Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File:                     QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier:          7i6+zavtqeonOVsjgi4tB+LdQm+j0GpIJYm1Q1CtsBE=
Subject key identifier:   B0:AA:A1:4B:E0:61:69:52:18:63:37:9C:D5:4A:F5:9C:BB:01:03:3F
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer:       /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial:       01A0B79B6BDB68CA929F4F7694F682638280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number:          19B2
Signing time:             Sat 19 Sep 2026 03:00:11 +0000
Manifest this update:     Sat 19 Sep 2026 03:00:11 +0000
Manifest next update:     Sun 20 Sep 2026 03:00:11 +0000
Files and hashes:         1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=)
                          2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: HC5oS5bqproVh8q1INm4XJAcgvHqi8Y597ml6tWQ8dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 02:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b7:9b:6b:db:68:ca:92:9f:4f:76:94:f6:82:63:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
        Validity
            Not Before: Sep 19 03:00:11 2026 GMT
            Not After : Sep 20 03:00:11 2026 GMT
        Subject: CN=b0aaa14be06169521863379cd54af59cbb01033f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:59:ef:be:d8:fc:1e:dc:43:bf:9d:59:87:
                    53:9d:fe:0b:93:54:9e:a4:9d:36:47:e2:5c:a3:ed:
                    75:ac:2c:15:62:dc:ea:b7:c4:80:77:e8:a6:d8:f6:
                    b7:50:82:1f:69:3b:ca:34:34:5c:d7:2d:c1:2c:14:
                    69:dc:93:1f:97:4d:29:12:75:f8:45:9c:04:5c:bc:
                    9c:d0:eb:21:6e:5f:6e:c3:ba:18:bf:b9:a0:9f:88:
                    0e:79:77:3e:2a:53:ed:03:95:d5:45:56:89:4c:1c:
                    ba:9a:e1:e7:e0:79:f4:e0:19:bc:3b:2f:c2:48:b9:
                    0f:61:55:7c:c8:77:4e:ac:6f:e3:b3:dc:f7:f1:45:
                    36:a8:2e:3f:60:01:0c:78:29:2a:bb:47:c8:7b:5b:
                    78:60:f3:45:90:a4:31:73:75:21:81:eb:2e:8d:6b:
                    12:f8:c5:97:98:dd:92:52:ad:da:07:56:ec:92:25:
                    cc:37:ca:db:40:37:e1:c7:f1:3c:d7:ac:63:75:cf:
                    7f:79:4d:6e:52:61:67:a2:0b:d6:16:4a:5e:a2:bc:
                    2a:e3:1b:dc:fa:a9:55:b2:1a:dd:db:84:86:67:34:
                    15:75:bf:3f:03:68:68:c5:55:85:44:2b:01:8c:10:
                    8a:4e:f6:f0:d3:8d:67:89:da:da:ec:24:1b:4d:8c:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AA:A1:4B:E0:61:69:52:18:63:37:9C:D5:4A:F5:9C:BB:01:03:3F
            X509v3 Authority Key Identifier:
                keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:88:31:f8:13:4e:d3:05:63:b7:c6:b9:43:ef:96:cc:a4:8b:
         48:a8:31:06:03:53:46:b2:68:71:21:10:27:55:32:a6:e4:85:
         af:cc:54:9c:57:8f:f4:a3:c8:37:89:63:f1:18:8b:a4:61:a7:
         84:4f:4f:58:ae:59:d7:e0:b0:34:bc:86:3f:41:6d:1c:9d:af:
         0d:e9:80:67:b4:51:4c:00:90:15:d8:a1:8e:2a:9d:a4:5f:4d:
         90:15:ce:66:ca:ab:67:d0:13:ce:3c:29:2f:d8:d7:7f:91:b2:
         42:9e:14:79:37:84:f0:c4:62:b8:f0:46:b4:46:4f:71:f1:14:
         9d:a6:7b:de:d6:0a:76:d9:37:48:78:df:ea:b1:eb:f8:e8:2b:
         80:d5:c9:91:23:1a:24:06:b0:8f:39:91:25:83:c0:40:31:2b:
         88:aa:92:15:5e:33:cf:5f:65:73:13:ad:ea:b2:62:70:43:99:
         fe:44:49:15:3e:d7:81:14:31:4b:97:b4:58:30:9c:8d:3f:42:
         74:91:33:62:bb:bf:78:98:39:ff:a4:aa:a7:3f:f9:fe:9d:c6:
         01:82:11:99:59:e4:cb:6b:16:c6:00:32:b6:52:8c:f6:1c:1d:
         80:b0:45:0e:98:c3:ef:2e:41:24:1e:8a:c1:02:9e:68:7b:ea:
         50:02:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:38:51 2026 by rpki-client