Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File:                     QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier:          MEEOJatdMnJDFIO8IeaVkLnXdQ5JgoQSxf/zdyHiW+8=
Subject key identifier:   E1:B2:5A:E9:1D:AC:83:D4:32:8B:AA:7C:32:F0:43:5F:46:14:80:FE
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer:       /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial:       01A08AFA6D65C483EF2821103E52064FD3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number:          16BB
Signing time:             Thu 10 Sep 2026 11:01:02 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:02 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:02 +0000
Files and hashes:         1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: pm5GT6LKri2CwEqUD08qxz4OlrB3UnZfXInu1HTXTPc=)
                          2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
                          3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
                          4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
                          5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
                          6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
                          7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:6d:65:c4:83:ef:28:21:10:3e:52:06:4f:d3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
        Validity
            Not Before: Sep 10 11:01:02 2026 GMT
            Not After : Sep 11 11:01:02 2026 GMT
        Subject: CN=e1b25ae91dac83d4328baa7c32f0435f461480fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:5f:15:f3:22:f6:ab:89:72:0c:3e:a9:a5:
                    77:45:80:09:26:46:9b:98:a7:bb:b1:dd:09:2e:59:
                    98:5d:68:e8:3a:db:fb:fe:98:c7:9b:45:34:7a:1b:
                    05:ec:ee:1b:44:5a:b9:d5:c9:02:d5:f5:22:6d:73:
                    72:ec:49:c1:04:a1:67:cd:b4:8f:a6:e5:d2:34:c9:
                    dd:b6:ea:81:b9:7a:9b:de:66:5e:0b:5f:a9:c4:5a:
                    c9:c0:99:60:90:1a:01:02:d6:ba:51:81:84:2c:e3:
                    8a:75:25:62:ec:f8:b1:0a:62:5e:be:26:3c:d2:21:
                    3d:98:2f:8b:d2:79:3b:d4:59:2f:cf:02:f0:d3:a7:
                    6b:e2:76:5a:4f:75:f6:1e:38:8e:6f:09:1a:2a:45:
                    c4:0d:ec:89:09:0f:a4:77:99:33:82:5a:f4:7b:51:
                    1e:f8:21:18:23:2d:21:8c:d0:f6:89:21:0e:8c:0f:
                    17:c5:2b:d8:b4:8d:97:4f:9e:48:34:a1:fe:cd:41:
                    d2:ba:8b:1b:a2:6c:27:e7:38:43:b8:af:af:9f:bf:
                    ff:c5:c4:9e:97:ff:ec:7b:68:f7:71:1b:58:48:bd:
                    3b:c5:0f:8d:71:be:41:01:7e:49:ab:81:bc:c3:33:
                    04:26:50:1a:ec:87:7a:37:83:bc:23:7d:16:4f:a6:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B2:5A:E9:1D:AC:83:D4:32:8B:AA:7C:32:F0:43:5F:46:14:80:FE
            X509v3 Authority Key Identifier:
                keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:36:1c:5e:3a:b4:50:eb:f8:bb:42:9e:a3:0e:ac:38:1e:42:
         07:4c:71:55:ec:58:1a:45:16:1c:ff:25:d9:25:53:e9:15:f3:
         9e:39:b1:92:5c:f5:c8:d6:1f:7a:bb:2d:24:e0:19:e1:08:4d:
         39:5f:14:b8:3f:12:f6:6b:31:90:72:bc:cb:bf:d6:2a:9d:8f:
         9c:87:cc:23:28:0a:96:52:12:0d:ec:d7:4a:06:d8:9c:ed:ed:
         7e:78:d0:49:bb:ba:e0:1e:86:32:02:98:8d:a6:50:a7:95:9d:
         68:40:47:2a:f3:46:e4:c9:f7:03:5a:8e:f0:62:64:2f:c1:56:
         ba:dc:bc:1c:ea:cd:e5:bb:1c:46:e8:d4:f1:08:14:1e:a2:09:
         6b:d4:40:9b:7d:ec:13:22:99:99:00:70:1a:66:ac:48:48:42:
         d4:24:18:d4:b5:eb:9b:30:5f:0d:1e:59:45:57:b3:74:40:fe:
         8f:c4:43:23:e7:63:bb:4d:97:77:62:9f:55:68:7e:8c:62:e0:
         42:a8:31:f6:2b:78:bd:6e:84:8a:6d:fd:ba:67:db:cc:b6:78:
         85:1e:cf:03:6b:74:e0:84:8d:12:49:9e:90:7f:eb:00:ca:89:
         a2:b8:90:89:a6:c7:0c:9c:8c:8f:73:80:24:a2:86:e4:e7:49:
         69:cd:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:09:13 2026 by rpki-client