8B:A0:93:5D:F4:AF:EB:58
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer:       /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial:       01A0EA09AFD598333616F286AF6C03CBC44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number:          0488
Signing time:             Mon 28 Sep 2026 22:01:38 +0000
Manifest this update:     Mon 28 Sep 2026 22:01:38 +0000
Manifest next update:     Tue 29 Sep 2026 22:01:38 +0000
Files and hashes:         1: 8KhmWim7fQfJ5AAd7R4MgnmouFA.roa (hash: 8buKD0ZZ/SUyIgK6EsyebC1ig+JGEDdmvljz6uJr5T4=)
                          2: FdPkrQM5wJfWgwRztXidsCzsmxs.roa (hash: kySbmspJSgU7jUiKcEQCWmWkzi3UO7YjG6VncBVDrTg=)
                          3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: etC6ckJwpJBKUtbdkm0HSrkDsKFuWHinLBu8EuebaSs=)
                          4: sj-hv4O5_Z9peRXGM4t2YS9no0Q.roa (hash: Fng1VhmMN2AdS6GsFKTHTXU6+4yOuUH1ezrFYVymYmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:09:af:d5:98:33:36:16:f2:86:af:6c:03:cb:c4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
        Validity
            Not Before: Sep 28 22:01:38 2026 GMT
            Not After : Sep 29 22:01:38 2026 GMT
        Subject: CN=4ed6c80fc0f9d3e4e3a8458d8ba0935df4afeb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:b1:d1:d8:a6:ac:3c:38:2e:2c:a3:c2:95:
                    5e:be:90:b2:15:a4:8e:55:1a:d1:3c:56:db:62:f7:
                    10:5f:88:3f:0a:26:c0:75:f2:81:ce:37:e1:e3:75:
                    4a:e4:a2:18:85:aa:c4:1f:d5:8c:cd:55:67:bd:c6:
                    42:6d:aa:93:a1:b2:c6:57:74:9e:99:06:42:40:19:
                    1c:e1:b3:cc:43:67:67:e7:ad:21:ba:7d:f8:d5:98:
                    fe:9d:d6:d3:30:a0:03:38:70:10:3a:12:02:6c:d1:
                    c9:c0:42:27:88:3e:d3:fc:f0:27:d8:41:89:9a:5a:
                    77:b5:08:09:7d:38:86:29:19:67:1b:31:b9:a1:cd:
                    f5:08:fc:1c:d4:ea:98:2d:b2:3d:90:9f:31:a5:34:
                    ed:3f:8c:3a:b9:34:8b:db:45:a8:ca:03:3b:f3:63:
                    be:2d:33:f1:77:8f:b3:38:a6:0f:df:11:d5:e9:62:
                    5c:3e:d2:3e:03:21:bd:04:c1:b2:c0:72:6e:06:a3:
                    27:fd:c9:76:a2:b8:b7:0f:7e:f5:74:53:53:ce:a3:
                    1c:d2:87:0d:01:c0:52:cb:11:8c:c2:3f:e3:ad:c4:
                    36:a3:cc:53:37:48:98:57:3b:00:3b:7d:9f:e5:1f:
                    79:f8:41:75:34:79:4b:ea:9f:e7:9e:16:94:e8:c2:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:C8:0F:C0:F9:D3:E4:E3:A8:45:8D:8B:A0:93:5D:F4:AF:EB:58
            X509v3 Authority Key Identifier:
                keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:41:7a:d2:aa:57:f9:73:2a:88:2b:ea:30:5d:a1:d0:58:79:
         6c:9f:15:80:82:da:66:4a:da:5a:e0:83:51:1e:01:9f:75:a1:
         44:d2:96:48:f3:04:4a:a7:15:a6:8c:1d:00:ef:ab:2a:b5:d8:
         d5:9e:de:97:d3:bb:d3:f8:2b:5d:f2:61:37:82:c2:e7:89:e4:
         09:cb:86:d7:0c:ad:ca:13:ea:2b:f6:12:09:a9:c7:04:c4:7f:
         55:67:66:fd:e1:99:9a:7f:67:98:cf:33:c4:07:26:d3:ac:e0:
         51:63:77:0e:7a:5e:41:e3:42:66:cf:6d:fa:38:05:19:57:41:
         33:c4:42:0b:8a:fa:e4:84:cd:35:a9:c7:ca:83:ac:ed:6f:ee:
         b8:a3:fb:75:17:7f:89:21:3b:18:bb:7a:a8:30:aa:ed:8e:a9:
         c3:70:40:e7:86:e8:32:11:ed:c6:0f:53:b0:fa:ad:02:a5:5d:
         35:d2:3a:46:23:16:14:5f:6f:95:30:86:82:ca:ac:28:88:ea:
         d6:2c:c2:f2:f3:0c:da:51:be:e3:9b:df:d7:b5:32:3a:20:b9:
         01:8f:19:a7:2a:d8:41:16:84:78:7d:59:3b:7b:89:d6:82:bb:
         2b:e3:f1:5e:6b:5c:79:4c:9f:bc:49:6a:d3:cc:cb:13:84:80:
         6d:59:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:59:34 2026 by rpki-client