Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File:                     QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier:          0gnEzFp+PGNfv7X143XYPcZhS9BYyUgOjF8n8HuxOvc=
Subject key identifier:   74:84:D1:49:A6:5F:00:93:C4:EC:E2:4D:43:50:73:DD:10:0C:EB:20
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer:       /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial:       01A130A24B417F9354C3927193D45B00B973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number:          12E4
Signing time:             Mon 12 Oct 2026 15:01:44 +0000
Manifest this update:     Mon 12 Oct 2026 15:01:44 +0000
Manifest next update:     Tue 13 Oct 2026 15:01:44 +0000
Files and hashes:         1: 2R98f3LcbdjJTK1zEivNVdv9lT4.roa (hash: wn+9EbMSH6lI4fh4eFap7qXQCiZwpo0SPOjzWLLKAfo=)
                          2: JNIABgZFmaWxjr_C6leE2KJ6tTA.roa (hash: U+MKLIrsfWPb0hJeiOLmKOB38yCKlAGbLyA4d1nN0Hs=)
                          3: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: UAkRieAUtSYgzTlTUqgNWqbverKo6OJ2v945GLtKoEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:a2:4b:41:7f:93:54:c3:92:71:93:d4:5b:00:b9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
        Validity
            Not Before: Oct 12 15:01:44 2026 GMT
            Not After : Oct 13 15:01:44 2026 GMT
        Subject: CN=7484d149a65f0093c4ece24d435073dd100ceb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:d2:c7:4f:5c:ae:dd:f5:9e:eb:92:5c:f8:
                    f7:75:2f:24:f9:af:8e:5b:d4:4a:f8:41:3f:44:73:
                    eb:e9:1e:27:1d:36:90:61:d7:27:20:21:bc:67:3b:
                    40:02:94:2e:25:27:e4:96:5f:3e:4f:de:25:33:18:
                    0c:06:2e:b0:66:59:02:b5:1b:13:21:3c:35:80:a6:
                    a8:f6:58:ac:d0:1b:3f:37:75:61:81:a5:5c:76:b0:
                    18:81:30:4e:91:aa:0f:15:ca:d4:b7:d1:d5:cc:60:
                    b6:97:58:2b:64:36:9e:b6:70:67:ff:ea:69:8f:e9:
                    20:3d:bb:c2:b6:e5:f8:d1:d3:e9:24:50:ba:8e:9f:
                    d7:42:28:bf:1f:8f:03:e2:5e:57:75:61:1c:03:fe:
                    47:75:bc:a8:46:dc:4f:14:98:29:5f:45:ea:c7:75:
                    28:85:c4:86:78:05:29:97:ff:f7:2d:e7:d2:94:db:
                    7e:4c:c8:49:52:e7:99:eb:41:6a:f9:cb:7e:bb:66:
                    83:e6:ff:7c:31:01:f6:08:1b:87:75:22:f6:2b:b7:
                    10:1b:d7:49:40:a0:a8:38:6e:f9:46:85:32:4a:d1:
                    72:48:e6:d6:03:30:89:9d:60:88:11:48:f4:a6:46:
                    66:38:bd:41:f8:96:d1:e4:31:92:a8:3f:13:38:0c:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:84:D1:49:A6:5F:00:93:C4:EC:E2:4D:43:50:73:DD:10:0C:EB:20
            X509v3 Authority Key Identifier:
                keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:7c:ba:0a:74:ab:76:3d:66:32:61:6b:52:3f:9f:06:29:
         97:30:f3:c5:b4:ff:d1:ed:97:c6:65:7e:a3:d6:7b:f3:df:22:
         a6:0b:17:66:b1:09:a9:b6:77:de:37:6a:88:31:62:e3:d0:d5:
         97:d0:5c:70:fc:b5:61:dc:8f:4a:87:37:1b:16:a9:3d:fb:b1:
         19:1e:90:4d:45:db:d7:3f:34:54:f5:98:b6:f7:90:75:82:09:
         9a:e0:a8:6d:6b:e3:63:5b:47:b5:cb:af:73:16:95:88:15:10:
         7d:50:29:46:07:e3:fc:77:08:82:3a:e4:73:7e:ab:05:0e:71:
         83:d4:db:6d:74:86:9b:2f:7c:84:d7:48:1a:29:d8:b3:b0:cd:
         0e:44:33:d2:7e:3a:5f:76:e5:0e:2d:03:29:3e:bd:15:cc:80:
         34:fc:8f:53:58:af:83:7b:e8:52:97:8b:b3:92:66:cc:62:aa:
         01:0b:71:3c:92:15:27:e1:2c:28:fa:b7:48:bb:2f:58:99:7d:
         4b:42:9f:0d:21:0f:e2:9a:e4:2c:6e:1a:50:f9:6a:d9:1e:75:
         6a:76:c1:3c:b3:3f:e3:42:1f:b0:91:72:66:7e:ba:e5:23:00:
         c4:b9:65:f4:7c:79:80:ec:7f:38:33:a7:31:a1:ea:c0:f8:00:
         a4:28:34:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:30:09 2026 by rpki-client