Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft
File:                     QQSvokfAz2tt091yE_kF8WvsnsY.mft (raw, json)
Hash identifier:          UiVofZBlEiZxTPq6X2VbM8TALCvAApGTdhKF3yRj+fE=
Subject key identifier:   7E:26:37:5F:63:70:0F:27:55:CC:BF:42:6B:8F:20:4A:60:2C:F7:C4
Authority key identifier: 41:04:AF:A2:47:C0:CF:6B:6D:D3:DD:72:13:F9:05:F1:6B:EC:9E:C6
Certificate issuer:       /CN=4104afa247c0cf6b6dd3dd7213f905f16bec9ec6
Certificate serial:       01A1532DB784A42C6B0A3E1BB57A3BB6FB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSvokfAz2tt091yE_kF8WvsnsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft
Manifest number:          0122
Signing time:             Mon 19 Oct 2026 08:01:07 +0000
Manifest this update:     Mon 19 Oct 2026 08:01:07 +0000
Manifest next update:     Tue 20 Oct 2026 08:01:07 +0000
Files and hashes:         1: OO2Y7VfCOCAEA1xX--BhFozBJiM.asa (hash: lYuSARYdNRnDCAxFwpus22XdP7lxlSBl150uyfdYAxc=)
                          2: QQSvokfAz2tt091yE_kF8WvsnsY.crl (hash: CpbmaUVbh8jFLj8BQYbVJNd1Fi2DKPguLLoybYXNSfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSvokfAz2tt091yE_kF8WvsnsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:2d:b7:84:a4:2c:6b:0a:3e:1b:b5:7a:3b:b6:fb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104afa247c0cf6b6dd3dd7213f905f16bec9ec6
        Validity
            Not Before: Oct 19 08:01:07 2026 GMT
            Not After : Oct 20 08:01:07 2026 GMT
        Subject: CN=7e26375f63700f2755ccbf426b8f204a602cf7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:35:da:6f:f4:20:a2:3e:75:48:bc:24:27:
                    33:0a:30:7d:d8:a4:cd:60:fb:47:b9:82:0b:39:c5:
                    dc:7e:e2:3d:6f:9b:1c:13:62:7e:2c:60:26:82:51:
                    21:09:bb:ba:60:85:98:4a:01:b8:ec:05:a1:28:e7:
                    2a:54:2a:e0:9d:5f:4a:df:30:75:0f:15:e5:ad:ff:
                    d8:8a:ce:e2:5b:1b:4a:ac:52:61:20:73:0c:bf:12:
                    f6:13:89:a0:17:d5:3a:96:e7:ef:81:0d:13:a2:8d:
                    47:50:8e:f8:18:1f:5d:ef:d7:86:92:77:4e:4c:23:
                    50:df:32:0d:56:8e:dc:56:87:d6:86:e1:f1:05:5d:
                    2d:61:7c:46:d4:d5:66:3d:94:cd:b4:2b:1a:03:2a:
                    63:e1:8c:b5:f8:52:6f:9a:ce:49:6f:22:ef:81:bc:
                    67:08:6e:16:e9:eb:72:ef:f7:71:36:51:46:fb:ea:
                    50:cb:53:62:c2:6e:9a:d0:74:aa:0f:4b:6b:0e:ab:
                    77:72:2a:e4:e5:d7:4e:ac:47:00:04:cb:e2:47:e6:
                    96:fc:6f:3d:50:64:e7:71:5e:5d:31:e4:b6:24:f4:
                    94:c0:9f:01:bf:68:2c:ff:26:8c:17:50:ed:fd:65:
                    cf:a4:b3:0e:1b:2c:83:b0:03:0c:f9:c6:43:69:21:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:26:37:5F:63:70:0F:27:55:CC:BF:42:6B:8F:20:4A:60:2C:F7:C4
            X509v3 Authority Key Identifier:
                keyid:41:04:AF:A2:47:C0:CF:6B:6D:D3:DD:72:13:F9:05:F1:6B:EC:9E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSvokfAz2tt091yE_kF8WvsnsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a7:0e:e1:2d:ce:a0:b8:04:a8:10:65:ae:b1:15:a4:84:88:
         b0:a9:3c:d1:6f:49:d8:4d:14:1d:f8:b6:c9:0c:fe:e0:92:c0:
         97:0c:a6:7f:84:ad:53:6a:eb:cc:b3:e4:cb:cf:22:d4:8c:10:
         f6:f2:59:9c:d0:bc:19:d1:3d:bc:0f:2e:0d:56:ed:d6:e7:1f:
         eb:30:31:25:7f:8e:b3:20:dd:aa:9c:bd:d7:b2:9c:51:e0:0c:
         8b:2f:d2:50:a1:53:bb:37:30:cb:62:34:fb:7f:0c:06:fe:f7:
         29:ca:75:0f:9d:d8:2e:56:54:4a:ff:f5:01:0b:6d:fd:e8:6e:
         a6:ec:e5:79:51:49:f4:e6:cd:9d:a6:e0:3e:22:f0:cb:e2:70:
         e8:82:26:e3:a4:cc:91:9f:21:f0:a9:72:1d:31:01:cd:c5:da:
         08:0d:ce:3e:4d:8e:8f:db:82:1c:e0:f0:b0:a7:21:97:85:4b:
         aa:8e:de:63:84:25:30:46:ca:87:aa:7f:f5:5f:73:b4:7c:51:
         c5:ac:71:46:39:21:68:26:f3:27:a8:7c:60:01:2a:1f:b2:ff:
         c7:12:7c:9b:98:37:c9:c9:67:b7:86:52:b1:b0:09:0a:c9:1d:
         4d:0f:57:b8:25:e5:6b:cd:3d:87:59:1b:78:42:bf:26:fd:c5:
         19:e4:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:05 2026 by rpki-client