Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File:                     qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier:          eq/mBMLu+ChoB24vOSs+DsEgtXfI+GseuBFVwSy2VLY=
Subject key identifier:   3E:C9:F9:BC:D0:C3:3D:6B:18:1B:00:9B:28:C2:0E:B5:17:7C:B3:E9
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer:       /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial:       019E20243514427F2F6CE7658F8CFB1D3F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number:          0CAE
Signing time:             Wed 13 May 2026 07:01:44 +0000
Manifest this update:     Wed 13 May 2026 07:01:44 +0000
Manifest next update:     Thu 14 May 2026 07:01:44 +0000
Files and hashes:         1: 1yNxCmePPnXYmANALvF6crPNDSc.roa (hash: NnbT8iaws5JgljNe+UvSj+hAMr2jidNTvDwKfdnsRJM=)
                          2: IjH8Bw6khS3HfsHRDOq7KVhCvtE.roa (hash: xqV8sj84jv/de5gXJFmozbmUfKDQmxucnoddgaBj3m4=)
                          3: cMufgoQU0L0jv10NNeCceGj__mo.roa (hash: nQdacmV+KrpQrHaTQNA9qp4TW/zHU/aMagi4CQEt/fQ=)
                          4: o4XRIYaubJYsaKle7Mq2zp2yQPU.roa (hash: /2hj0m+hPdpMrzwdZKFg60yCkkhQ3QugnRJdjSqOsJc=)
                          5: osiPIqZHFwJFJVDnL4CHHio8HdM.roa (hash: vGPA8SjpFPALGX8zEZpTARWGQMkoh1k17+6L+YmNaLY=)
                          6: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: SMl7zysVkrCYzFSCVHkF6chrjC3F6SpPXD6UyOx40nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:35:14:42:7f:2f:6c:e7:65:8f:8c:fb:1d:3f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
        Validity
            Not Before: May 13 07:01:44 2026 GMT
            Not After : May 14 07:01:44 2026 GMT
        Subject: CN=3ec9f9bcd0c33d6b181b009b28c20eb5177cb3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:ef:aa:33:5e:09:e5:02:8a:03:66:bd:a6:
                    f3:14:4e:57:f4:70:58:f4:44:06:90:dd:84:b9:72:
                    b2:08:e5:61:52:89:ca:7d:03:c4:38:d2:42:1d:a6:
                    a9:af:94:a4:1c:57:c3:cb:76:02:8b:fc:af:47:23:
                    29:ac:48:f1:4d:31:ff:d4:a9:cb:5a:0d:bf:44:dd:
                    cd:e3:09:f0:8a:61:95:bf:76:64:e5:ba:09:ef:59:
                    95:f1:60:d0:a3:1d:1b:5b:90:25:c5:79:0c:94:1d:
                    f2:74:f9:76:76:d2:6e:e0:a5:34:32:07:89:d3:ec:
                    ec:5c:cc:36:bf:c3:11:3a:91:2c:53:0f:4c:13:98:
                    84:37:2a:f2:9c:5d:db:8b:d0:65:7d:2e:e0:9a:0c:
                    99:de:8d:c6:ae:43:f4:d2:8f:7a:bc:3f:14:3f:43:
                    b6:73:be:70:6b:bb:dd:d3:45:f0:2a:91:74:34:d2:
                    37:9b:77:ca:f7:e9:cf:91:ba:e6:84:04:b7:4c:36:
                    a5:04:fb:e2:f3:2a:f9:22:ea:39:4b:cc:70:06:ea:
                    e8:5f:22:14:59:94:ec:0c:e7:ba:6b:be:66:9d:fa:
                    21:20:50:c6:9b:42:08:eb:64:da:0d:84:db:8c:4c:
                    5d:e9:99:ea:18:15:8f:62:1e:90:51:30:d1:ef:93:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:F9:BC:D0:C3:3D:6B:18:1B:00:9B:28:C2:0E:B5:17:7C:B3:E9
            X509v3 Authority Key Identifier:
                keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:73:01:09:31:2c:17:f0:e1:cf:0c:88:dd:9c:00:c0:74:07:
         28:b4:ea:3b:80:cb:9a:8f:a6:21:30:39:56:7c:15:d6:30:88:
         81:6e:62:0b:3a:a8:7b:e9:97:d5:0f:8f:c2:6d:77:12:c0:8d:
         b5:12:26:bb:1e:28:29:0c:03:21:5e:51:45:39:fa:33:47:38:
         a9:4a:c0:39:f5:71:23:62:a0:c9:b6:46:bc:f8:c9:43:48:01:
         32:8b:ac:4f:ba:26:6d:a4:4a:7a:e0:9f:a5:43:6d:7b:6c:6f:
         88:80:57:cd:7c:61:30:88:4e:fa:76:eb:40:8d:e8:b9:95:30:
         90:8a:53:e4:b5:8f:29:01:00:64:ac:a6:61:55:a6:a0:1b:83:
         99:c6:04:e9:a1:1e:ea:d4:56:c7:7b:86:a6:63:31:2e:af:7b:
         cb:fb:87:4d:3e:05:7b:4d:45:7c:47:31:a7:ea:b0:98:ad:e4:
         25:80:46:ef:5a:f2:c4:a4:ce:d9:f2:e7:92:60:80:43:58:6e:
         97:4d:1a:ef:2b:b7:2e:80:8b:6d:13:41:b4:cb:9f:4f:e3:a3:
         de:21:8d:4c:56:2c:09:be:ab:f3:cd:eb:31:21:93:d3:93:f3:
         35:0a:b5:ea:a3:ec:cb:73:ae:3b:32:f4:b7:c9:75:13:fd:c6:
         da:f6:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:29:34 2026 by rpki-client