Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
File:                     QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft (raw, json)
Hash identifier:          Lzi5k0niRdy39BshrnSESGlz2ZaLQG0H2t2mNJWoHUg=
Subject key identifier:   C1:DA:50:A2:20:65:C4:F0:ED:46:AA:17:E3:4B:57:23:DB:61:89:11
Authority key identifier: 41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
Certificate issuer:       /CN=41b88e42f28836df48310dda05636457fa3f70db
Certificate serial:       01A06D955F1B4410EE971CA5D15E08A46213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
Manifest number:          B2
Signing time:             Fri 04 Sep 2026 18:01:40 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:40 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:40 +0000
Files and hashes:         1: QOOZOBByVqkZ1q-PE7NPKaD3qjM.roa (hash: j3zyeDdIrn6hRAovoXAWbgDk2QQtVM5UJCCkBnNNH2c=)
                          2: QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl (hash: 8jXKNkQdf0Tm37Kc3JAcaOhnx84Fp3aUZvgOmErFtjk=)
                          3: YLCy61Ou1zu1s3hFCdXrN8zxFx8.roa (hash: C5m7c8v9LmMLSFllgUHl58+da2eRITwPf82h4xo+2Hg=)
                          4: _IZwkSjVpsGYUCpsT_3H3DGbcvE.roa (hash: XM2CFOnMNjMebcmabtVzVZNIRk0m9XFh6SHcd/OBs2c=)
                          5: axX5r8eaQye8To66RIedWeq-294.roa (hash: fUIngIaGdB7VvY50561K9uaMvhKcfZcXxu4SnSzFzxk=)
                          6: t_CLdGRtuv21b3am-0AwhPDoKdE.roa (hash: GUnrReq5hn+z9h3wrQvoEHhII45JvrCuAZjVIFDFnVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:5f:1b:44:10:ee:97:1c:a5:d1:5e:08:a4:62:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b88e42f28836df48310dda05636457fa3f70db
        Validity
            Not Before: Sep  4 18:01:40 2026 GMT
            Not After : Sep  5 18:01:40 2026 GMT
        Subject: CN=c1da50a22065c4f0ed46aa17e34b5723db618911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:a7:15:74:0d:04:ad:80:90:62:42:da:d1:
                    52:c6:2a:6b:52:07:27:7f:08:dd:3f:a5:b0:fd:00:
                    0f:61:a4:de:ab:d2:8c:fe:3d:8d:58:62:8f:48:34:
                    53:44:be:0e:91:e4:37:04:3f:9f:04:c9:2f:b8:24:
                    3a:3d:48:c6:44:5c:b2:05:a1:77:d3:cc:4f:2c:1c:
                    c8:be:07:51:14:58:26:a6:25:34:07:a0:93:f4:c4:
                    96:51:25:d6:e4:76:92:6f:1b:b0:fa:a5:82:5d:ef:
                    ac:2c:07:66:ad:36:a7:3b:64:a7:f2:bc:08:fd:58:
                    8b:53:41:86:f8:74:d7:68:43:6e:d7:9d:02:6a:54:
                    fa:f2:fa:e6:1b:5a:01:ef:f0:63:1b:f8:ca:f1:19:
                    85:fc:a1:73:3f:c4:e2:d8:be:7e:61:d0:d6:ab:23:
                    dd:17:78:c0:fe:c9:15:8f:7a:63:11:9d:17:f4:d4:
                    6e:45:f0:87:79:89:9c:fe:c9:4b:07:3e:41:29:52:
                    57:fa:de:8c:00:a2:ee:a4:1d:90:c1:6f:62:82:0b:
                    7e:06:c6:f3:bd:6b:ab:b1:06:69:ce:ba:a0:9b:c6:
                    16:a3:9d:37:f3:46:dc:a5:6d:86:a0:56:ef:e9:2b:
                    52:3a:49:de:82:2d:fb:af:98:f1:84:aa:6c:6c:ab:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DA:50:A2:20:65:C4:F0:ED:46:AA:17:E3:4B:57:23:DB:61:89:11
            X509v3 Authority Key Identifier:
                keyid:41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:31:a4:82:67:c1:b0:e5:ce:9a:42:56:d4:9b:b9:d7:69:3b:
         76:1c:bd:ca:e2:1f:20:8b:27:24:8f:45:5c:c8:f2:57:87:cd:
         23:5d:6f:df:10:c6:50:d3:20:d3:ca:fd:75:29:db:ad:4b:81:
         38:45:6b:65:53:d9:87:5b:40:5b:86:22:a7:b3:ee:79:14:fb:
         0e:93:53:9c:b3:25:3a:74:b1:1d:c9:06:98:ae:e0:36:30:b0:
         6c:89:7c:74:8b:6d:b0:9d:be:d5:71:b6:c4:81:15:d1:a0:65:
         fb:40:8a:5a:ad:00:1e:81:aa:f9:37:2a:cd:b9:9c:9b:b0:21:
         50:59:dc:b9:43:05:9d:b5:05:31:98:5f:00:1b:e4:3c:e0:50:
         2a:4b:59:f8:37:6f:ce:cf:f6:d4:7d:81:c1:18:35:ab:6f:42:
         3d:97:28:e0:92:17:82:38:b0:30:31:17:b8:6e:2e:c3:cf:ea:
         f8:c7:68:fb:c8:39:3b:b2:1d:04:a7:50:08:1c:9d:fa:69:c4:
         90:3e:ac:ee:a2:f9:f8:e1:8e:4a:77:a8:a9:8a:e2:f3:d4:f4:
         48:82:47:ea:38:86:4b:33:0b:52:11:1f:ae:c8:45:18:da:b7:
         f8:13:91:36:2c:e6:e9:73:b4:e2:d7:36:ba:c0:c4:e6:4e:66:
         fb:90:f4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:55:08 2026 by rpki-client