Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File:                     qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier:          c5dAPRqpKAmx4PulNzaS2Xu02XLiuJwjx1FRIS0OeME=
Subject key identifier:   26:B0:86:B0:FB:EE:F2:86:9B:67:20:51:1F:FF:7A:64:B8:9D:82:75
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer:       /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial:       01A08A1F0614E189C25EB46DBC495F88B479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number:          1A55
Signing time:             Thu 10 Sep 2026 07:01:23 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:23 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:23 +0000
Files and hashes:         1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
                          2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
                          3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
                          4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
                          5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
                          6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
                          7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
                          8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
                          9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: Tm5VpzgFIy6XLx9a12rJypUU4fnJQjiYgMpw7n8oS68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1f:06:14:e1:89:c2:5e:b4:6d:bc:49:5f:88:b4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
        Validity
            Not Before: Sep 10 07:01:23 2026 GMT
            Not After : Sep 11 07:01:23 2026 GMT
        Subject: CN=26b086b0fbeef2869b6720511fff7a64b89d8275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:df:65:87:d4:b3:af:86:35:af:12:d6:f8:
                    f5:e7:ab:0b:df:44:7b:ab:1e:c0:d3:5b:c1:e6:11:
                    98:16:b6:ec:20:0a:65:8f:87:83:22:01:5c:a2:90:
                    96:43:8a:9e:30:51:aa:b9:c6:eb:74:c2:e9:e7:13:
                    b2:a9:dc:6b:b3:c1:e6:aa:90:1e:d8:01:b5:aa:51:
                    23:87:3e:d0:2c:d8:2a:8c:f3:84:43:9e:71:10:70:
                    01:df:06:16:b4:cc:f7:e8:12:97:0a:bc:28:6f:f8:
                    79:99:c3:3d:1f:a5:64:63:dc:b4:24:28:4b:b9:f3:
                    cb:a8:7a:f8:09:23:cb:09:75:75:30:e3:df:ca:94:
                    47:a4:49:9d:e2:b4:29:be:e9:ea:db:ca:1f:6b:ec:
                    9d:1f:c8:78:88:2c:c8:85:0f:de:55:bb:68:54:4a:
                    b1:0c:b2:27:03:e8:da:ff:83:86:55:16:d2:0c:82:
                    ae:7b:6a:2b:54:0c:8a:d0:d6:40:4a:64:23:9d:c1:
                    90:db:39:cf:1f:aa:56:17:3c:cc:df:63:6d:70:fd:
                    a5:af:22:a9:02:61:ce:14:9c:1d:24:12:2b:6a:99:
                    7f:c6:d8:95:02:14:67:78:68:c3:67:5d:12:34:da:
                    43:31:28:d2:2b:2f:74:4f:48:f6:f4:13:cc:5f:7b:
                    1c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B0:86:B0:FB:EE:F2:86:9B:67:20:51:1F:FF:7A:64:B8:9D:82:75
            X509v3 Authority Key Identifier:
                keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:ce:0d:95:b6:e4:ba:4e:90:99:33:93:1a:48:72:c3:bf:
         17:b1:06:54:f5:c2:e6:31:03:22:a4:2a:50:82:8d:88:e6:bb:
         bd:35:13:fa:0a:df:52:81:26:42:04:c4:e2:12:71:d6:91:2f:
         2d:fe:fb:c6:88:11:88:94:da:18:a6:d1:c1:af:d4:87:60:69:
         de:ca:4e:6b:a6:c6:1d:b3:4f:d5:25:43:70:3c:39:7d:dc:77:
         fa:b3:45:b9:53:3b:d5:14:2f:47:27:0c:d6:ef:f4:96:63:85:
         83:86:92:86:97:fe:00:b6:24:57:91:69:5a:c1:97:bf:d3:cf:
         c7:22:be:49:94:59:c4:6c:9e:5b:f6:40:fd:bb:e5:66:2d:19:
         eb:8b:b3:8a:cd:1c:16:e0:43:bd:1f:c9:08:d6:b2:96:cc:29:
         26:99:2d:df:59:56:50:c0:cb:e9:c4:bc:8d:7f:cd:53:e2:4d:
         ab:ac:93:be:de:a9:05:f9:c7:73:61:4e:12:15:7f:f8:91:b4:
         3d:e4:aa:94:4d:36:e1:99:f0:55:33:1e:66:f7:9d:60:43:82:
         54:59:38:7c:37:4e:d8:28:b5:5b:54:eb:76:2c:7d:b3:2c:7e:
         a0:75:44:28:56:fd:c0:4d:30:99:d4:af:51:87:d0:1d:c7:8b:
         68:cf:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:41:45 2026 by rpki-client