Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File:                     QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier:          1PdnE6Mna82MqytCkHzkvL5YHl5Xn6CmDIDWPx3ws7g=
Subject key identifier:   15:06:14:BA:B8:EF:6E:B0:1A:F6:74:92:7F:41:62:EE:1F:44:AA:9C
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer:       /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial:       01A08A557220CF5832DE9C72C71BF9D13608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number:          1A46
Signing time:             Thu 10 Sep 2026 08:00:50 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:50 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:50 +0000
Files and hashes:         1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: yi6gYR8rdXh2DEfgpJjcwFyI8jmsH1OmZjhSAViywAg=)
                          2: l4DBdStfdTqpFE2GUQ7wpbM0KWU.roa (hash: AQoHT6lkRghb1teuc/s2owz9xxJB3CRP6CmK2f0ZEEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:72:20:cf:58:32:de:9c:72:c7:1b:f9:d1:36:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
        Validity
            Not Before: Sep 10 08:00:50 2026 GMT
            Not After : Sep 11 08:00:50 2026 GMT
        Subject: CN=150614bab8ef6eb01af674927f4162ee1f44aa9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:85:55:81:92:b6:16:c7:7e:fd:0a:21:50:
                    a8:b1:69:04:ef:26:4a:7c:a4:8d:a2:95:cc:04:3a:
                    7c:fa:50:73:92:45:39:61:73:c7:0c:eb:45:f3:bd:
                    ae:31:16:3b:2a:85:4f:63:66:29:0f:57:5f:1c:10:
                    0b:66:4a:b1:3a:29:17:8f:a5:a4:8d:e8:91:a4:c3:
                    bc:52:28:91:42:3e:97:16:99:1c:51:95:8f:fc:69:
                    31:1f:21:c6:61:1a:e3:f9:83:d4:21:bd:ac:98:df:
                    d8:71:55:47:7b:78:49:59:ea:a6:44:33:82:90:c5:
                    1f:da:11:07:02:c3:3f:80:ad:fd:d4:5f:7e:38:ff:
                    96:4f:d5:e9:72:3f:8f:f0:a7:1a:f0:ee:70:3f:c7:
                    7c:4f:8b:2c:a5:e7:ab:f9:9b:9a:68:26:b7:bd:af:
                    24:d0:96:0b:86:ee:a8:2e:5a:38:cb:0b:2d:36:09:
                    bc:d5:5a:5c:47:d1:ee:1e:4c:f1:2c:bb:1c:ad:db:
                    af:cf:8b:42:4b:fe:bd:1b:27:8d:de:32:18:7f:f2:
                    93:d7:c8:61:f3:d6:fd:27:b9:3f:a1:3e:3c:dc:9e:
                    d7:89:65:76:1b:eb:5c:f9:96:a0:c1:9d:e4:59:b3:
                    ee:f6:00:a9:fb:d8:5c:22:ee:8a:0b:55:cb:2d:68:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:06:14:BA:B8:EF:6E:B0:1A:F6:74:92:7F:41:62:EE:1F:44:AA:9C
            X509v3 Authority Key Identifier:
                keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:b0:3b:55:d0:b5:e9:e2:f6:43:e9:e6:a4:42:30:5e:90:
         56:ce:2b:34:1f:f6:4c:6a:fd:62:4d:a6:86:39:35:99:9a:bc:
         10:12:52:41:3c:56:5a:7a:8d:f4:58:f0:6c:2f:42:f5:d9:b6:
         cd:00:63:ac:1e:a0:a5:e1:36:7b:2e:3d:8f:55:d9:be:09:7f:
         b1:1a:8c:4c:ae:d6:fd:76:63:56:4b:92:3c:cf:d6:90:e0:f1:
         fc:9d:d6:c1:06:df:d1:1b:a2:7e:2a:c4:b0:0d:36:2f:f7:cf:
         14:e5:74:50:4b:3a:6d:36:41:a6:b9:25:57:45:77:a1:c9:b8:
         73:e4:eb:63:e2:fb:45:7d:64:fa:a2:b9:0a:98:e8:63:12:0c:
         33:be:32:f0:e8:24:1e:0b:b5:ac:0e:31:48:3c:95:aa:9a:ed:
         14:f4:2c:cf:a0:23:f9:5e:69:82:13:e2:cb:74:30:86:7e:95:
         17:b9:6a:32:bc:cd:59:32:37:f7:58:d1:69:2e:71:2f:80:af:
         9f:25:32:d8:59:0e:0b:bc:02:8c:d6:91:9a:ac:71:17:6f:09:
         b3:91:6c:43:5a:64:09:ff:15:fa:e6:f7:53:ca:5d:4d:92:4b:
         bb:0e:63:e4:69:95:5a:09:64:88:4f:33:fd:70:27:cb:17:e3:
         14:1e:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:44 2026 by rpki-client