Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File:                     1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier:          gzhnv0613+fG9t+luD9+QsoFWcTtQbyiWcEqbprJuYQ=
Subject key identifier:   97:71:3F:26:D6:27:C5:1D:7B:A9:30:89:01:13:80:5C:86:28:C9:58
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer:       /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial:       01A0CA0FF779F1277EEBB5AC59DFBCDBED09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number:          141D
Signing time:             Tue 22 Sep 2026 17:00:39 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:39 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:39 +0000
Files and hashes:         1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: gOMW/H4opCOFTzQcfTZY1LerFdfzF31bl1QmJdXwPKg=)
                          2: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
                          3: G8ok4WnRssMF_kSU0fMKahJetsU.roa (hash: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=)
                          4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
                          5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
                          6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
                          7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
                          8: nU05wjCCjQdvD0N5GwShQguLcMg.roa (hash: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=)
                          9: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:f7:79:f1:27:7e:eb:b5:ac:59:df:bc:db:ed:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
        Validity
            Not Before: Sep 22 17:00:39 2026 GMT
            Not After : Sep 23 17:00:39 2026 GMT
        Subject: CN=97713f26d627c51d7ba930890113805c8628c958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:48:5f:99:76:7b:3e:54:6d:29:04:bf:27:
                    29:1e:c4:03:08:fb:8f:fc:1f:65:f9:ec:6a:34:70:
                    88:7d:61:7b:c8:08:63:cd:37:a9:e0:26:d6:58:39:
                    23:87:ff:b6:f5:0e:d4:55:7a:a6:7c:46:2a:90:3c:
                    19:93:b6:46:fd:d2:52:a7:98:4f:1a:03:a6:37:8e:
                    97:7f:fc:70:ec:1b:2b:86:cb:74:94:b6:4a:09:b5:
                    d3:0e:89:35:dc:99:97:38:f9:42:58:1d:63:c5:03:
                    4a:af:f0:eb:f4:9e:b3:da:ca:df:a5:2d:f0:31:cd:
                    f1:c6:fc:76:ff:35:f6:37:23:17:38:0e:6a:1b:28:
                    dc:0d:12:72:a6:c7:a3:d1:53:c3:f5:c5:19:66:a3:
                    07:a7:57:f8:d7:1a:d6:8f:93:35:58:cc:61:af:e3:
                    8a:52:15:86:32:5a:e7:e7:ce:35:f1:97:43:cd:7b:
                    12:be:36:8a:50:8f:5c:04:a1:f2:cf:52:b3:97:46:
                    66:d9:f4:fc:98:39:cd:93:a3:47:e2:32:48:8c:74:
                    57:d5:01:db:70:49:8c:0b:96:21:f1:a3:45:f2:55:
                    c0:a6:1e:76:59:e1:af:69:e1:dc:f4:b3:14:10:c5:
                    be:0e:69:8a:b4:ac:a0:03:b9:10:6b:75:0c:74:6f:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:71:3F:26:D6:27:C5:1D:7B:A9:30:89:01:13:80:5C:86:28:C9:58
            X509v3 Authority Key Identifier:
                keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:68:5b:71:54:20:fc:5c:51:02:64:4a:f6:ec:90:8b:88:d5:
         cf:5a:c5:b9:9f:60:04:e5:06:ea:61:e8:67:0f:75:04:d1:01:
         b8:31:f8:59:04:59:b5:f2:2a:57:9e:c5:12:94:d7:da:70:59:
         a8:af:c8:a2:2d:ff:d7:f0:7a:79:c4:4b:c6:9f:e4:a7:51:68:
         79:c2:a3:58:7f:72:ac:c8:49:57:9e:9d:f1:e1:9a:63:c6:bb:
         d3:4e:cf:f7:93:0c:6b:61:7a:85:1c:d6:c8:6f:3b:73:cf:44:
         c1:fa:b4:d7:d3:4f:29:6f:1d:da:f6:28:b0:17:ad:b2:f3:b4:
         0a:44:ab:95:3b:e6:ca:8c:6d:cd:98:72:88:28:2a:31:7e:17:
         d1:26:14:12:c0:66:22:34:20:9d:82:ae:36:aa:1e:11:a1:53:
         ad:42:56:7b:3f:96:45:5f:31:3c:f1:6f:11:25:42:77:c2:93:
         b4:f9:1d:1c:ec:54:c2:1e:65:26:a5:28:85:fd:da:dd:4a:77:
         40:c5:66:48:d2:c3:04:22:99:aa:7a:3c:ca:25:d4:a3:9e:1f:
         0a:88:ae:27:83:04:a0:ce:8b:f6:32:bd:39:24:1e:12:36:f6:
         e7:ae:af:11:d2:cc:68:13:df:89:6e:d4:36:17:cc:90:31:07:
         61:5d:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:22:56 2026 by rpki-client