Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          j7Op4coGrQFME6SDkN4Y8FPJ6WopJjf1gBXCh5FezZU=
Subject key identifier:   6B:AC:33:27:09:36:9F:12:DF:0C:BE:F0:B7:28:3E:D1:AA:73:54:A1
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       01A0E663943CCDC2D8972D5958110B8664C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          1A7C
Signing time:             Mon 28 Sep 2026 05:01:20 +0000
Manifest this update:     Mon 28 Sep 2026 05:01:20 +0000
Manifest next update:     Tue 29 Sep 2026 05:01:20 +0000
Files and hashes:         1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
                          2: 6wrwVwIOmyHRFv2kHnVse0hIMz0.roa (hash: 3Bl4eyRcujw6eiEUMKOOuOVx73Mu069CKt56gjYDvno=)
                          3: MaMuRhJpZN3sUs2ReczUrxtPqog.roa (hash: CIDmAVgYtghMXGXHEdC7pvKkJAeXg2JMbpBDZ4AJ2O8=)
                          4: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: y6qEweWnGisYj5QIQJSh4qtxSog6Fxiy/UOu6D2BSbs=)
                          5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:63:94:3c:cd:c2:d8:97:2d:59:58:11:0b:86:64:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Sep 28 05:01:20 2026 GMT
            Not After : Sep 29 05:01:20 2026 GMT
        Subject: CN=6bac332709369f12df0cbef0b7283ed1aa7354a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:33:1b:c3:a2:0a:f8:ad:4f:46:e7:36:81:
                    71:b4:40:1b:8c:07:82:0a:71:7a:51:dd:9c:a2:d3:
                    d5:24:12:fb:12:fe:6d:48:40:73:a6:d5:89:f5:44:
                    04:2d:60:d6:86:22:5d:78:01:2a:88:de:57:b5:57:
                    6d:50:a4:0c:d2:a6:dd:f4:ff:b0:93:33:48:04:4c:
                    14:f0:66:20:06:fd:fc:de:6f:21:bb:c7:e2:fd:63:
                    89:f7:57:57:68:51:6a:7a:02:15:64:d5:2e:49:3e:
                    c5:da:55:6e:7d:d2:fe:15:f7:60:2a:bb:6e:b4:d2:
                    88:ee:06:d7:17:e9:bd:6e:98:f9:83:ca:ea:d4:f4:
                    e6:18:75:5b:b4:c0:79:61:1d:43:1b:47:3b:fc:62:
                    c5:cd:d7:28:a4:1d:23:b8:7e:23:3f:2f:f5:d1:ba:
                    74:30:dd:60:84:02:89:c4:99:4a:85:0e:1e:c1:50:
                    6d:6f:f2:b3:d6:0a:c6:d9:c0:33:90:60:e3:1e:9e:
                    92:d1:1a:64:60:62:db:e5:da:26:5d:6c:5c:20:53:
                    75:36:14:21:f4:f1:2b:0b:84:7e:f8:f9:15:a0:99:
                    0c:2f:8d:e8:ef:4c:3e:95:e1:bd:02:fd:27:a1:1c:
                    19:63:82:20:6d:ac:c8:9d:c7:b4:3d:6b:c0:5c:28:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AC:33:27:09:36:9F:12:DF:0C:BE:F0:B7:28:3E:D1:AA:73:54:A1
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:42:8e:17:b1:35:63:77:e1:ee:6c:8f:0a:a5:0f:3f:61:5e:
         f7:92:ee:25:aa:37:53:24:ed:a2:cc:c6:fd:67:d0:6a:e6:02:
         e2:04:ee:ab:c1:40:3e:63:54:b7:f3:60:87:15:46:bb:9e:2d:
         b2:ad:c2:ba:f7:eb:80:fe:7e:6a:8d:11:ea:5d:33:8f:f7:e5:
         fe:e2:f8:a7:c0:df:bd:38:0b:03:af:d5:e1:33:2e:fe:65:8c:
         f3:12:f7:8c:a2:31:d4:fb:06:fa:c6:ab:6e:30:02:13:87:b1:
         a6:91:ac:37:32:07:1b:69:4a:63:8a:a1:92:11:92:64:22:a9:
         fa:9c:cc:8c:50:b7:6d:f3:19:92:53:a1:01:d4:28:83:f0:3d:
         2b:b5:07:dc:2e:47:8b:2d:a9:5d:2d:09:e9:4b:6b:43:d5:e8:
         68:73:cf:23:81:02:c8:d7:a3:93:ed:06:03:6f:6c:a9:04:e8:
         e7:85:4e:4c:6d:c1:42:ed:75:e4:68:6f:41:25:43:31:33:59:
         9e:1c:7d:64:58:96:31:47:61:7d:50:91:95:00:3e:4f:70:6e:
         44:40:9e:98:25:5c:21:2d:cd:02:18:fb:5a:a9:cc:e7:1b:26:
         7e:43:48:81:98:36:0a:c3:45:64:5e:bc:63:3b:84:57:52:8b:
         00:39:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:08:56 2026 by rpki-client