Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
File:                     quarBHvHMpbJcVvLrq4ukYMWt4o.mft (raw, json)
Hash identifier:          L/epgUsnQZQKdykRulkG77BfIsnzfZIGNGa0wopeK7g=
Subject key identifier:   D9:BE:EC:3D:C1:66:A1:31:C4:2D:00:24:F7:FF:93:37:4D:87:E7:7A
Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
Certificate issuer:       /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Certificate serial:       01A0D9F1D95664D55ED42B842044B58FA1CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
Manifest number:          0A3F
Signing time:             Fri 25 Sep 2026 19:01:40 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:40 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:40 +0000
Files and hashes:         1: WICYHswQgB3ANXpj2XMC_BWEC_s.roa (hash: ikH6R5G0JiDUZ3ms+Esb5y69pjV5ZuQpnPGnpa+MynM=)
                          2: quarBHvHMpbJcVvLrq4ukYMWt4o.crl (hash: b3ABbYMgY7b3VZOA8CWWWwgsRskOop+M9WCgZoAMGhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:d9:56:64:d5:5e:d4:2b:84:20:44:b5:8f:a1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
        Validity
            Not Before: Sep 25 19:01:40 2026 GMT
            Not After : Sep 26 19:01:40 2026 GMT
        Subject: CN=d9beec3dc166a131c42d0024f7ff93374d87e77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:08:e1:a2:1d:4e:35:e8:98:7f:90:d2:e5:47:
                    49:17:48:cb:87:a5:18:a6:36:0e:63:d8:bd:9d:81:
                    48:52:77:89:63:d4:0b:4e:74:00:ac:44:3d:46:33:
                    e3:be:89:24:2e:29:0b:8f:3f:ef:88:e7:3c:b9:a1:
                    94:14:2b:a5:ef:a7:ab:f7:60:47:c1:d4:17:36:5a:
                    b9:0d:84:e6:35:ab:16:5f:7d:9b:50:1d:9e:53:59:
                    83:1c:3c:96:8a:db:aa:dc:40:f3:c8:95:ca:47:42:
                    c3:45:5e:9b:31:73:62:1a:85:56:f3:77:a2:95:6f:
                    f9:09:75:8f:4d:38:5d:c7:36:5b:fd:34:c3:08:c2:
                    b7:d0:49:e1:29:be:a3:5a:52:d3:01:48:17:f8:22:
                    cb:e0:26:6c:8a:a2:d4:41:03:a8:32:cf:ad:13:8d:
                    13:88:a1:16:3b:44:a7:9f:f7:ad:17:b8:f5:09:6d:
                    92:92:29:54:36:ea:cb:4b:97:0d:a6:0b:91:b1:09:
                    9d:72:d9:68:d7:eb:3e:54:d2:95:f0:74:0f:1d:76:
                    a8:aa:24:e0:52:dc:2d:57:49:86:7d:d3:ab:34:a6:
                    24:f4:c1:92:4f:81:27:cd:13:b6:ab:d7:b7:67:85:
                    3d:20:c4:ed:7f:17:8f:13:96:11:cb:75:1c:fd:04:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BE:EC:3D:C1:66:A1:31:C4:2D:00:24:F7:FF:93:37:4D:87:E7:7A
            X509v3 Authority Key Identifier:
                keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:37:8e:4d:01:54:2f:b7:dc:29:5d:10:3f:7e:a6:cd:bb:a6:
         56:6c:02:db:d9:87:93:db:0f:1a:80:c8:8c:08:e9:05:7b:e1:
         8d:f7:eb:8a:87:06:05:38:1d:1f:fc:a4:a3:36:6a:9e:64:52:
         c9:12:ce:73:5d:35:23:38:5c:a5:5e:40:15:81:08:75:ad:b8:
         88:ab:aa:29:02:4a:06:bd:a9:20:f4:bb:51:41:dd:c6:5b:ea:
         fc:27:e9:e4:ab:53:6f:6f:fe:a5:07:b9:f9:11:97:28:90:16:
         c7:df:a6:bc:87:b0:a0:df:c9:4e:e3:fe:05:20:64:30:b6:9f:
         63:02:f7:c3:8f:b8:4f:46:23:f8:ec:d6:30:d6:e5:4a:29:8e:
         7e:48:70:0f:d8:e8:91:ed:15:18:61:ce:3d:ea:ad:6b:14:ec:
         29:72:1d:0a:32:16:e3:d7:bd:c2:09:7b:21:6c:4e:74:19:d8:
         f7:a3:08:69:6e:c9:f4:66:6d:87:3c:6e:44:e7:f0:33:0d:77:
         94:88:b4:f2:de:d5:b5:e3:6c:3f:80:c3:b4:39:51:b7:7f:34:
         33:de:00:41:e8:3b:99:c8:f2:e5:49:05:00:6a:40:a2:55:44:
         cb:b1:b8:ea:b8:19:17:cd:a1:d0:87:9e:03:bd:f3:c6:40:cd:
         d4:bd:3f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:01:53 2026 by rpki-client