Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File:                     Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier:          3qutZ63aa1tF7ajwjuk6U8sf8iXucVApBVi3FnweNGs=
Subject key identifier:   8D:1D:80:DB:88:CA:DB:6D:EB:93:BA:A3:9E:5F:E9:A9:F4:82:21:9D
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer:       /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial:       01A08B313142941B94B70B12126CC16BC109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number:          0760
Signing time:             Thu 10 Sep 2026 12:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 12:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 12:00:51 +0000
Files and hashes:         1: C8KAjAmMo4zHOxPsP5u33kaFWlY.roa (hash: U4UKkIWDo1A35uGyB5LLNTGRRGiNn0SaaQUFdLefZ24=)
                          2: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: R0UBSRQS2rRBTuv6LEmyW45Puno0PnZtQtTXV3tdCoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:31:42:94:1b:94:b7:0b:12:12:6c:c1:6b:c1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
        Validity
            Not Before: Sep 10 12:00:51 2026 GMT
            Not After : Sep 11 12:00:51 2026 GMT
        Subject: CN=8d1d80db88cadb6deb93baa39e5fe9a9f482219d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:6c:48:db:e9:4e:03:b0:78:9a:be:cb:ba:
                    d9:75:0f:86:bc:ea:df:a2:48:97:51:31:d6:ee:d7:
                    29:5a:99:32:17:88:2a:8e:b9:0c:82:af:ef:63:13:
                    88:b0:2b:97:64:e5:ff:59:12:10:c7:94:e6:99:c9:
                    1c:8a:34:5b:b7:22:b9:4c:59:2e:00:91:ac:8a:24:
                    4a:b8:de:dc:df:1b:3f:fe:46:5f:ea:91:83:89:00:
                    1e:38:ad:95:bc:f4:39:b1:b7:33:6d:ee:14:26:34:
                    e2:71:42:43:99:6d:98:93:52:88:87:2e:ea:d6:7d:
                    38:53:1f:13:8f:ba:1f:28:73:1b:3f:40:cd:ef:89:
                    a4:54:c5:ed:7d:ad:e5:cc:4d:93:bb:cd:ea:53:51:
                    79:84:97:8b:bf:0c:d4:81:a7:63:44:ca:97:3e:58:
                    2f:3c:a8:4e:38:2f:9f:6a:a0:28:f6:c3:18:53:d8:
                    2d:d4:d7:4c:f4:9a:61:68:74:06:a7:85:8a:ce:a8:
                    13:f7:06:dd:d7:06:32:53:b5:ec:a8:c3:66:3a:28:
                    d9:5b:46:55:3a:90:d1:71:eb:c8:c1:84:44:e4:0e:
                    51:42:7a:b1:db:9a:8d:a1:41:3d:f9:e7:36:5b:96:
                    ce:5a:57:4d:09:7c:a1:a8:40:75:85:cb:70:97:59:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1D:80:DB:88:CA:DB:6D:EB:93:BA:A3:9E:5F:E9:A9:F4:82:21:9D
            X509v3 Authority Key Identifier:
                keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3d:98:16:79:61:62:78:12:9d:b6:27:91:e2:c7:2a:6a:92:
         e2:b1:45:d3:1e:2b:cb:21:4e:fd:ff:1e:25:89:1e:f8:c3:80:
         1c:96:20:fd:91:0f:f3:12:c7:17:8c:69:92:4d:52:38:40:1c:
         71:19:28:c4:7b:90:ad:29:bb:55:f0:72:4a:45:6b:1c:f2:a8:
         91:af:b1:c1:2c:77:59:61:3a:4d:21:60:ac:3d:88:e3:61:a6:
         80:c4:cd:fc:76:fb:a1:80:32:10:14:b1:0c:73:98:ca:56:7d:
         8c:78:66:42:d3:21:a4:ff:5b:1e:8d:cb:bb:8c:66:30:f4:c4:
         86:f9:a4:a8:66:16:a8:cc:76:d9:e0:5c:38:e1:39:87:94:af:
         40:d1:7b:6c:1d:a5:61:e6:df:b6:89:42:9c:46:61:19:b8:48:
         e7:47:b6:52:a2:0b:d8:12:51:cd:d2:96:aa:63:17:87:41:bf:
         ad:cf:b4:8d:27:62:05:a6:df:f7:77:3b:1c:d8:df:99:2c:7a:
         4f:4b:0f:5b:db:7f:37:b6:0c:56:c1:e0:ea:ae:e2:91:13:67:
         4a:4f:e1:17:bf:82:ef:d8:d5:5a:f3:a9:14:00:f4:29:15:9e:
         7a:44:8c:d1:d5:40:51:e8:a6:89:ae:22:cb:d9:4a:48:7d:57:
         2c:6c:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:39:53 2026 by rpki-client