Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File:                     qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier:          qWfmJ8Acw/XCzKKfKj558WVmR4cQ9k4dPZPRCrB2xUg=
Subject key identifier:   F9:5D:A5:75:51:AD:7C:83:F4:66:0D:02:E6:19:A2:81:68:3B:77:79
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer:       /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial:       01A0D4CC0734345840A8B036C0ECEF6BD062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number:          0EAD
Signing time:             Thu 24 Sep 2026 19:02:15 +0000
Manifest this update:     Thu 24 Sep 2026 19:02:15 +0000
Manifest next update:     Fri 25 Sep 2026 19:02:15 +0000
Files and hashes:         1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=)
                          2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=)
                          3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=)
                          4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=)
                          5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: EdGy/pa22tlKIAneBhhFsQE5+9LizkJknd7EXu5Oy68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cc:07:34:34:58:40:a8:b0:36:c0:ec:ef:6b:d0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
        Validity
            Not Before: Sep 24 19:02:15 2026 GMT
            Not After : Sep 25 19:02:15 2026 GMT
        Subject: CN=f95da57551ad7c83f4660d02e619a281683b7779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:7e:46:a1:0a:15:48:04:05:0a:e8:bb:98:
                    20:1f:9b:58:c3:03:47:46:94:f0:83:c0:31:45:8e:
                    1f:0e:93:9a:78:9f:21:1f:b7:7c:a1:94:39:a2:e2:
                    09:a4:07:da:58:89:f6:d2:02:f4:c5:8a:73:c6:81:
                    94:cb:7a:4b:6d:b9:d0:3d:9a:b4:dc:96:cc:a9:77:
                    c3:21:58:cc:4e:10:60:ac:e7:68:73:f9:ca:62:00:
                    bf:76:58:a1:25:bf:00:3e:81:d9:5f:39:0f:29:d8:
                    92:89:2f:2d:f6:e3:6e:47:93:72:b0:1a:d3:0c:ef:
                    97:95:2c:2f:e2:1e:28:58:61:62:7f:83:95:9c:1a:
                    95:de:93:d4:e4:72:52:28:c6:21:7f:f6:4f:85:2d:
                    5d:70:7f:dc:7e:6c:d2:5e:8f:c9:1b:2b:22:79:24:
                    8f:1c:0e:3f:25:6c:19:0d:21:c7:a6:d4:74:83:44:
                    a3:68:3a:9e:13:7b:c6:49:b6:1d:1b:c2:72:93:5c:
                    68:24:38:59:a6:51:43:56:10:35:24:2f:67:15:1a:
                    5c:df:69:d1:0a:69:10:58:0d:1f:19:49:97:f9:91:
                    52:eb:04:af:b6:a0:39:fa:48:33:bf:f4:cb:a5:2d:
                    2d:39:3e:6e:50:a5:5e:df:1d:87:66:95:de:91:38:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:A5:75:51:AD:7C:83:F4:66:0D:02:E6:19:A2:81:68:3B:77:79
            X509v3 Authority Key Identifier:
                keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:7d:3b:79:5c:1d:50:ac:f1:35:0b:38:95:d9:d9:7f:57:
         15:51:99:17:1c:9c:b5:85:be:e6:08:40:8d:8b:a9:4f:ec:95:
         4f:ba:77:93:4b:e6:4f:bd:69:1f:11:a2:a6:c2:a8:49:a4:a0:
         d1:54:03:65:73:fd:99:6d:ad:42:96:e5:ac:eb:4e:fc:fa:04:
         05:60:5d:85:03:84:67:74:29:ec:95:dc:fe:20:37:31:e5:f9:
         7e:e5:77:e2:99:b7:63:48:b0:cb:44:d2:7d:af:97:9f:b3:0a:
         93:cd:8e:e7:4d:c9:51:6e:ac:b9:12:2e:cf:67:31:bc:12:55:
         65:53:81:82:31:29:74:84:37:d1:95:1e:b2:e2:79:ef:30:44:
         9d:f3:b5:f5:a9:9a:3b:a3:18:76:e2:6f:46:a8:6a:91:5d:24:
         50:d5:04:4b:83:35:fa:d2:d8:43:ed:14:62:96:e0:8f:d7:b2:
         ec:14:7f:be:05:4e:cc:44:57:ba:9b:ef:ef:33:07:d7:97:e7:
         c2:35:77:74:2a:51:f9:87:73:05:62:38:43:a3:29:3e:10:de:
         ee:c9:03:52:d2:5c:8f:f9:69:40:08:a9:87:0e:e4:7a:db:32:
         67:b9:1b:20:aa:b8:be:97:a4:db:b8:d6:77:e7:e7:79:5f:5a:
         02:12:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:15:57 2026 by rpki-client