Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
File:                     sq-qRAstZZOhKf6qKg_DHRo8X4E.mft (raw, json)
Hash identifier:          wMDsdNIYdvxIwV15ni6FHAJyS5So0xaSpgmj31QjQPE=
Subject key identifier:   AC:72:CD:0E:A3:46:09:C5:0D:5D:20:32:DC:D2:6C:43:08:96:B7:66
Authority key identifier: B2:AF:AA:44:0B:2D:65:93:A1:29:FE:AA:2A:0F:C3:1D:1A:3C:5F:81
Certificate issuer:       /CN=b2afaa440b2d6593a129feaa2a0fc31d1a3c5f81
Certificate serial:       01A10926DD7B17409458B30113A638187EBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
Manifest number:          01E1
Signing time:             Sun 04 Oct 2026 23:01:44 +0000
Manifest this update:     Sun 04 Oct 2026 23:01:44 +0000
Manifest next update:     Mon 05 Oct 2026 23:01:44 +0000
Files and hashes:         1: 3v3q9uaO0I3Nwhq561xaonM_DTU.roa (hash: MppwYTWzIUYUlGXSC1GNbatY5HoguqVx5TkngM8EEDQ=)
                          2: sq-qRAstZZOhKf6qKg_DHRo8X4E.crl (hash: gNxH+81uoz87FFLQBdqE3O3KDsnSFYyUnSPkxJe20Yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:26:dd:7b:17:40:94:58:b3:01:13:a6:38:18:7e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2afaa440b2d6593a129feaa2a0fc31d1a3c5f81
        Validity
            Not Before: Oct  4 23:01:44 2026 GMT
            Not After : Oct  5 23:01:44 2026 GMT
        Subject: CN=ac72cd0ea34609c50d5d2032dcd26c430896b766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c6:9c:24:dc:1d:e8:a1:a4:cf:46:61:d7:61:
                    0e:27:bf:01:f2:0b:6a:34:14:09:2e:1b:4e:13:35:
                    8c:52:ab:fc:bc:a4:95:72:6c:25:0e:4d:3f:0b:c9:
                    33:37:1a:7c:ec:e7:17:df:94:cc:91:04:e5:5c:81:
                    62:79:0b:e4:0d:e4:4d:1e:89:9b:01:df:87:14:ee:
                    66:d9:3c:a3:93:40:f8:6c:3d:54:08:4f:39:bc:92:
                    3b:0e:d2:39:bf:54:3b:55:b6:bd:69:24:fb:fd:4e:
                    78:f2:24:46:a6:48:25:b9:35:bf:d6:6c:34:50:4f:
                    13:bf:9b:c3:b7:45:31:46:d4:4f:38:c2:70:8b:18:
                    39:fb:e5:d3:0f:e5:43:ac:b8:1c:44:73:71:7d:a7:
                    1a:3f:2e:e8:a2:ba:ee:99:97:7e:29:de:11:8f:dd:
                    ca:79:36:ea:ff:43:3b:6b:b0:ef:e2:41:ad:3f:9c:
                    b1:3e:36:eb:24:e1:1a:31:f6:55:3d:74:08:05:a2:
                    a3:75:ec:d8:e2:69:31:fb:ab:19:35:95:d7:95:ca:
                    b9:5e:89:d9:d3:2a:18:0f:c4:1b:c8:6b:21:e3:c9:
                    10:5d:88:40:23:a0:0c:71:6b:bc:ca:c7:49:64:cb:
                    da:c7:05:ca:74:82:af:1c:97:3e:47:41:b7:b3:30:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:CD:0E:A3:46:09:C5:0D:5D:20:32:DC:D2:6C:43:08:96:B7:66
            X509v3 Authority Key Identifier:
                keyid:B2:AF:AA:44:0B:2D:65:93:A1:29:FE:AA:2A:0F:C3:1D:1A:3C:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:93:a8:6a:33:d0:92:56:3c:32:40:14:d7:d2:89:7d:7d:fd:
         ba:b4:6e:89:87:03:88:40:37:27:9d:7a:2d:47:aa:34:0e:db:
         f2:39:02:84:21:cc:ba:c9:ab:a4:61:a6:b0:34:b6:d9:37:63:
         c6:60:31:8f:f0:14:48:57:a2:06:5f:23:6b:1a:2f:d7:3e:e2:
         22:d0:03:96:00:2d:bf:b1:7f:c4:3b:81:8d:3c:e2:e2:42:aa:
         e5:9f:55:8d:bb:85:b6:e8:66:90:75:10:8d:09:02:89:8e:6b:
         fd:db:df:0c:be:7c:1c:63:26:e4:ea:3e:83:87:86:f7:5d:6e:
         ed:c9:90:d5:da:16:68:f4:18:47:8c:9b:9a:8e:3e:76:7a:90:
         03:0a:81:df:56:d5:08:20:a6:ff:86:96:3b:1f:4a:a4:85:23:
         53:c4:75:44:a1:97:92:02:e4:7e:0c:ad:88:0a:ff:76:9b:2b:
         30:55:b1:1f:29:c6:7d:2e:d1:41:4c:ef:1a:c9:f5:34:9e:14:
         53:18:af:6a:3a:2b:b6:f3:7e:23:af:c3:7d:f4:76:d2:33:b9:
         08:0f:62:29:af:37:a6:ee:38:8c:6e:d3:f8:9c:3d:6e:af:63:
         7a:9e:76:4b:1f:8f:39:96:76:c4:a0:e6:d0:71:9a:3b:2e:86:
         87:cd:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:11:44 2026 by rpki-client