Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File:                     qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier:          bW+dHaSEUxYtra1oQigzDTJoEXTAhSLmGpELcwfRW6I=
Subject key identifier:   C3:96:6A:57:92:76:2C:D3:4D:4D:93:C4:A5:BA:63:C8:FB:8E:9C:DA
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer:       /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial:       01A13E5CEF6F3DF8F6143217737C0620A208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number:          0C58
Signing time:             Thu 15 Oct 2026 07:00:39 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:39 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:39 +0000
Files and hashes:         1: QRd4aPFV9jlBuWiqVWId4f78nwU.roa (hash: z76kR0ZXpWXElfaEyx2j2tbap+nSUCRwRkiT2NmSfmM=)
                          2: TDrwPz5cSUxFPnVvws0Z_s91Mkg.roa (hash: 3eqyc2mDwFuCfQZiQCI5BqQ2pZcss/40LOFRlTEbAQg=)
                          3: m4dgqt4q3BW8OWqlBOyJfQCkzg4.roa (hash: RX9ZrO6C2aJh14zzdzbYCuRJ5VKIoTmYAZYYqulZ2cM=)
                          4: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: WmGUaiKSAx9WIrT2nKqK6thDzF9bngpSnfH1F50YpO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:ef:6f:3d:f8:f6:14:32:17:73:7c:06:20:a2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
        Validity
            Not Before: Oct 15 07:00:39 2026 GMT
            Not After : Oct 16 07:00:39 2026 GMT
        Subject: CN=c3966a5792762cd34d4d93c4a5ba63c8fb8e9cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:64:d1:7b:9e:93:88:fa:04:ae:9c:1b:63:
                    f0:73:6d:8a:01:27:7e:96:c6:e9:4d:3c:1f:da:33:
                    9b:b9:4f:a1:9f:65:5f:45:fa:2a:fc:9b:87:8f:88:
                    2d:4c:5f:72:5d:fa:15:55:77:fc:05:6f:f6:36:1a:
                    7b:19:74:ef:f2:28:7d:53:1e:b1:0b:21:78:8c:48:
                    53:d4:83:84:1f:e0:c7:c4:5e:0a:ab:7f:6c:9c:95:
                    39:4a:77:b2:2f:e2:88:5e:50:c6:71:f3:24:6d:e5:
                    93:a0:1e:bd:99:d5:9c:be:6c:d5:08:1e:dc:d2:35:
                    4a:b7:c0:1e:21:86:26:39:a0:a6:26:c0:b7:c2:c2:
                    f8:42:90:e3:6d:6f:cb:7c:89:e3:0e:7d:f5:b3:dc:
                    c8:1c:80:a5:4f:c6:bb:ce:cb:8d:62:60:46:03:95:
                    9e:3c:52:55:58:34:9a:10:bb:e8:7e:14:fd:28:de:
                    53:e7:12:07:96:eb:68:92:de:3c:fa:8f:16:f1:ce:
                    44:49:83:6a:8d:e4:93:28:25:f7:ef:c4:c4:c1:12:
                    62:e9:7c:64:25:7f:df:01:94:34:5d:bc:ec:83:ef:
                    c7:4d:5d:78:20:1d:41:e9:9a:cd:cb:3f:83:be:ba:
                    66:72:1d:43:aa:44:95:e1:4a:d3:42:c2:ae:55:8c:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:6A:57:92:76:2C:D3:4D:4D:93:C4:A5:BA:63:C8:FB:8E:9C:DA
            X509v3 Authority Key Identifier:
                keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:bd:e2:d9:f7:6c:16:b2:55:e2:9b:8c:b6:c3:5c:3b:b0:11:
         34:99:9f:b9:3e:84:61:9d:15:b1:80:2f:c4:00:d6:f0:df:20:
         cb:8a:e5:3d:5f:94:f8:18:92:81:18:ab:0f:cf:ea:0b:69:18:
         df:56:52:ef:f0:be:8a:97:ae:3a:8d:15:b4:33:17:ba:61:84:
         43:0a:8b:59:48:4e:db:50:2b:9f:03:ec:cc:57:44:f7:2d:c7:
         3e:f5:8f:18:24:5b:d9:5a:dd:ca:7a:73:11:ab:ba:b3:5c:f0:
         7d:a5:98:fd:7b:7c:9c:d7:20:dd:eb:83:57:e5:a2:18:45:3b:
         f7:bc:e6:4c:95:62:9c:cd:63:95:8c:0b:63:f5:81:6d:6a:bb:
         d9:6a:cf:43:bc:e7:9d:89:72:c7:00:ef:a6:78:00:8f:89:b2:
         a5:b1:11:5f:ad:37:a5:cb:e7:3f:e2:01:49:87:1f:cd:06:16:
         8c:bf:7a:9f:6e:43:26:8f:7b:69:3d:bf:f2:06:51:cf:c7:90:
         30:4b:96:1e:2d:b2:3b:d1:d9:85:03:65:7b:1e:a0:82:33:7a:
         8d:d2:95:33:a1:b8:a3:d4:33:34:83:57:d2:04:8f:f4:a3:03:
         01:b0:fa:6d:36:4f:59:c0:c8:31:26:54:31:75:f8:9c:71:bc:
         c2:5b:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:00:29 2026 by rpki-client