Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
File:                     qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json)
Hash identifier:          Imvx0XYWCfc3PQre/pBUfgmCXZoSQUJcGh+IeTXMrAk=
Subject key identifier:   C3:08:2D:5B:88:A9:6E:14:F4:1C:E2:13:BA:E2:01:C5:67:10:C9:82
Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Certificate issuer:       /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Certificate serial:       01A0D9BB48BE1A427E3A2B35BB60021D28E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
Manifest number:          1A7A
Signing time:             Fri 25 Sep 2026 18:02:04 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:04 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:04 +0000
Files and hashes:         1: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: JBn1gE+ADaF56Vq1+UUvxYZnuiTUr4YOztCTMC6uPDw=)
                          2: z_aohf0nvgrxwGRTbVmz5aObwgs.roa (hash: uED0obTkRG8cxn/WVBRgbTdBw3zAOTzzg1FW8rl0WuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:48:be:1a:42:7e:3a:2b:35:bb:60:02:1d:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
        Validity
            Not Before: Sep 25 18:02:04 2026 GMT
            Not After : Sep 26 18:02:04 2026 GMT
        Subject: CN=c3082d5b88a96e14f41ce213bae201c56710c982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:02:b3:c7:4d:92:24:df:00:cd:84:c5:69:46:
                    88:aa:d4:99:03:18:23:5a:2e:8d:81:80:1c:73:24:
                    f1:29:6c:83:f4:4a:cf:03:aa:89:45:77:56:8b:9c:
                    db:05:f2:27:1d:d5:aa:81:f0:90:48:61:00:c9:68:
                    90:a8:c2:62:1b:31:af:fe:8d:11:cc:f2:8d:55:f6:
                    0f:2c:56:0a:4d:57:ea:80:bf:75:45:7c:7c:3a:ae:
                    95:92:5c:a4:a0:53:b9:17:47:ba:7d:e1:d2:a6:c8:
                    8c:ff:b8:97:f9:30:2a:78:61:6c:6a:61:c7:b0:d0:
                    53:04:b0:a4:75:3a:41:8e:ab:67:96:14:5e:e6:0c:
                    7e:eb:9f:05:43:ef:4f:a2:5b:65:2c:3f:fd:df:61:
                    7d:8e:a4:4e:34:2a:2f:4b:6a:2b:da:b5:d4:db:d7:
                    e5:bb:7b:5b:0f:47:db:de:0e:13:09:9b:25:80:97:
                    93:b8:16:93:48:78:cd:de:79:be:a8:0f:4d:2a:37:
                    2e:5a:b3:52:f2:ca:40:5e:36:52:78:3d:df:73:07:
                    7e:1e:5e:d2:bf:74:6a:5d:0c:b8:88:ca:29:10:74:
                    c1:21:ce:49:18:e6:cc:9a:c2:fc:a4:3e:f0:54:f6:
                    f2:30:74:08:70:6c:d5:6f:ee:9f:6c:80:08:f4:b5:
                    11:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:08:2D:5B:88:A9:6E:14:F4:1C:E2:13:BA:E2:01:C5:67:10:C9:82
            X509v3 Authority Key Identifier:
                keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d4:47:e8:36:3a:ac:31:61:77:4a:5a:b6:57:12:32:84:a1:
         22:c5:47:03:b9:0d:96:6d:01:6a:82:4d:5e:c2:11:0d:33:21:
         3e:b8:2e:f1:17:a3:a1:e4:ff:7e:10:94:12:fa:4a:10:d0:31:
         9b:06:8e:a7:4a:16:09:d9:03:df:04:23:c2:74:50:d9:91:42:
         41:d2:d9:02:c3:3c:eb:8e:12:ca:48:69:69:2b:56:55:9f:8d:
         33:77:85:f2:41:39:c0:8b:58:0a:11:10:12:0f:88:74:76:0f:
         e0:8c:fd:18:ef:ff:c0:32:ad:27:8e:4e:77:e9:25:96:ea:fd:
         32:cf:f8:1d:1c:bf:99:fd:da:29:06:6f:1b:d3:7c:2e:77:88:
         56:ab:58:ce:92:af:28:72:65:60:c0:10:3e:ae:c9:0a:9e:34:
         c9:0e:e7:86:ec:13:5d:7e:05:54:af:64:e6:34:1d:c1:1e:cf:
         b6:8d:fb:8c:ca:87:bd:f0:4e:82:b4:31:a5:7d:b8:82:8b:bf:
         82:a0:30:5f:86:98:ce:a5:44:da:37:cf:49:2d:cc:b4:bc:96:
         ff:35:8b:f4:79:c2:ef:4f:90:3d:cf:24:ce:7e:d9:6a:61:71:
         1b:6f:e5:bc:17:2f:18:d4:57:73:6f:61:25:87:9d:51:31:3f:
         7f:f0:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:31:32 2026 by rpki-client