Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File:                     gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier:          /yjqb5STRV4QUD4qxo6MmmwRiTgvzSK4HeQkueRa6UQ=
Subject key identifier:   BB:17:1D:B2:B2:D3:24:78:E8:35:1E:42:A3:11:CF:92:DA:8A:8A:5A
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer:       /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial:       01A14684589A6BFA189486478E1DE3A9EDE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number:          14A3
Signing time:             Fri 16 Oct 2026 21:00:40 +0000
Manifest this update:     Fri 16 Oct 2026 21:00:40 +0000
Manifest next update:     Sat 17 Oct 2026 21:00:40 +0000
Files and hashes:         1: _znAllcUhDUk5vaonzcpuUajgfo.roa (hash: qYtkv42oHHUxBFtOZdOaS3DV/fsi8LFPD+D7XK8B1uc=)
                          2: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: QbQ5/BeNaIGlMlV7TwZDmbmkQfzYe2OHsWXfqVwwVto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:84:58:9a:6b:fa:18:94:86:47:8e:1d:e3:a9:ed:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
        Validity
            Not Before: Oct 16 21:00:40 2026 GMT
            Not After : Oct 17 21:00:40 2026 GMT
        Subject: CN=bb171db2b2d32478e8351e42a311cf92da8a8a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:75:cf:14:84:53:5e:89:05:fa:9a:c8:56:
                    9f:e7:21:ef:df:4f:57:e2:40:c1:6c:ff:6d:3d:71:
                    01:b8:0d:f2:2d:ae:32:8f:e3:c5:7b:9f:9d:e2:25:
                    bc:51:cc:53:eb:1a:ad:d8:0c:65:34:ef:52:b6:e5:
                    2f:54:c0:50:14:e2:8a:bb:64:e8:e6:85:6a:59:fd:
                    ea:d1:a6:62:6f:66:d0:b6:66:76:db:87:18:b3:87:
                    04:dd:12:20:51:e4:06:69:b8:3a:d8:6a:84:ba:c7:
                    de:8e:7b:35:55:af:8c:92:0f:a6:18:54:28:69:2d:
                    89:a6:f8:65:72:53:a7:0e:4d:e5:1e:31:54:8d:0c:
                    a7:9e:40:3d:49:9e:10:5d:e3:70:f7:35:43:59:5d:
                    d8:d8:3b:ae:9f:0a:6e:b1:73:31:29:22:ea:be:13:
                    75:04:74:c1:67:80:26:a2:43:a9:2f:20:fb:20:85:
                    1a:67:a1:e1:b1:f8:18:42:84:42:3b:f5:bb:a7:d1:
                    bc:3a:98:aa:17:f3:12:30:d7:f5:f2:b3:b1:f2:8c:
                    10:ec:19:f1:5e:60:2a:3e:bf:fd:3a:d3:bc:85:58:
                    53:d7:52:6d:11:5e:f8:12:50:00:56:cd:d6:06:75:
                    ee:04:3d:dd:28:0f:6f:b2:bb:ed:a0:60:f8:1a:86:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:17:1D:B2:B2:D3:24:78:E8:35:1E:42:A3:11:CF:92:DA:8A:8A:5A
            X509v3 Authority Key Identifier:
                keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:fb:d5:18:cc:6c:b0:57:b6:09:28:fd:f7:e0:df:d6:61:b4:
         c1:25:12:0b:9a:f9:ff:82:9f:4e:c4:45:f2:e3:69:09:91:4c:
         73:d8:c0:27:82:5e:c4:c9:ef:9d:58:07:c1:b7:42:93:bc:7c:
         a0:f2:3b:d2:be:36:15:1e:2a:5b:8d:bb:68:a4:e2:45:c7:14:
         36:1b:d2:ae:13:c6:c4:0b:13:07:73:70:dd:93:aa:0c:ba:77:
         5a:37:ae:28:11:12:03:04:74:84:9d:77:07:fb:d9:e1:d3:4f:
         5a:a5:f7:f1:9c:58:7c:61:18:4e:bb:2d:4a:34:be:54:03:0f:
         b6:80:43:2e:fd:e1:07:20:86:11:bc:91:3e:d1:e7:e3:29:0c:
         bb:97:01:c5:01:95:b1:a8:90:3d:7e:44:7a:48:a6:2d:70:5e:
         7d:66:64:66:95:e1:a2:65:49:c7:42:0e:20:2f:44:9c:fd:cd:
         49:00:45:09:da:cb:65:ca:32:84:47:d3:17:f1:72:1e:cf:a0:
         70:b6:62:a9:ff:98:1e:a7:00:1f:b3:aa:65:c2:c1:4e:c0:2f:
         7c:42:8e:4b:46:9b:53:79:55:c5:77:51:80:22:05:52:6b:be:
         04:19:b4:17:7a:a6:5f:2b:c8:bd:99:93:42:d2:59:bd:ed:22:
         2a:db:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:02:21 2026 by rpki-client