Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          saIrfMaw1N7Yw9ahWU0v5UKrHp2KVKZUnBxurCkhG3I=
Subject key identifier:   2A:58:18:83:1E:19:1D:99:0A:34:46:6B:4B:FE:E2:AE:34:88:3A:0B
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       01A0EB8A1AE04E37C42B4246995918D34CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          1AAB
Signing time:             Tue 29 Sep 2026 05:01:31 +0000
Manifest this update:     Tue 29 Sep 2026 05:01:31 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:31 +0000
Files and hashes:         1: A7_y22PIg0hPAMpCsH_sCKGtyg8.roa (hash: jYk6V/JIFZujPYouL6dTCjVEwQr4OkGYQk0D5ScRZVo=)
                          2: Ksd3OiB_AIxcmUtGOKUPQuXbBbs.roa (hash: mbt2rFbow8jwUY5FOtfvQrtCibBO+H5M+VNJrWE5hUY=)
                          3: bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa (hash: BubMw86WqvaBOSfoNUBrIVcL+fL5Ns64cLxY/APuJ7E=)
                          4: f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa (hash: PDGWp7iUzyz4cXF2Z4OAk/knVLv4u1kvbR76Ezmz3vs=)
                          5: j4Ert-J3RYXgEKpLcLx5_T9dxS8.roa (hash: keE/Qns0D+PUwgQtZ9LOIqamoxuah8ZLWQxn+5RiOWw=)
                          6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: qKX8CAbLBc94HDJVnEx+h6zD4GrbEngnTbBdGsytMCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:8a:1a:e0:4e:37:c4:2b:42:46:99:59:18:d3:4c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Sep 29 05:01:31 2026 GMT
            Not After : Sep 30 05:01:31 2026 GMT
        Subject: CN=2a5818831e191d990a34466b4bfee2ae34883a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:a6:46:16:24:de:9c:03:9b:f8:ba:8b:bd:
                    a4:6d:51:9c:6b:40:2b:15:b9:39:74:8c:63:96:f9:
                    aa:5c:04:41:1e:5f:e6:a7:3d:4f:58:c1:0e:bb:0c:
                    15:10:17:ed:5d:d7:61:73:b5:10:e0:1b:22:0a:7c:
                    ac:57:9e:37:8e:14:17:b6:6e:1a:4c:dd:38:c7:7e:
                    7f:25:e7:fd:e6:54:e4:06:f0:5e:9c:22:19:60:8e:
                    af:13:29:31:d0:c7:2c:76:a6:3c:d2:81:d5:fd:0e:
                    8f:ec:ae:69:5a:10:0f:96:d1:6e:c6:e6:f2:ea:99:
                    7c:63:df:1c:f2:d9:04:b9:3e:5b:1a:48:cd:37:8f:
                    20:14:91:8c:c0:07:bc:fa:38:b2:d2:d7:4c:66:bb:
                    4d:7d:24:6f:51:91:f4:5c:f1:ec:e8:43:2e:bb:26:
                    82:3c:9f:b4:08:09:ac:86:0e:fd:1f:fe:19:f9:33:
                    d6:8e:9c:3d:a7:4c:a0:c0:e7:f6:fb:c6:e7:ad:e0:
                    d2:f8:3c:a4:4a:b3:01:d5:b1:d0:68:55:b7:d6:05:
                    08:14:45:19:2e:68:0f:1a:6a:3e:72:90:a1:5c:e3:
                    ff:cd:a1:30:3e:14:05:0c:1c:ac:20:ac:5b:c7:90:
                    4b:21:07:7f:cb:5d:fd:3a:d1:87:77:2e:bf:7d:53:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:18:83:1E:19:1D:99:0A:34:46:6B:4B:FE:E2:AE:34:88:3A:0B
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7c:83:da:f1:ed:97:0e:d5:e1:b3:25:4e:1e:6d:0a:e7:da:
         77:1b:a7:50:5a:f7:a3:57:ab:aa:32:de:17:60:8e:6e:67:8f:
         73:db:62:0d:74:70:b5:a4:dc:4c:ef:e8:92:63:e0:97:c0:ff:
         a7:39:9f:ff:74:c3:e5:99:94:29:2c:9b:6e:24:b1:bd:a0:8b:
         09:05:58:d0:21:75:8b:6f:08:14:0b:07:a6:45:06:8e:54:3f:
         a4:ac:60:36:9e:b1:7b:63:1f:3b:53:f5:1f:3c:24:de:9b:e2:
         fc:ff:e4:f5:2a:a4:fa:0f:f5:63:fb:1f:75:a3:aa:c6:b2:d2:
         46:92:b5:df:be:bd:96:63:06:6e:97:16:b9:e7:e2:de:c2:e1:
         73:ec:f3:ec:d7:72:54:3b:e6:9b:1f:70:ac:6b:79:c9:32:c5:
         04:ba:c0:e4:c6:27:fd:47:6f:ce:fd:20:d1:9b:ee:1d:ca:87:
         6d:3b:d3:a5:ec:c6:3e:27:13:23:06:9e:c8:8c:aa:e3:59:50:
         e8:66:70:be:c4:bf:c2:3e:74:c1:81:26:64:85:5d:e5:66:66:
         d6:b1:62:52:cf:28:34:72:24:67:98:14:4a:00:9b:d2:77:65:
         04:51:ee:ec:6e:f8:48:f3:13:e1:98:65:b5:a2:9e:0f:e4:4d:
         2b:74:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:21:50 2026 by rpki-client