Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File:                     QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier:          bDCndw0ENqaCtGL+1iNenmBJiQ7tc62yJB5PT7a1AAM=
Subject key identifier:   2D:41:B3:3D:70:E1:63:C3:85:09:E4:36:C3:B8:80:60:E0:CE:8E:D7
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       01A0B0BE10AEF6F02CBB8F2ACB9F85F90523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number:          1AAB
Signing time:             Thu 17 Sep 2026 19:00:41 +0000
Manifest this update:     Thu 17 Sep 2026 19:00:41 +0000
Manifest next update:     Fri 18 Sep 2026 19:00:41 +0000
Files and hashes:         1: BYfDobbNo_m_w4crOMgDM9Ap1xU.roa (hash: dR/BNJMAt8zObcpN49bBOHDWT2wNzIa3cO7OLcillkk=)
                          2: EI7CwvWnDzGoyUcQkEgispb35mE.roa (hash: t9+WU2EdfrtjbLHdXRpNBIukhT3LimVMvmcXGL3pKdk=)
                          3: GjHI4b9XG_Gq98DG7Vz6sUZGE80.roa (hash: WTcq50V1CPKptotufjQn29Ul1Zr2FOf8snIYBs8IL7M=)
                          4: J858U9M3Pu6Cp06GzOrCZktlpEU.roa (hash: /2LUChah4azSZ6Ix+z1gFSt47yg5myoIj13SluIuDYE=)
                          5: Kxo0teOZwloERI7QoSNyGmfd6Lc.roa (hash: l3pXjBFAyH7G75ccUcJxbRG9IMuyFszbxgxuaSQ++ko=)
                          6: M3-SM_c3ZTl4IB61XQyRUZLxhFI.roa (hash: BsGpN+uaDJmv0KbrsMQXofcSrapJDn6CebLkynWQhwI=)
                          7: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: DLnDSnuOrqVkaFdplY9S5xKmjNRXXDax+uBjtbFCYnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b0:be:10:ae:f6:f0:2c:bb:8f:2a:cb:9f:85:f9:05:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Sep 17 19:00:41 2026 GMT
            Not After : Sep 18 19:00:41 2026 GMT
        Subject: CN=2d41b33d70e163c38509e436c3b88060e0ce8ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:76:ce:fa:2b:3f:d2:6b:70:a9:cc:a9:0d:
                    d8:03:8e:95:fc:4c:4a:7c:3c:2b:6b:7b:53:d3:c1:
                    ae:35:33:5d:9c:28:e4:e8:9c:5e:0f:4e:55:ad:5b:
                    cf:e8:17:ee:77:90:25:90:17:ab:19:8c:99:82:d7:
                    8d:04:09:13:50:c3:74:f1:64:80:13:3f:4b:a6:7c:
                    ea:2f:93:83:16:f0:e7:84:5d:77:00:44:4b:31:6d:
                    5f:b7:51:a4:fb:99:40:a6:e6:04:8e:34:0a:94:ad:
                    da:57:d6:8f:f3:c1:65:f5:7a:0d:fa:22:f6:cc:72:
                    c7:dd:e5:4a:8f:8e:9a:36:14:d5:05:f4:24:0c:22:
                    c7:77:b3:5e:e4:8f:65:27:21:b9:23:c9:f6:4b:ce:
                    dd:30:62:96:44:4e:8d:80:c2:c6:98:6a:15:26:5d:
                    c2:66:d8:5d:78:c5:85:ac:70:bd:f6:dc:1d:0b:05:
                    f0:f6:82:ec:e2:25:4a:fc:12:4b:38:60:ff:b0:ed:
                    b9:08:55:04:a7:36:7b:34:38:bf:a1:63:38:a3:61:
                    85:9e:e0:93:8f:2d:14:8f:e3:5d:7f:d2:21:73:ce:
                    8e:68:50:06:3b:28:d5:5b:45:77:ed:5b:84:00:bc:
                    2a:3e:fe:00:85:bc:c2:a1:b1:ea:a3:1d:ad:fd:18:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:41:B3:3D:70:E1:63:C3:85:09:E4:36:C3:B8:80:60:E0:CE:8E:D7
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:13:83:7a:e0:d8:22:e7:0d:a7:c0:66:dd:8c:70:61:01:
         c0:ed:63:94:e7:ad:b6:27:d0:e1:4e:04:81:3d:75:4a:17:1f:
         2e:9b:fb:de:71:dd:3d:c4:c8:29:bf:a8:d5:8c:4b:f7:3c:dc:
         8b:e1:4e:b0:82:9d:be:b2:f3:e5:89:cd:80:71:4e:b9:bd:9d:
         55:9c:91:b8:e5:7e:27:04:15:c0:b2:84:65:d2:9c:6a:c6:bd:
         60:f8:69:3a:8e:1e:97:ee:de:9f:d5:ec:8d:bd:7b:c3:ec:8e:
         56:a3:f0:47:a1:10:ad:93:e2:13:ab:e1:4c:39:fc:8d:ff:ea:
         e2:61:06:b2:5f:ab:c5:08:45:7f:c3:1c:fd:34:9e:87:d0:6c:
         65:da:27:52:5f:ad:fd:e4:87:c8:8f:3e:41:de:07:60:e6:90:
         72:3a:5c:1c:f8:1a:ad:3f:9f:af:47:05:1a:7a:71:08:62:14:
         e9:57:f9:32:e9:d0:32:e1:3f:d1:38:9c:2d:14:1d:da:4f:f6:
         8b:73:fc:74:83:2f:53:37:d6:3b:41:03:f5:13:08:83:2d:0f:
         a8:25:e2:5a:cd:b6:ae:17:bc:81:cf:8e:43:79:1d:11:b4:ce:
         1f:f8:a3:cc:0d:81:2a:fa:e3:99:7c:0c:ea:6e:0c:8d:05:5a:
         ff:b4:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 01:35:26 2026 by rpki-client