Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File:                     QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier:          5u60A9lBSZnPxnwDhO2eefowXvuw4IWeu1nBOanPAgQ=
Subject key identifier:   93:48:BB:59:7C:1B:73:75:79:76:73:08:9D:A7:90:B3:A2:59:A0:A8
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer:       /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial:       01A08A1E6973373B61D1D7865ADFB4492B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number:          101E
Signing time:             Thu 10 Sep 2026 07:00:43 +0000
Manifest this update:     Thu 10 Sep 2026 07:00:43 +0000
Manifest next update:     Fri 11 Sep 2026 07:00:43 +0000
Files and hashes:         1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
                          2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: lXVca/Baf3H4Bv4ffPdzPstV2+RZGuSHrHo9bvtPX/o=)
                          3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
                          4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1e:69:73:37:3b:61:d1:d7:86:5a:df:b4:49:2b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
        Validity
            Not Before: Sep 10 07:00:43 2026 GMT
            Not After : Sep 11 07:00:43 2026 GMT
        Subject: CN=9348bb597c1b7375797673089da790b3a259a0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:2a:58:20:0a:09:78:57:3f:74:29:55:b0:
                    fc:40:dd:ed:ad:b2:55:39:7f:ea:9b:44:43:ad:75:
                    a3:75:ff:b9:b1:1a:66:6f:41:32:c1:3b:36:81:11:
                    ea:98:de:d9:73:e4:c3:22:a1:c3:05:b0:3c:c8:d2:
                    95:8f:76:5f:d1:65:c9:65:6e:6c:09:c8:76:e3:cf:
                    4b:70:7c:fc:95:71:53:2e:cb:81:9f:9d:8d:30:09:
                    1b:2e:85:af:f3:bc:8b:4a:38:ee:d0:df:39:45:f8:
                    6f:bd:80:8d:69:61:51:b1:ed:39:2b:e6:27:24:d2:
                    51:82:87:0f:75:f6:d2:59:9d:62:fb:57:80:a4:98:
                    a9:7e:73:0c:36:51:50:fb:f7:d9:3e:40:77:a7:d8:
                    ac:3a:9f:3d:48:d6:93:3a:77:29:a7:ae:96:ed:73:
                    f5:84:4a:17:a2:cc:6c:76:84:ea:87:c1:bd:45:cc:
                    74:bb:90:ba:a7:6a:0c:4b:0a:c3:6d:37:e4:46:9c:
                    64:c1:88:72:95:ae:a5:87:1b:f9:96:0c:57:46:c9:
                    77:0b:27:c0:f9:af:3d:85:09:98:f9:8e:b4:d4:72:
                    84:04:ad:b2:16:f5:ce:59:5e:41:c4:09:52:4d:a7:
                    99:ba:48:ea:47:5d:af:a5:39:68:c8:51:ad:f5:75:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:48:BB:59:7C:1B:73:75:79:76:73:08:9D:A7:90:B3:A2:59:A0:A8
            X509v3 Authority Key Identifier:
                keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ed:37:20:b3:b4:fe:bb:2a:51:7c:bf:c0:e9:5e:c3:4b:96:
         eb:14:2b:7d:b3:2a:e2:ec:3c:12:a3:ca:82:66:52:1b:d0:70:
         0e:4c:e4:33:ef:1e:ac:e5:d5:38:9d:47:61:26:00:51:53:b2:
         b7:7f:7c:10:e7:a2:a1:da:12:b6:d8:aa:9c:c7:44:9a:27:3a:
         55:36:bb:4d:45:90:10:a6:28:34:ad:bd:16:1a:d2:8c:89:8c:
         c6:9e:45:85:ef:4a:95:55:c1:19:b0:7a:80:8c:d3:d9:c5:ea:
         dc:9c:46:b4:65:41:d8:3d:be:64:25:79:bb:54:32:ad:b4:91:
         7a:fe:04:d4:3b:75:83:22:19:84:d3:97:5f:0d:c2:09:5a:c3:
         7c:a5:8a:71:d0:02:b3:21:ac:23:c3:cb:40:32:62:18:8d:08:
         da:09:d7:8b:28:22:3f:31:9e:32:cc:ef:ae:e8:f9:58:6c:b4:
         0b:07:d1:7f:40:5e:41:f8:a4:04:30:ce:2f:1a:9a:a8:f0:87:
         c3:e6:3f:8f:41:9f:44:7e:f6:29:31:14:9a:4f:43:be:43:1f:
         cd:b4:ca:1f:c6:a1:16:ae:8e:ac:bb:82:ce:a2:05:e4:e3:20:
         55:5c:26:3f:93:3e:a5:61:f2:64:a5:a7:6c:8a:fd:a9:7b:2d:
         cc:df:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:51:01 2026 by rpki-client