Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File:                     QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier:          tZxGuVFaz+n9r6WygPXDRQoR9F/6aBcEyvxrLG40roA=
Subject key identifier:   4B:F1:4F:BD:F1:A9:EA:1F:85:E8:3C:F8:32:5E:DF:89:66:DE:F1:04
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer:       /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial:       01A08AFA9C47F001BB0A2DCF0DC9E084A769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number:          0FE0
Signing time:             Thu 10 Sep 2026 11:01:14 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:14 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:14 +0000
Files and hashes:         1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: 6Qjwijxa0x/kKjm8uoxQfQx2Dnpk58CFMscGjFzxQlI=)
                          2: kToJrNs3-88YwxrMqnw31g7dxis.roa (hash: 5cHaxNbK49cdprO9q39A2QZDD+NyUY26jCUSJRkU0PQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:9c:47:f0:01:bb:0a:2d:cf:0d:c9:e0:84:a7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
        Validity
            Not Before: Sep 10 11:01:14 2026 GMT
            Not After : Sep 11 11:01:14 2026 GMT
        Subject: CN=4bf14fbdf1a9ea1f85e83cf8325edf8966def104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:a1:71:f5:ee:45:c8:97:6b:84:da:3c:7d:
                    4a:f4:6b:e0:bb:5d:1e:3b:18:ce:04:e9:00:5b:13:
                    00:fc:ce:e6:d1:62:e7:9c:d4:ca:ac:87:01:bd:ae:
                    99:85:80:9f:b4:f7:f6:01:d3:30:e3:9d:89:da:62:
                    55:d6:92:ff:b1:b4:e1:9e:a3:ee:5d:38:7e:d3:7a:
                    e8:66:5f:ec:4b:4b:5a:c1:05:42:e5:b6:3b:b3:89:
                    f4:c1:ed:75:a4:b9:7b:4f:42:27:3a:45:23:20:45:
                    cf:02:34:eb:f6:d5:e9:e9:6b:0b:18:1f:0c:48:55:
                    75:a4:71:a9:2f:bf:50:45:32:73:e3:e0:95:c8:f6:
                    70:ea:bc:54:7a:81:63:54:8d:95:7b:09:c6:33:24:
                    a5:f5:9e:73:84:60:38:d2:6b:31:ca:0e:d1:48:99:
                    b0:83:5f:98:e4:51:85:a5:68:02:fc:af:a9:d8:78:
                    79:d5:db:9c:55:2f:d9:19:01:ac:d9:ee:3a:4a:64:
                    da:fd:ac:e2:d3:cb:ed:2c:d1:8c:97:02:72:a1:1e:
                    87:c1:7a:c0:1c:fc:f6:b2:b6:75:e3:e3:24:39:cd:
                    59:62:0f:9f:52:a3:28:8f:6b:24:c7:59:a1:bf:40:
                    d4:f6:4e:3d:87:3c:68:bd:27:3d:cf:cf:94:07:34:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F1:4F:BD:F1:A9:EA:1F:85:E8:3C:F8:32:5E:DF:89:66:DE:F1:04
            X509v3 Authority Key Identifier:
                keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:05:78:48:7f:6b:0e:64:45:f9:9d:09:59:bd:48:e7:e1:70:
         87:ec:3e:d3:c5:01:70:91:f6:63:96:15:85:69:f1:cf:0c:30:
         b6:be:b2:9e:14:24:15:e5:e7:6a:6b:21:5a:a4:0f:0e:a6:8e:
         54:be:c5:5a:73:d2:ed:9b:12:42:f0:e3:f6:a7:60:a8:a1:41:
         ec:c0:34:39:60:1f:74:fc:b6:ac:2c:c5:7b:f2:97:09:a1:93:
         da:0e:74:40:ec:cd:05:2d:74:a7:29:48:9f:69:46:55:7b:7f:
         9e:4c:65:b6:36:85:cb:38:8d:36:b2:13:61:6d:33:a4:2b:aa:
         b1:fb:90:de:ac:fc:26:6e:70:7b:3d:1c:29:9f:83:61:94:ef:
         be:86:94:8e:0c:93:bb:45:7d:7d:e9:c0:1d:a0:e4:11:12:4c:
         3b:fa:49:41:a3:e4:4b:5f:6f:f2:51:77:83:b3:5c:ab:2f:28:
         74:25:74:d9:62:3a:d2:ff:dc:ed:c5:90:f8:c9:4f:ea:ff:97:
         57:e1:51:33:09:30:10:56:05:a1:19:3a:82:1b:6b:9a:af:38:
         d3:41:0c:88:27:5f:77:6b:12:bf:69:45:5f:02:83:f7:36:b6:
         31:c1:ed:dd:5a:56:8a:92:f8:2c:79:b2:e1:e4:c8:74:57:10:
         99:f6:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:52:35 2026 by rpki-client