Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File:                     QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier:          vl4qvzL+vUQ4qzIcAg9YXHNSTYdf6PcrO/UoIxxSyHM=
Subject key identifier:   0D:9A:99:A8:70:BA:A7:49:02:A6:CF:D8:83:E1:EB:DF:D2:9F:74:8B
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer:       /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial:       01A119069900CBCD465D818E634751BCEEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number:          07BF
Signing time:             Thu 08 Oct 2026 01:00:24 +0000
Manifest this update:     Thu 08 Oct 2026 01:00:24 +0000
Manifest next update:     Fri 09 Oct 2026 01:00:24 +0000
Files and hashes:         1: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: J3jgd7FxqMwlj5DPqBB29IGbhMUxg2qEwBVGx4v1k1M=)
                          2: lqPB-_tpvjZaRMURMIYlaL-x7v4.roa (hash: PwPNHJ6WdN+tYHjQQVUmAufUKj9CcNQAjnCYOsVYIJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:06:99:00:cb:cd:46:5d:81:8e:63:47:51:bc:ee:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
        Validity
            Not Before: Oct  8 01:00:24 2026 GMT
            Not After : Oct  9 01:00:24 2026 GMT
        Subject: CN=0d9a99a870baa74902a6cfd883e1ebdfd29f748b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:d6:72:fe:7a:c1:69:85:a8:a0:35:53:dd:
                    82:f6:63:4d:86:52:af:6d:47:a1:28:db:93:64:c1:
                    dd:f7:2a:72:0c:c1:4a:4e:c3:66:24:b9:67:69:c5:
                    2f:e1:e4:ca:c3:e9:93:aa:6a:96:e9:ac:d9:6a:50:
                    8c:2e:0e:f9:d6:7f:02:68:c5:07:b3:af:55:ac:d3:
                    65:60:46:35:43:d3:49:b9:a0:8d:f1:a9:e9:cb:ae:
                    05:73:82:c6:f1:d8:d2:86:04:b7:b4:c5:7f:b0:f0:
                    6a:0b:80:f1:f8:d5:58:2a:da:d9:40:74:ed:6e:b9:
                    19:f4:e5:b5:ac:1b:c8:43:b0:46:9f:55:88:71:64:
                    a3:85:3c:01:30:26:71:70:fb:2e:d7:6e:43:a3:58:
                    13:4a:56:3a:99:0e:32:04:c1:c0:4f:66:b9:e8:59:
                    d0:d1:2f:38:d5:25:d3:13:08:ad:a0:ec:a6:b0:42:
                    af:c7:7f:10:c3:2e:74:6e:23:4a:51:e9:b6:50:35:
                    f9:97:48:8f:6c:c7:fa:20:38:ef:02:d9:1c:c2:b3:
                    f9:55:10:40:7a:23:ee:d5:74:1f:d5:31:4c:c8:60:
                    56:3d:0f:94:cd:4e:6f:6b:21:e8:52:b2:76:e1:bc:
                    9d:20:56:0c:5e:b1:33:b4:04:a3:a0:75:4a:f6:4b:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9A:99:A8:70:BA:A7:49:02:A6:CF:D8:83:E1:EB:DF:D2:9F:74:8B
            X509v3 Authority Key Identifier:
                keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:99:49:bd:2c:d9:93:62:5d:8c:ae:95:e8:ad:b6:86:93:8f:
         fa:55:d9:30:d2:99:1d:f9:6b:28:5d:05:9d:69:1f:ad:ec:88:
         e0:06:5e:f6:d7:c8:5c:f0:56:83:70:0f:80:cb:d0:de:67:35:
         93:36:96:14:76:a9:7a:50:33:b6:f8:39:38:3f:c2:e7:e6:c6:
         a9:51:6d:ba:37:ce:9d:10:c5:2c:97:43:7d:1e:43:90:a0:85:
         48:e1:66:2a:7e:11:73:d9:ac:cf:8b:b5:20:24:2d:b9:0e:96:
         74:56:63:ed:11:5d:f9:94:d7:3b:a8:d0:f5:ef:fe:1c:07:19:
         2c:b9:25:e9:82:7a:22:e1:43:84:36:c9:68:59:cc:eb:2a:40:
         d5:a1:a8:f5:c7:a7:f6:6a:77:d0:71:ac:52:32:2f:30:03:99:
         e0:de:5d:cb:8f:c7:20:b6:02:69:f2:b9:13:0d:a2:e2:4b:36:
         f3:1d:3c:c8:17:6b:f4:24:4b:88:13:55:ba:a5:5b:65:40:f8:
         09:cc:8b:cf:19:25:45:30:98:6f:aa:3a:de:21:94:2d:91:04:
         32:11:56:2d:db:29:46:05:1d:ff:35:83:10:d4:30:e1:f7:54:
         19:67:89:48:e2:fc:92:87:40:6c:1f:f5:cc:cf:01:9a:9d:be:
         d2:48:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:56:01 2026 by rpki-client