Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File:                     QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier:          gniKrPWImoY5UGZPMAkX/K+yQFd5k12L10PNvvtGwq8=
Subject key identifier:   C1:99:08:E1:56:DF:80:2B:6D:07:69:DD:2F:2F:2C:9B:86:D3:90:F4
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer:       /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial:       01A0E1AABA06A6E8A5562670D0AE0DE5619F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number:          0C63
Signing time:             Sun 27 Sep 2026 07:00:57 +0000
Manifest this update:     Sun 27 Sep 2026 07:00:57 +0000
Manifest next update:     Mon 28 Sep 2026 07:00:57 +0000
Files and hashes:         1: 2j_D2kuSa562Zx4XnJ12w00oiMA.roa (hash: axWB++PeEKcojO8mVkayfPDvB+OsvgmhWTzXNDpM5Gk=)
                          2: 7Un3ch6sdTltAsulfRI9pykeqS0.roa (hash: qClWxzfRNb7UAsReGRMx4ioTUH4td3oi9VjiWf2rMZk=)
                          3: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: Sc3fzERotx3lZTjjQpNiFM05G5Dy7tb/EDG7I0iYWBo=)
                          4: jBO-jXvQb25kicCKq7f1EY7gqaE.roa (hash: ZdvKKa9KpOV5dwMw7ZUq1soTwqWKMJVI/ky5uvZJbRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:aa:ba:06:a6:e8:a5:56:26:70:d0:ae:0d:e5:61:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
        Validity
            Not Before: Sep 27 07:00:57 2026 GMT
            Not After : Sep 28 07:00:57 2026 GMT
        Subject: CN=c19908e156df802b6d0769dd2f2f2c9b86d390f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a5:73:ba:a0:79:bc:e7:2e:88:e3:42:e8:54:
                    81:ae:93:67:6e:c7:d4:3a:ce:42:7b:97:a9:f8:b1:
                    b3:f2:6f:69:e2:da:1f:7e:d6:a5:3d:5c:20:f2:42:
                    08:d6:28:9b:22:60:f8:39:44:cc:7b:4a:a2:f6:1e:
                    11:88:e8:d0:02:36:c5:b1:ba:0f:a9:ac:ad:23:48:
                    d6:66:54:8d:96:9d:a0:e6:33:b3:65:b6:01:80:be:
                    09:88:a0:58:1e:f0:65:70:f9:96:f9:08:08:31:08:
                    43:27:9a:2a:d5:63:54:de:ee:62:df:0b:2b:94:2f:
                    d9:5c:b1:8d:1a:b6:8d:58:38:62:30:86:98:89:2c:
                    cc:57:76:95:b5:1d:99:0e:20:d1:c9:7d:7f:fc:5e:
                    7a:ef:e8:8d:f1:a8:6b:fb:c0:7b:a7:ab:cb:7f:2b:
                    12:4f:1c:c2:f3:e2:14:16:f7:67:c8:04:83:14:8a:
                    42:a2:06:1d:93:86:e9:a2:02:86:39:b5:de:1c:e1:
                    fb:0c:2a:0e:ae:dc:54:10:e3:9d:e0:a2:59:1f:dc:
                    5f:2c:ec:e6:5e:4e:8c:8a:e3:f3:80:c9:2b:4d:13:
                    f8:fb:98:66:fe:89:3f:0b:e3:d8:11:9a:c5:94:92:
                    e3:5e:4f:70:65:7f:92:57:79:2f:f1:cc:ae:48:24:
                    d6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:99:08:E1:56:DF:80:2B:6D:07:69:DD:2F:2F:2C:9B:86:D3:90:F4
            X509v3 Authority Key Identifier:
                keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:26:28:11:6c:59:2e:80:41:d4:fc:69:99:75:b0:19:2b:fb:
         53:7b:b3:a2:b3:ee:93:db:be:ec:06:94:4c:ca:4e:61:f6:ac:
         a1:78:8a:01:4b:44:72:3d:9e:8c:63:ec:1a:9d:64:5c:cf:84:
         57:21:c4:13:5b:cd:29:8c:f2:ba:a9:bb:a1:8e:b6:55:95:f2:
         4f:6e:32:81:24:14:46:d4:a4:af:4e:3b:e9:f6:32:35:2d:ad:
         d9:e3:68:f5:8e:3d:0f:2b:82:c4:ea:7a:2a:62:29:33:fe:f8:
         b6:ed:82:bc:e7:e7:b8:6a:4f:1c:57:b1:4d:1d:7f:a4:4f:3f:
         d7:82:e1:3f:2a:ee:e9:af:23:63:df:f9:bb:07:89:b6:52:4e:
         c9:95:14:4f:95:b7:a5:8f:c4:1a:26:ea:b1:64:c7:2c:06:0f:
         51:c7:6a:00:4e:0e:e2:74:46:3d:00:cf:ac:13:fa:82:52:f9:
         fa:1a:56:5f:06:a2:09:33:0d:ce:d0:db:bf:64:f0:57:b5:2d:
         be:f4:f8:b7:c5:92:6b:f3:ed:9a:5a:97:3c:29:07:15:5c:48:
         b6:0a:5f:48:19:ef:f0:78:34:56:f8:47:e9:5b:cb:e9:39:41:
         72:3a:61:4c:95:fa:16:93:f1:10:20:05:14:8c:af:01:9a:9a:
         6b:07:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:44:43 2026 by rpki-client