Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File:                     QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier:          OMFcKIXlCj1xqCLqNatbC/M7xjost84U/C4BpnchlBI=
Subject key identifier:   B1:2E:B2:BB:23:03:E7:4D:80:C8:2F:3D:18:C1:02:9A:A3:A4:AE:A2
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer:       /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial:       01A067257883BFA07FEB239AF5B4830565F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number:          1710
Signing time:             Thu 03 Sep 2026 12:01:43 +0000
Manifest this update:     Thu 03 Sep 2026 12:01:43 +0000
Manifest next update:     Fri 04 Sep 2026 12:01:43 +0000
Files and hashes:         1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: QOhG8bjeNcTN/8/sxg16GeZ8PIf8AzyDrPQ0eh+HrXo=)
                          2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 12:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:67:25:78:83:bf:a0:7f:eb:23:9a:f5:b4:83:05:65:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
        Validity
            Not Before: Sep  3 12:01:43 2026 GMT
            Not After : Sep  4 12:01:43 2026 GMT
        Subject: CN=b12eb2bb2303e74d80c82f3d18c1029aa3a4aea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:83:c0:0d:fe:b8:2b:11:4a:ef:25:df:47:
                    c3:9d:b0:ca:da:dc:ed:de:9e:57:8b:3a:d2:42:35:
                    14:b1:32:4e:b7:b5:82:17:2f:f8:9b:38:8b:be:7b:
                    7c:d4:42:96:56:30:2f:e1:4c:7c:0d:2b:f0:34:11:
                    42:6e:83:5e:a6:2b:93:c8:67:d2:e2:cd:1a:e5:8c:
                    5f:e3:0f:6b:f8:0e:1d:3b:7d:3a:dc:3e:9d:ff:49:
                    03:0e:8d:de:1b:cc:8a:7c:90:81:d5:5c:12:23:b9:
                    fb:b2:6c:33:ca:5a:e3:fe:c1:b3:65:dc:50:f9:fe:
                    5d:23:66:9a:47:c5:10:92:0a:89:51:9a:2f:37:d9:
                    b9:77:f8:bd:b4:a8:63:c5:74:ef:a2:10:ea:05:ca:
                    a5:ec:4e:50:79:99:ca:12:d5:5a:17:58:67:78:c5:
                    98:e0:df:74:44:18:25:2a:05:f2:53:62:a4:5b:b6:
                    7d:09:92:b6:64:2a:a6:34:88:ef:3c:56:d8:19:46:
                    d8:2b:47:0e:7d:3b:20:6a:b4:4b:de:72:6d:b5:8e:
                    78:72:d6:f5:ac:19:b5:2b:24:a8:22:17:94:10:df:
                    90:4f:4c:82:e5:91:68:1f:ce:7a:0e:e4:ba:eb:be:
                    93:a8:9b:64:94:09:a7:68:64:b9:1e:d3:97:d9:55:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2E:B2:BB:23:03:E7:4D:80:C8:2F:3D:18:C1:02:9A:A3:A4:AE:A2
            X509v3 Authority Key Identifier:
                keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:a7:57:fd:71:13:de:17:99:1e:a4:ce:84:05:41:b3:ad:
         3f:03:07:d6:a1:2b:9d:cd:fa:21:82:c6:01:4e:64:a9:84:cb:
         37:c6:58:98:1c:e9:fb:95:23:66:99:00:31:21:6b:80:6a:e8:
         14:82:5d:66:24:cc:fa:29:ad:67:e8:86:ae:4c:0b:64:54:7c:
         20:ea:51:36:5b:26:ed:4c:59:21:b0:3f:05:0d:e9:2b:fa:c4:
         fd:2f:68:19:b2:b1:0d:0d:c7:4a:3a:f6:c7:05:f2:01:c7:01:
         20:de:b4:f8:e6:ef:3e:1b:d5:3a:22:a8:ee:a9:ba:8a:19:ef:
         ef:c5:7c:81:d9:37:8a:ad:1b:36:ad:0d:61:27:bc:53:3b:53:
         d1:bf:50:46:42:be:66:18:f6:c3:df:3d:cc:d4:28:9d:5a:50:
         77:fb:38:22:39:f9:e7:de:e6:65:29:a9:e7:d9:1c:af:85:af:
         2a:00:57:c1:bc:9c:20:05:7c:0a:9e:10:75:37:36:5a:79:09:
         d7:73:6e:fe:16:5e:f6:07:e5:e4:91:d8:a0:c6:51:4b:42:f5:
         be:7c:8c:78:06:0b:2f:f3:ef:6a:9c:73:3f:a6:ce:a4:57:8c:
         31:f7:ad:86:fd:75:2a:4a:54:82:61:c6:28:57:7e:42:3f:13:
         db:51:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:47:28 2026 by rpki-client