Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
File:                     QGuz4srXsQAlbhxKf1VbajjYdSY.mft (raw, json)
Hash identifier:          dP1tDmOe2EXkJUGaWi8Jd4VJlJuB1KoYKjivNTI4dI4=
Subject key identifier:   50:D8:D1:12:D7:D0:FC:A2:94:9E:ED:FD:34:99:4C:EB:B1:49:C6:E0
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Certificate issuer:       /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial:       01A06DCBF6FB2788E4D9A848F2684E66A977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
Manifest number:          01FA
Signing time:             Fri 04 Sep 2026 19:01:18 +0000
Manifest this update:     Fri 04 Sep 2026 19:01:18 +0000
Manifest next update:     Sat 05 Sep 2026 19:01:18 +0000
Files and hashes:         1: QGuz4srXsQAlbhxKf1VbajjYdSY.crl (hash: GOcibIIvGDDD3anYXt7VMdUkWO/b62qyrJxQ9419f+k=)
                          2: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (hash: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:f6:fb:27:88:e4:d9:a8:48:f2:68:4e:66:a9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
        Validity
            Not Before: Sep  4 19:01:18 2026 GMT
            Not After : Sep  5 19:01:18 2026 GMT
        Subject: CN=50d8d112d7d0fca2949eedfd34994cebb149c6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:eb:9a:22:a3:02:69:6c:06:05:e0:50:81:
                    09:73:64:a8:29:4c:55:18:f3:30:70:15:34:7b:fb:
                    0a:de:e3:25:d0:72:4b:56:d7:22:87:1e:5a:84:41:
                    0f:e8:9c:bd:9f:49:cf:e7:15:04:e3:82:5b:c1:16:
                    54:7a:7d:fd:09:27:70:a1:6f:80:2e:57:2e:73:48:
                    c7:21:62:c4:b2:24:f5:96:b4:3e:bb:d5:9c:9d:45:
                    8d:74:78:d4:6e:45:82:64:f0:69:0d:57:64:be:f0:
                    75:9f:81:7c:f4:62:d0:f8:65:df:f3:2b:ae:4f:9e:
                    8d:c2:9b:5b:ef:75:f6:df:dd:fc:c0:53:a0:db:3d:
                    34:c7:cf:44:0a:94:6e:04:99:e8:cc:8a:1a:27:11:
                    0e:cd:3c:e2:09:59:7b:d3:4c:ac:21:62:ad:34:b4:
                    e1:49:d7:82:75:d6:87:7d:e7:ab:e0:07:c8:a3:c9:
                    c1:78:22:fd:69:46:ce:78:5e:f2:76:5e:c4:4d:9b:
                    39:14:68:fb:d3:99:2b:b9:a1:38:b9:3b:8b:6b:c9:
                    88:1b:47:b5:06:70:28:7b:d1:b7:e7:6e:30:4d:ec:
                    4c:c3:6a:3e:7e:e6:05:bc:ab:17:5a:96:6e:12:31:
                    28:5c:99:2c:b8:ce:78:14:cd:ac:46:1e:67:5d:45:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D8:D1:12:D7:D0:FC:A2:94:9E:ED:FD:34:99:4C:EB:B1:49:C6:E0
            X509v3 Authority Key Identifier:
                keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:5c:2e:3a:a2:c8:3c:3c:e2:b7:0f:03:93:06:67:4f:e6:
         e0:ea:23:3b:b7:15:87:9f:4c:08:7f:00:8a:48:a4:05:8d:25:
         57:83:54:98:60:b7:f9:d3:af:23:d8:70:94:d0:5d:59:db:6f:
         43:99:be:88:a1:ef:fb:9e:bb:23:26:d3:bc:ef:e3:27:39:b2:
         93:d4:bd:5a:1e:e8:c0:34:0f:64:37:a4:9f:d3:60:4d:57:c4:
         73:0c:03:9b:05:0b:ff:d3:34:a5:c8:5e:26:99:51:97:88:83:
         b9:7c:4f:ef:66:c2:c1:df:93:1b:49:a7:82:c7:0d:4b:2f:db:
         cb:ae:b3:a1:80:d6:04:e7:ce:91:29:b9:13:74:a6:34:3e:26:
         fd:b1:f9:f9:63:05:10:09:10:2f:e3:fe:af:5a:dd:eb:91:be:
         82:ac:83:88:6e:54:6b:2c:df:79:c2:1d:f4:9e:04:b5:b3:b5:
         b6:0a:9b:38:f7:03:cb:da:a8:3c:cc:48:a6:15:78:fb:d4:39:
         a2:9b:13:0d:5f:74:46:30:8f:1a:02:a3:1b:9d:60:c0:f1:65:
         aa:31:2d:60:90:1d:5d:77:6e:18:0d:9f:fe:93:7f:81:76:15:
         74:9e:fc:ab:28:c8:4a:71:18:1c:5a:f5:0d:e1:a7:3c:56:bc:
         a9:f0:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:15 2026 by rpki-client