Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File:                     SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier:          qPOcyTDnaTDTc7CvOz4kJkfPG5/S2pb1MeupmXKqLak=
Subject key identifier:   55:37:A8:AF:63:01:44:19:36:6A:EC:B3:E4:5D:09:1D:2E:94:43:35
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer:       /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial:       01A0DC848AC20B3C892155726F1FB78BD6A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number:          1789
Signing time:             Sat 26 Sep 2026 07:01:08 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:08 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:08 +0000
Files and hashes:         1: 5f7j3zGx8jvsXJiygSNasWYx_Zs.asa (hash: TjoqTdv343Ue7LWqKvDsc7lZXvzPyAhZYFhPUJ6/iB0=)
                          2: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: Wljwm6gdPZb4f4AFhFKv0jnbFgLa0OS0rG4IU4CCD60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:84:8a:c2:0b:3c:89:21:55:72:6f:1f:b7:8b:d6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
        Validity
            Not Before: Sep 26 07:01:08 2026 GMT
            Not After : Sep 27 07:01:08 2026 GMT
        Subject: CN=5537a8af63014419366aecb3e45d091d2e944335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:0d:1d:b2:89:b0:a7:79:d3:cc:32:ae:d9:
                    26:c6:43:85:d6:f0:05:b8:0c:ac:03:f1:86:ae:3c:
                    97:a7:05:27:1e:1b:fb:b1:1f:16:34:0d:13:9f:0d:
                    43:35:2e:ea:15:27:47:35:a1:70:31:24:af:3a:61:
                    ea:7e:7e:81:4d:56:b4:74:f6:af:01:25:e0:a2:63:
                    ab:35:a6:04:a1:66:25:06:bc:c8:cd:83:6d:9b:bc:
                    c9:72:22:1c:04:01:4c:3c:17:e6:30:09:5c:8c:bd:
                    a3:85:1c:d6:0e:31:d4:d3:ae:1e:03:60:2f:07:1f:
                    6a:0f:d2:4e:f6:73:ac:2f:07:bb:74:d2:25:e5:bb:
                    31:9e:c1:f3:f1:c8:0d:27:0c:4e:e4:21:43:8c:46:
                    e6:5f:ee:05:c1:0b:5a:81:7a:b2:dc:ea:30:22:0a:
                    ee:d2:93:26:87:51:98:f5:96:a2:13:45:55:c9:97:
                    83:49:e7:b1:94:f9:3b:16:ee:6c:c8:40:18:81:f7:
                    eb:a5:6e:df:4d:0d:d4:99:42:ef:0e:eb:84:91:b5:
                    92:cf:70:8f:5b:ed:05:da:ba:f1:c0:83:4c:e7:23:
                    a9:31:cf:59:8a:bc:99:dd:31:98:76:b0:8c:6d:be:
                    e3:73:fb:11:d0:6a:b4:06:73:a2:7d:92:10:97:30:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:37:A8:AF:63:01:44:19:36:6A:EC:B3:E4:5D:09:1D:2E:94:43:35
            X509v3 Authority Key Identifier:
                keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0b:0d:84:b3:ec:02:0b:9b:78:be:96:e4:85:7b:5d:71:f9:
         34:4e:46:80:14:30:37:2d:f1:c6:fe:06:b8:b4:34:4b:d2:f0:
         a6:e0:f4:92:06:4c:f4:96:6f:e0:ab:c4:28:59:cf:94:47:9f:
         7a:01:ee:e1:e6:aa:7a:6b:f0:12:46:9b:d0:3b:55:85:cd:07:
         82:19:38:63:33:47:2e:11:b3:80:0d:d2:a3:0d:7c:23:76:72:
         2e:a2:da:a2:ed:8b:54:f8:e9:53:b9:bd:ea:5a:dd:00:5a:ca:
         1e:90:7b:e7:32:54:3b:79:b7:16:c4:fd:74:1e:3d:b9:e8:0b:
         7b:31:c2:72:ac:c2:ac:db:ac:18:f9:df:ed:a3:70:e4:2b:50:
         0e:32:91:f9:92:45:bf:e1:f8:19:5f:64:47:46:41:b6:0f:76:
         8c:f4:b9:3a:bf:be:67:5f:ec:a8:01:44:b5:6b:f8:08:2e:48:
         21:2f:11:83:8c:c0:fa:43:aa:d4:2e:27:92:3a:fb:28:7a:49:
         ee:a5:9c:43:57:14:69:d5:ea:5e:8b:a9:f4:c8:d1:d0:99:16:
         87:1b:b9:1f:a5:20:e7:c7:b6:a1:2d:07:36:b7:51:2d:f9:c7:
         d6:17:7c:5f:b4:72:f9:11:a5:3e:45:e8:49:bd:a6:8e:cc:b6:
         e1:03:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:57:06 2026 by rpki-client