Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
File:                     qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft (raw, json)
Hash identifier:          hjO7M8lRzaAizYJvv7NYIPjsUQ5cCbh3HgKn4a3RoWE=
Subject key identifier:   D9:11:44:FD:AD:6B:E0:B5:91:8A:6A:FD:72:AC:FF:E5:F2:D6:E2:76
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Certificate issuer:       /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial:       01A1DD94CE8EB8280678828A676463E68FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
Manifest number:          1AFC
Signing time:             Sun 15 Nov 2026 05:01:19 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:19 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:19 +0000
Files and hashes:         1: fsorRjNLpV567Bfhzvrah76aFJM.roa (hash: j4qP9CY0ItXZav1pWfPGEd7YIBpId1LZ5wWL7A5xDlc=)
                          2: hMWRlyBu_98qhrvASUIfs50ilt4.roa (hash: IGWE5HJqvsWQ/JQ2ivM4pc0kcFg9yZY3dxE1FGpgh1g=)
                          3: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl (hash: zow9yWvMN3TIS4HiuktkkFWUWn1ZHr+x5sXUoHa8/60=)
                          4: yeLJIzyENF-xSwUvcw-83vXbHV0.roa (hash: /maHsTe7P80FB56mfWTMzRdcMrW1yJ3jN8SeCvnlqtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:ce:8e:b8:28:06:78:82:8a:67:64:63:e6:8f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
        Validity
            Not Before: Nov 15 05:01:19 2026 GMT
            Not After : Nov 16 05:01:19 2026 GMT
        Subject: CN=d91144fdad6be0b5918a6afd72acffe5f2d6e276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:a1:93:9f:df:83:a8:63:b3:c2:30:bd:90:
                    e2:ac:8f:3d:94:d7:28:aa:fb:a1:3e:ac:40:bf:8e:
                    24:bf:ed:29:79:95:be:84:ed:56:e8:6b:ba:e4:16:
                    a1:ad:a9:1f:03:22:33:68:e2:11:74:df:6c:12:a5:
                    92:e2:1b:1d:71:fc:44:5b:a9:43:a5:91:b2:2e:45:
                    92:2e:32:45:ac:12:1d:e4:58:a7:ca:79:8d:27:2c:
                    63:4f:9a:11:93:94:bf:8c:8e:2b:53:7c:95:b4:e9:
                    a9:3b:2f:68:de:33:29:f3:5a:ba:ce:cc:ee:bb:e2:
                    f0:a3:98:98:40:4b:a8:91:fa:54:39:e3:be:07:a0:
                    2d:1e:d7:5c:84:3b:64:ee:2b:9d:a6:c8:c5:d9:74:
                    9f:ce:dc:54:81:d3:d4:c6:ab:c2:9f:a7:48:13:4f:
                    75:76:bc:d6:f1:19:7b:1e:f3:1c:d1:bb:9b:7c:60:
                    08:f7:ee:8d:26:a8:8c:07:26:f1:b6:74:91:b7:e6:
                    85:a1:1b:02:f5:63:b3:c4:aa:9c:fe:c6:48:47:d3:
                    f7:94:62:0a:e1:ee:87:30:8a:53:bc:1e:18:66:8f:
                    0c:49:b9:91:33:c4:31:ae:cc:5f:a4:05:39:63:d7:
                    80:46:25:3e:91:75:30:e4:2b:75:d4:8b:81:a0:4e:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:11:44:FD:AD:6B:E0:B5:91:8A:6A:FD:72:AC:FF:E5:F2:D6:E2:76
            X509v3 Authority Key Identifier:
                keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:6b:4e:1f:43:5f:89:db:8f:e0:86:81:de:24:95:a1:ab:
         c4:49:42:16:23:33:67:f5:b2:9d:9a:77:2c:36:44:0e:8e:1b:
         a8:49:fe:76:92:63:5e:29:82:f4:26:ad:0d:86:a8:ff:87:90:
         05:66:90:c2:1e:02:67:6e:bb:65:b7:2a:c2:4e:da:3e:64:90:
         60:0c:54:29:e4:4a:f2:95:65:dc:34:6e:7a:ee:c8:79:ea:90:
         c0:1b:b2:7f:94:78:e7:d9:2a:d6:7c:5d:f4:45:dd:2d:2b:ae:
         0b:49:34:c8:af:f8:74:7e:1c:2d:31:52:9f:5b:6b:ba:37:8f:
         b2:77:b9:17:44:3e:e7:6d:bb:db:05:82:3e:68:5e:ec:4d:4f:
         97:21:dd:5c:a0:73:c3:81:b3:32:0b:44:70:bb:eb:b2:6b:f2:
         a0:81:c8:ac:7a:fd:96:d6:5e:d2:bd:a1:6c:b5:04:7f:ad:33:
         6d:c4:5f:da:95:e8:fb:ae:eb:3b:bb:6a:2c:53:71:0e:ac:d9:
         12:5f:48:5a:24:8e:e1:73:10:32:92:f9:d6:d5:4b:85:9e:26:
         bd:37:40:04:ab:1b:37:bf:09:de:34:d4:94:f3:a0:cf:ed:79:
         79:14:2b:51:53:59:13:a6:b4:27:5d:e9:4d:18:f0:74:bb:03:
         e4:7f:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:37:37 2026 by rpki-client