Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File:                     QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier:          HIxofx+qHpjd6UB5ICFkETcfGDcBAkIhuoIKTkcUSYw=
Subject key identifier:   27:9A:12:E8:9F:E4:08:4A:95:56:57:C1:10:A0:B0:C3:FE:15:8C:B0
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer:       /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial:       01A0890BE80DDB3BF780C01132AC1A77478F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number:          055E
Signing time:             Thu 10 Sep 2026 02:00:53 +0000
Manifest this update:     Thu 10 Sep 2026 02:00:53 +0000
Manifest next update:     Fri 11 Sep 2026 02:00:53 +0000
Files and hashes:         1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: A2pNbCmKS0/TZKnILqGaSUUW2JLtUr+cI5LSPVMohCU=)
                          2: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (hash: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0b:e8:0d:db:3b:f7:80:c0:11:32:ac:1a:77:47:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
        Validity
            Not Before: Sep 10 02:00:53 2026 GMT
            Not After : Sep 11 02:00:53 2026 GMT
        Subject: CN=279a12e89fe4084a955657c110a0b0c3fe158cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:21:21:e4:0a:4e:18:c2:2d:3c:52:bc:e5:
                    c9:27:27:35:18:7e:70:dd:6e:dd:0b:e6:e5:15:f0:
                    04:36:cf:f6:25:ef:69:1e:c0:12:3d:49:56:44:01:
                    4a:51:56:eb:62:fb:43:72:1f:0a:5f:dd:1f:23:09:
                    be:fe:3e:5b:d5:ed:4c:0a:1e:53:69:25:49:4a:d6:
                    13:aa:aa:e3:65:b0:15:77:3b:e2:2e:88:2b:3e:f0:
                    1c:e5:2d:72:28:a7:ef:10:ea:9c:7d:4c:bb:56:08:
                    65:f0:0f:68:10:62:d2:0b:41:e5:62:6a:3f:41:3f:
                    a5:8c:86:67:92:32:b3:95:ff:b3:20:10:9f:2b:68:
                    0d:60:e6:f1:d5:62:53:47:f0:bd:71:b3:9b:e0:fd:
                    32:ba:eb:5e:e4:37:96:d3:e9:86:4d:e6:9c:de:c3:
                    ca:5e:8f:a9:b1:65:a6:89:ab:04:8c:ea:62:6c:0b:
                    2f:41:89:e3:8d:b8:a3:a2:c4:65:51:30:f1:f3:e5:
                    85:f3:5b:c2:c8:4b:e1:0b:31:fd:78:07:e5:bb:f8:
                    2a:f8:57:33:bd:3c:54:50:e2:21:d4:3d:24:b4:9b:
                    64:34:e9:ad:c8:fc:30:61:01:08:08:3b:6d:a4:dc:
                    bc:98:a8:99:55:b3:d3:c1:e5:d8:7d:4e:8a:a3:b1:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:12:E8:9F:E4:08:4A:95:56:57:C1:10:A0:B0:C3:FE:15:8C:B0
            X509v3 Authority Key Identifier:
                keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:17:42:92:b9:56:ec:1d:00:63:70:b3:22:08:8a:2a:4a:da:
         93:e6:35:7e:23:4d:2c:f1:37:3f:c6:d6:ef:f3:02:01:1a:a9:
         5c:0e:36:7c:a1:43:cf:37:35:3d:c3:79:e7:18:cf:5e:33:a9:
         bd:f5:54:16:3d:ff:95:24:d2:3c:ff:f0:93:e5:0c:a1:e7:2d:
         29:98:ca:98:96:6e:a6:22:5f:27:7f:8a:83:03:59:92:14:dc:
         68:b7:ef:73:d5:03:5c:15:8d:d2:1e:8d:8c:a4:b7:55:97:36:
         6b:9b:33:3c:3c:e6:97:55:96:de:d5:69:4d:d9:a6:23:a7:23:
         87:88:14:a5:28:40:31:fd:8a:16:5d:58:b7:e2:ed:04:db:9a:
         9a:74:a4:b6:ce:c1:d7:27:c6:f7:9e:b5:7b:54:fc:b4:57:b9:
         73:b1:8d:5c:26:62:4b:0e:d2:cc:2a:0a:b2:00:35:a4:cb:9a:
         fe:70:05:7e:73:0d:b0:13:2a:c8:6b:62:f7:20:70:fc:3d:55:
         87:00:25:4a:e0:d7:2e:28:32:40:a5:25:c0:5d:4d:91:fa:5e:
         bf:01:d8:88:20:24:6a:50:18:0f:ae:8e:76:7b:fa:87:25:d4:
         e3:d5:ae:74:07:1c:bc:50:62:3f:1d:18:aa:48:47:eb:c9:e3:
         1e:88:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:15:08 2026 by rpki-client