Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File:                     QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier:          0sjlwPeW/tG38hSQbGYfnQeUEkvO1RLtzf0gWeQAI+w=
Subject key identifier:   C5:90:5F:48:93:E0:1D:DB:1F:87:D1:B4:CB:26:73:98:FD:51:4F:A5
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer:       /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial:       01A0B018EC2EF88C15E572A5E3D7FDC60BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number:          0639
Signing time:             Thu 17 Sep 2026 16:00:18 +0000
Manifest this update:     Thu 17 Sep 2026 16:00:18 +0000
Manifest next update:     Fri 18 Sep 2026 16:00:18 +0000
Files and hashes:         1: Is0EtUEGPtj5iPMrI__B634d_Gg.roa (hash: UcnAE32bQjXyoFuSdzK7Ox1KjdWOO+CqE8BXmt6ncsQ=)
                          2: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: EQdFr7JcC7sY1votIDfP0c579wYrJwJ0qp1lRkkatcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b0:18:ec:2e:f8:8c:15:e5:72:a5:e3:d7:fd:c6:0b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
        Validity
            Not Before: Sep 17 16:00:18 2026 GMT
            Not After : Sep 18 16:00:18 2026 GMT
        Subject: CN=c5905f4893e01ddb1f87d1b4cb267398fd514fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:bf:fa:05:e5:6c:6c:0a:b8:bc:4d:b8:69:
                    72:00:57:a2:ae:af:16:85:d6:de:56:f3:8e:01:01:
                    7c:a9:d2:de:9d:32:af:85:97:68:9a:1f:ba:39:1c:
                    91:79:78:25:fe:d2:91:14:a2:88:99:26:6d:08:ee:
                    57:7a:26:46:3f:f6:78:89:ee:26:94:1b:1b:7c:41:
                    ec:dd:a8:cc:c7:79:ad:62:e7:e7:1c:7b:d9:76:ec:
                    02:51:58:dd:04:7f:c1:e7:9f:96:3c:f2:68:cf:1a:
                    eb:c8:d2:8e:7e:7e:15:96:55:3b:8d:ca:f2:d0:76:
                    9b:54:41:f7:19:17:87:33:67:2b:6f:2e:5e:48:cf:
                    58:80:bb:fd:5d:5c:50:32:e2:d4:cb:52:84:19:ed:
                    03:4b:22:b6:65:01:a9:54:0e:a1:1a:e8:9f:42:f0:
                    33:a1:ca:ea:9d:d6:e2:a3:32:f4:fc:15:2b:38:95:
                    b3:d1:dd:ff:ef:4a:af:09:21:3b:91:e8:e7:d2:66:
                    0a:0a:4b:bc:72:93:50:36:70:c4:33:c8:4a:db:92:
                    d6:f8:50:98:cc:0a:14:29:ff:6d:5f:23:e3:39:13:
                    51:f7:9e:a4:90:52:10:42:03:3f:cf:05:fa:f5:dc:
                    f1:48:3c:04:98:1d:52:ec:a8:2d:e0:ce:b3:ed:ef:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:90:5F:48:93:E0:1D:DB:1F:87:D1:B4:CB:26:73:98:FD:51:4F:A5
            X509v3 Authority Key Identifier:
                keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:cd:ea:f9:32:7d:15:1c:8f:d4:14:a8:30:c5:90:13:53:b1:
         9d:10:3c:39:18:85:ba:31:44:34:c1:04:e6:83:80:51:bc:57:
         91:9c:f2:d8:ab:92:d8:10:f5:25:7c:44:82:ea:6d:5c:5e:0e:
         71:20:8b:45:1d:67:29:47:b5:99:99:cd:d8:87:12:d9:79:1b:
         1d:26:9d:59:55:d0:94:08:6d:b0:68:b1:f7:c5:58:74:7a:63:
         3c:e1:e8:9c:96:f5:a3:db:44:a2:61:37:d9:f8:34:18:b8:c8:
         9f:2e:db:52:47:d6:9d:26:b0:e2:3c:a8:e0:e1:a2:dc:21:28:
         38:3b:f7:94:82:48:18:a1:12:ce:18:1b:18:98:39:fe:96:35:
         f5:01:2a:f8:f9:4e:a0:bf:3d:da:7c:59:7c:22:85:be:74:2e:
         e6:f0:3c:ee:5f:03:91:33:e6:42:de:a3:2b:f4:a2:a3:c8:4c:
         ca:cb:2f:3b:18:82:85:c9:82:45:83:20:3f:a8:19:f3:24:8f:
         d3:6c:5e:91:a0:c3:dd:44:9e:bf:83:e0:65:58:b3:38:53:bb:
         f3:be:bc:8a:ee:20:2e:08:21:6d:51:5d:db:cd:01:0f:f1:b8:
         eb:5a:bb:27:8f:f9:da:ce:7d:16:2b:e5:09:ec:b8:e4:77:e1:
         eb:d9:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:49:21 2026 by rpki-client