Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File:                     QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier:          o176qu5M+fVS6BCDraUvvT9v+MGCPeCKkzqeX0IDbNo=
Subject key identifier:   A7:A8:B7:5B:72:5C:24:56:60:F3:E9:A9:D4:D8:42:A9:D4:F3:FD:CE
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer:       /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial:       01A06913A69195A63199609E42572C88CEAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number:          1711
Signing time:             Thu 03 Sep 2026 21:01:30 +0000
Manifest this update:     Thu 03 Sep 2026 21:01:30 +0000
Manifest next update:     Fri 04 Sep 2026 21:01:30 +0000
Files and hashes:         1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: z+nCmKLcpArIblkEkYEJglsXgYPVmsOZJqE8QAw8OoY=)
                          2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:69:13:a6:91:95:a6:31:99:60:9e:42:57:2c:88:ce:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
        Validity
            Not Before: Sep  3 21:01:30 2026 GMT
            Not After : Sep  4 21:01:30 2026 GMT
        Subject: CN=a7a8b75b725c245660f3e9a9d4d842a9d4f3fdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e5:b5:35:0a:43:01:7e:c4:b2:52:46:4b:b8:
                    95:b3:83:41:58:03:7a:ad:0d:ef:19:34:da:75:7c:
                    ff:a1:9a:c7:d8:15:25:ba:6f:2f:b3:6c:4b:64:ea:
                    3b:89:cd:27:76:91:d8:51:67:d2:5d:c9:2a:ba:85:
                    d8:f9:1f:7c:c3:b4:47:68:fd:54:37:74:cd:a2:89:
                    60:3f:2b:cd:44:d8:3c:96:a1:a9:92:44:5c:3e:02:
                    3f:8e:4f:8b:23:f7:84:0f:3c:9c:80:f2:c8:bb:b5:
                    e5:e7:a4:65:78:36:78:6d:12:5a:8c:65:47:5f:24:
                    c7:2c:76:f1:4f:91:f8:b6:1e:c7:69:56:f1:34:ba:
                    2d:26:c7:ff:a9:2a:6f:65:2c:2e:20:e2:8b:50:c5:
                    a7:7c:38:dc:93:ec:ed:2f:84:9a:aa:07:be:31:3a:
                    3b:14:13:5f:a8:a1:51:10:28:48:99:26:0d:f6:f4:
                    fd:6c:97:ae:b8:4e:c4:d9:f2:8a:a2:9a:4e:0a:00:
                    6f:19:b4:6c:a4:ae:9b:fe:2d:34:40:2b:b9:0b:19:
                    19:71:94:4f:e9:53:e4:7f:96:07:fd:e7:62:4e:e1:
                    3f:a3:50:78:25:3c:2e:d6:36:a2:04:4a:3a:e0:0e:
                    42:5f:18:95:ca:66:5e:c8:f3:20:dc:62:90:f6:a4:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A8:B7:5B:72:5C:24:56:60:F3:E9:A9:D4:D8:42:A9:D4:F3:FD:CE
            X509v3 Authority Key Identifier:
                keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4d:cc:c2:de:83:f3:d0:89:68:c0:6b:f8:fe:2e:60:2c:d6:
         2e:a6:ee:c7:ff:4f:e4:38:1f:d4:06:ca:a2:22:94:9c:1c:65:
         04:b0:5d:1e:50:50:59:85:c2:1d:1f:ed:e9:88:32:7d:dc:e0:
         fb:e4:ee:70:4a:f7:d5:3a:7b:bb:2e:57:72:1d:a7:50:34:11:
         46:80:31:1e:94:1e:a4:30:51:ba:31:80:93:3f:31:bb:01:9b:
         07:8f:b1:c3:30:f8:4a:b2:af:ea:27:ca:6f:19:60:8f:03:be:
         06:79:c0:15:ce:a6:81:82:9e:f3:c6:2a:0e:e5:6d:d6:ea:32:
         53:e3:c0:cd:af:21:61:d4:be:99:d9:1c:12:d7:71:3c:6e:f6:
         81:f9:cb:a4:86:77:c4:ff:5d:25:9e:73:27:11:b0:d7:5c:79:
         b4:23:5f:62:d1:2f:37:c6:5a:47:9b:f4:31:32:46:93:10:5d:
         51:92:b8:4a:77:59:28:cc:37:db:1a:5e:aa:ef:bb:f1:ce:86:
         25:50:d3:03:5a:6d:b5:a0:cb:83:f1:1a:a1:2e:43:30:0e:7e:
         cf:99:c5:42:b3:e3:af:21:fe:5f:7c:55:71:ea:72:a4:e9:c8:
         9d:17:33:33:d5:b4:fb:91:d7:4a:93:b3:57:41:a4:6f:e7:ea:
         12:62:a7:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBpE6aRlaYxmWCeQlcsiM6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwN2JjMWRjMmUxMWQ0OTFiOWI4NWUwOGQwMWMyMjJmOTc3
NmMzY2MwHhcNMjYwOTAzMjEwMTMwWhcNMjYwOTA0MjEwMTMwWjAzMTEwLwYDVQQD
EyhhN2E4Yjc1YjcyNWMyNDU2NjBmM2U5YTlkNGQ4NDJhOWQ0ZjNmZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uW1NQpDAX7EslJGS7iVs4NBWAN6
rQ3vGTTadXz/oZrH2BUlum8vs2xLZOo7ic0ndpHYUWfSXckquoXY+R98w7RHaP1U
N3TNoolgPyvNRNg8lqGpkkRcPgI/jk+LI/eEDzycgPLIu7Xl56RleDZ4bRJajGVH
XyTHLHbxT5H4th7HaVbxNLotJsf/qSpvZSwuIOKLUMWnfDjck+ztL4Saqge+MTo7
FBNfqKFREChImSYN9vT9bJeuuE7E2fKKoppOCgBvGbRspK6b/i00QCu5CxkZcZRP
6VPkf5YH/ediTuE/o1B4JTwu1jaiBEo64A5CXxiVymZeyPMg3GKQ9qR2lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeot1tyXCRWYPPpqdTYQqnU8/3OMB8GA1UdIwQY
MBaAFEB7wdwuEdSRubheCNAcIi+XdsPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2It
N2FmMGExNWY0MGI1LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2ItN2FmMGExNWY0MGI1
LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP03Mwt6D
89CJaMBr+P4uYCzWLqbux/9P5Dgf1AbKoiKUnBxlBLBdHlBQWYXCHR/t6Ygyfdzg
++TucEr31Tp7uy5Xch2nUDQRRoAxHpQepDBRujGAkz8xuwGbB4+xwzD4SrKv6ifK
bxlgjwO+BnnAFc6mgYKe88YqDuVt1uoyU+PAza8hYdS+mdkcEtdxPG72gfnLpIZ3
xP9dJZ5zJxGw11x5tCNfYtEvN8ZaR5v0MTJGkxBdUZK4SndZKMw32xpequ+78c6G
JVDTA1pttaDLg/EaoS5DMA5+z5nFQrPjryH+X3xVcepypOnInRczM9W0+5HXSpOz
V0Gkb+fqEmKn2Q==
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:31:47 2026 by rpki-client