Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File:                     qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier:          vhQOAh5xxkmKLjj/80zGq0MJkVFomDmvdDd7lVWyDO8=
Subject key identifier:   1E:2D:AB:35:85:59:B7:FD:19:C9:9A:BE:E4:0F:07:E8:D3:2D:A7:3C
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer:       /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial:       01A0D20130CCD591AE01CF2571370E8D5892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number:          0577
Signing time:             Thu 24 Sep 2026 06:01:28 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:28 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:28 +0000
Files and hashes:         1: 0iYZfQ8-eqWQNGI1M9hFiEbSih0.asa (hash: eDrcHfgHO13vjitCh+CuiWxBfcYn7xGXg/GhkUlwEG8=)
                          2: 45WujzBVRQsC1oZrNqZZa9_V5Jc.roa (hash: CKAS8nfG1ADX9UDNnQiEdv5QlzbJQm8BtCkzXPTBKgs=)
                          3: Qaz9XAni_yIQ7F4V86TE-DUi4NE.asa (hash: rvt0cOfBmuzqjIWb11wj25KlP9Cx+dsTFZQsIbWyVbY=)
                          4: VuDaNQQyX4M3Zzv_NUfm_z1bP40.roa (hash: QeHd8wUNciY03pcdxyX6N8nbC5Ds12SEf3AH2aDu73g=)
                          5: YTXG6CnnAgvZJ3YFpJTQNBcTcnU.roa (hash: f1vciN9OYhBL28ghvbq3Y2SRT30kue4PyCYN5BhDHAk=)
                          6: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: tQfHbQI8k8sEU4IEYgServowJ3rvQ1bLYz5z0Oy0nQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:01:30:cc:d5:91:ae:01:cf:25:71:37:0e:8d:58:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
        Validity
            Not Before: Sep 24 06:01:28 2026 GMT
            Not After : Sep 25 06:01:28 2026 GMT
        Subject: CN=1e2dab358559b7fd19c99abee40f07e8d32da73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:cc:d6:27:10:9f:aa:f7:cb:71:3b:53:9e:
                    2c:bd:9e:52:69:a2:c0:3f:09:36:2f:69:f5:68:ca:
                    b7:69:07:18:c7:24:96:52:8b:36:74:7f:e3:37:03:
                    65:5c:f7:fd:5b:e7:b0:b8:95:ca:dc:85:8d:18:4c:
                    89:e0:4b:48:05:38:a6:60:3e:23:a1:28:f2:09:bf:
                    f3:8c:95:aa:6d:e6:23:20:ea:6e:94:bd:92:83:7c:
                    89:95:7a:cf:11:ae:db:85:91:fd:3d:a0:54:a7:e8:
                    2f:6c:61:f8:0c:5c:df:98:08:1e:40:6e:d9:43:d3:
                    0c:45:15:1c:62:1e:19:9e:2a:1f:da:a6:0b:9b:21:
                    25:e3:97:d8:de:99:7b:c6:39:bc:2b:4e:12:89:5a:
                    44:70:b8:85:84:a2:6d:73:54:6a:0a:5c:ce:a3:d2:
                    d0:a4:84:d1:bb:16:f5:d0:98:76:fb:ac:5b:96:d1:
                    f9:73:ac:a9:da:39:eb:33:81:ec:37:ea:d6:79:7e:
                    5b:73:5b:15:8d:04:c1:cf:76:22:30:b6:94:da:6d:
                    4f:f9:ce:50:a7:e6:8e:0c:f8:a2:46:f2:3a:ca:c1:
                    be:e4:ab:dc:32:36:67:2f:91:97:1a:1e:42:5a:fd:
                    b3:72:95:36:03:a4:38:da:98:7f:22:4a:59:33:82:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2D:AB:35:85:59:B7:FD:19:C9:9A:BE:E4:0F:07:E8:D3:2D:A7:3C
            X509v3 Authority Key Identifier:
                keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6b:8e:49:a2:9a:39:de:e2:05:36:e2:59:fa:a4:5f:6d:1d:
         78:3b:6b:c3:2b:8f:5e:dc:9d:f1:6a:21:63:4f:85:b6:8f:eb:
         79:60:49:cd:d1:be:ff:4a:52:7f:83:62:82:2b:00:52:3e:92:
         3f:6b:d4:cd:c7:5d:4e:8a:58:b1:49:58:50:c6:cf:9e:e2:60:
         f0:af:a7:52:80:97:27:9e:fe:1f:fd:a3:b0:32:11:e4:fa:73:
         66:0d:f0:01:04:21:a3:1c:60:c2:91:3c:c8:b3:5d:71:e2:1b:
         20:73:fb:35:b5:c6:e6:c2:3a:f2:3c:ec:2a:10:e5:99:26:82:
         9a:72:9c:6c:18:8a:a2:97:f1:b4:77:68:60:47:24:48:0b:b1:
         9e:b1:c0:fb:24:72:d6:ce:03:15:af:a2:20:12:98:91:fd:72:
         0c:be:95:6e:ae:a9:78:00:ae:02:48:20:d7:34:0c:8c:a8:45:
         da:53:80:19:d8:47:34:d6:07:02:45:10:13:7a:00:a1:ab:45:
         39:70:f5:97:a3:36:a6:36:f1:2c:2c:f5:53:c6:d8:4b:5a:b4:
         4b:6d:44:d5:f3:f1:d7:40:4f:2c:91:ff:ff:a4:d5:c5:a7:ba:
         ba:87:3b:92:ef:37:3f:14:18:22:fe:7f:28:ee:de:a1:b5:89:
         38:e3:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:26:53 2026 by rpki-client