Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File:                     QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier:          1s9nPYa87WxIonvKRAXxoPDMOWHLjX1ELA6ZF2iDkkI=
Subject key identifier:   07:58:A7:2F:F6:6F:DE:FE:02:64:43:B0:BE:06:AB:E4:ED:5D:9C:6D
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer:       /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial:       01A088D51143BAFA73362F2D82560579086B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number:          0E78
Signing time:             Thu 10 Sep 2026 01:00:59 +0000
Manifest this update:     Thu 10 Sep 2026 01:00:59 +0000
Manifest next update:     Fri 11 Sep 2026 01:00:59 +0000
Files and hashes:         1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
                          2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: yEWfv9t8An34EcOGXdKvHOavz3VuL/56wp1bSg670UU=)
                          3: fdAWH39zdbtm7mMYQ8ChXiiwNho.roa (hash: DJA2F7Y08swfNI9bds3Jp09xBGdfNtIaDN7pjPNot9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:d5:11:43:ba:fa:73:36:2f:2d:82:56:05:79:08:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
        Validity
            Not Before: Sep 10 01:00:59 2026 GMT
            Not After : Sep 11 01:00:59 2026 GMT
        Subject: CN=0758a72ff66fdefe026443b0be06abe4ed5d9c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:68:88:3b:4f:86:77:e2:f9:7d:06:77:ba:
                    ae:9f:a9:b0:97:c0:05:ba:75:74:d5:b3:a1:6c:c2:
                    d0:c2:15:82:f0:a4:df:0a:71:4d:a1:9e:7a:a9:d0:
                    96:54:52:c3:3f:3a:b6:25:f7:c0:f2:6e:d2:96:af:
                    24:08:3a:4a:8e:eb:49:27:1b:e0:51:90:8c:d7:dd:
                    9e:54:f5:ee:e0:d9:1d:6d:c2:90:b5:57:38:22:24:
                    e5:19:d6:a3:4e:97:48:22:55:48:b4:f7:99:31:dd:
                    25:38:dd:44:6a:ba:71:e4:96:0f:c1:13:f9:e0:3c:
                    1e:81:f8:60:cd:81:d2:43:c8:19:75:9d:38:3a:c8:
                    d7:cf:15:fc:58:75:f6:f6:e9:f4:3a:02:ac:5a:7e:
                    b3:4b:ea:fa:f7:b9:a8:db:4b:63:04:6a:7d:35:46:
                    c0:3c:ac:2c:d4:7b:50:f7:35:ef:92:d0:fe:37:9e:
                    04:9c:09:39:5c:25:81:2e:b0:75:57:ea:fa:0b:bd:
                    24:9f:55:de:ae:d3:66:9a:0b:15:61:55:f8:d0:57:
                    45:2d:6b:e8:b3:ba:75:ca:db:69:18:79:7e:5b:80:
                    a4:4a:85:6b:6b:02:9b:f0:10:4b:83:00:44:a5:c9:
                    06:05:39:a7:fd:7e:a9:28:80:d1:bd:63:b5:d2:c5:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:58:A7:2F:F6:6F:DE:FE:02:64:43:B0:BE:06:AB:E4:ED:5D:9C:6D
            X509v3 Authority Key Identifier:
                keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:d3:16:08:6b:8b:1a:43:14:da:f7:29:ae:34:87:83:b1:
         93:c9:8b:d0:87:9e:e7:02:81:c4:99:89:82:64:06:0c:c6:63:
         bc:e8:db:aa:50:b0:28:ab:ca:18:aa:b5:5f:b2:85:8f:c3:1c:
         17:8d:bb:d5:38:72:35:8b:7a:9a:70:e6:13:de:08:8b:09:cf:
         49:99:8c:83:35:88:37:95:78:29:ed:5d:77:9b:0c:36:3b:ce:
         47:6b:c8:d6:1b:4a:16:d1:30:ff:bb:15:f3:dc:5c:8a:97:5a:
         58:0b:6f:4f:1b:37:f8:df:7a:79:6f:20:f8:2d:a5:18:b5:c9:
         64:fa:cb:4c:8f:f6:67:dc:8f:1d:08:64:7d:d9:70:33:84:f5:
         cf:f4:09:02:83:4d:39:fc:67:bd:5a:fe:91:58:50:b1:e9:45:
         0f:a5:7e:ac:0b:46:80:4c:f7:71:d2:b9:1a:c9:70:20:d0:e2:
         b1:c6:11:71:f5:ee:d3:11:4d:46:bf:4b:99:c8:39:4a:7a:94:
         6c:81:cc:d4:f2:a6:93:91:26:76:78:14:b2:42:d3:af:23:40:
         21:fb:bd:7b:06:45:7b:a1:04:99:35:58:51:72:2e:20:db:e5:
         5f:57:60:b4:43:67:5d:ba:0e:37:df:1a:30:b1:4e:8e:03:5c:
         75:34:88:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:04:54 2026 by rpki-client