Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File:                     Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier:          EFe2ZJficDJQii6X8lYYskaAbMVZQvxNDatzsee5Jso=
Subject key identifier:   9C:62:77:F9:3C:E7:27:31:D5:9F:99:8C:27:9E:B1:CE:C7:10:81:A4
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer:       /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial:       01A08DC421014BE82E9A2E1F8C379C924E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number:          0C5C
Signing time:             Fri 11 Sep 2026 00:00:35 +0000
Manifest this update:     Fri 11 Sep 2026 00:00:35 +0000
Manifest next update:     Sat 12 Sep 2026 00:00:35 +0000
Files and hashes:         1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: jfsYkPRSiZCRAA9/64Ao+MeIN/+ZDwtlPQBvUATsTyY=)
                          2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:c4:21:01:4b:e8:2e:9a:2e:1f:8c:37:9c:92:4e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
        Validity
            Not Before: Sep 11 00:00:35 2026 GMT
            Not After : Sep 12 00:00:35 2026 GMT
        Subject: CN=9c6277f93ce72731d59f998c279eb1cec71081a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:e0:4e:b5:b6:14:49:38:80:4c:94:46:30:
                    da:00:5a:52:8f:a3:29:48:c3:dc:8f:6a:18:9d:4a:
                    62:15:3d:5a:34:64:0d:2b:b0:19:5e:57:fe:0e:37:
                    04:f9:3f:33:3e:50:52:94:23:76:70:a0:b5:4f:9c:
                    57:e2:6c:c7:d1:bb:32:5b:44:e4:1b:25:24:ca:d1:
                    e7:ac:0a:a4:0c:95:3b:59:7a:99:16:6a:33:c9:5a:
                    47:86:9a:4c:2b:02:9a:19:07:bc:5f:e2:47:68:79:
                    73:a2:72:c1:19:0c:a9:e8:cd:cb:bc:95:44:b6:2e:
                    12:98:7d:0f:41:60:42:c5:8a:f2:4f:45:8f:77:fa:
                    89:5d:62:fd:34:61:b2:9a:87:42:93:fe:62:21:fe:
                    6d:a5:1d:cf:e6:a2:2b:ca:81:35:55:6f:f4:0d:fc:
                    94:00:d7:74:f6:84:e2:10:16:a8:5b:10:e4:a4:10:
                    dd:86:61:f5:8f:2b:4f:b3:34:3e:a1:b4:b5:bf:23:
                    79:56:b8:e6:ca:9a:78:d7:0c:a9:14:19:4c:4c:f6:
                    70:4f:29:97:8d:fe:06:66:3f:2f:7a:e6:5a:1c:6e:
                    1c:2c:5f:75:9c:d1:fa:b0:01:cc:9a:34:fc:7f:9b:
                    a2:fc:6c:76:5d:4d:31:7c:17:ed:1c:ae:ad:a7:2b:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:62:77:F9:3C:E7:27:31:D5:9F:99:8C:27:9E:B1:CE:C7:10:81:A4
            X509v3 Authority Key Identifier:
                keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:59:6b:4a:ba:1f:14:1c:8f:b8:ea:5f:81:2d:53:02:17:aa:
         1e:55:51:92:31:fc:df:d9:8d:b7:3d:8e:8e:cc:15:08:6a:1d:
         7c:55:9c:35:97:0a:11:fa:9b:b4:43:49:f2:db:f1:8d:f7:47:
         47:e0:f6:3e:0f:de:21:f1:a3:31:27:6d:11:3d:4d:cc:44:77:
         38:4e:e6:0d:b7:d7:5a:26:2b:a6:51:22:da:06:7b:7a:9a:15:
         a2:e9:1a:72:85:a7:4c:22:f0:6a:af:91:1e:f1:de:16:a2:a6:
         25:38:03:e9:4d:03:a0:7c:d5:5c:43:cb:2c:2a:29:31:fc:84:
         38:6f:4a:dc:16:cf:da:e5:39:e8:6b:05:f9:1b:31:cf:0f:4b:
         2e:b0:ec:cc:9e:0b:10:2a:51:8d:98:a7:e4:31:12:12:1a:da:
         4e:f4:ac:f8:7b:18:87:ca:a7:4b:b1:29:29:e2:50:de:30:53:
         4b:98:67:f3:7e:a0:e6:07:b7:9f:75:fe:5c:1f:68:34:ce:38:
         4a:ab:3f:47:4e:a3:21:84:c0:c0:de:77:ae:4b:10:c2:8c:9a:
         24:69:70:0c:43:87:15:39:e3:30:ac:d5:60:e1:dc:68:fc:da:
         4d:41:2b:a5:e1:1a:8c:4c:05:8d:4d:a0:fe:51:c2:2a:7f:08:
         04:10:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:52:00 2026 by rpki-client