Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File:                     Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier:          fMopQY0JgpwfkxZEmzSOR3QH3Q5RZqLz4VRojEZh7jk=
Subject key identifier:   75:50:26:F1:5F:EE:1B:E3:A9:D8:DC:78:F7:58:15:34:A0:7E:E2:90
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer:       /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial:       01A0FAFD878C215D65BDE9228DA9FC90B597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number:          03D6
Signing time:             Fri 02 Oct 2026 05:01:54 +0000
Manifest this update:     Fri 02 Oct 2026 05:01:54 +0000
Manifest next update:     Sat 03 Oct 2026 05:01:54 +0000
Files and hashes:         1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
                          2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: B+nekYnRcNnEvE/BU9x83FLp/QvABFLcUunhfBjaHDQ=)
                          3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
                          4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 05:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fa:fd:87:8c:21:5d:65:bd:e9:22:8d:a9:fc:90:b5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
        Validity
            Not Before: Oct  2 05:01:54 2026 GMT
            Not After : Oct  3 05:01:54 2026 GMT
        Subject: CN=755026f15fee1be3a9d8dc78f7581534a07ee290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:43:d7:7b:1d:a7:47:74:77:79:87:ca:e4:
                    26:ac:d8:97:5a:72:3c:8e:11:3b:7b:a4:30:96:43:
                    f0:68:96:34:76:f5:7c:d9:3a:b0:e3:c7:36:1a:07:
                    ed:58:69:62:86:60:50:05:76:71:13:a0:41:52:e1:
                    69:41:73:d3:ad:f3:5c:9b:03:f0:9f:dc:0e:8f:4c:
                    16:b8:7c:d8:29:fc:30:db:0c:1e:02:29:55:56:65:
                    0a:ce:cc:9c:dc:73:4a:f5:e2:fc:d2:07:1d:1b:c8:
                    76:79:a3:15:3d:e1:95:af:8b:b0:95:44:59:c0:fa:
                    07:bb:de:80:cb:36:47:59:85:93:df:02:ce:f6:1d:
                    6f:0c:54:b9:3b:a8:b8:72:25:90:13:3d:05:8c:0b:
                    c9:91:70:c6:96:d7:f5:9a:25:42:05:b8:88:39:86:
                    a4:91:cd:5a:32:63:b9:a3:f3:6f:13:d8:c5:fc:b5:
                    ef:e6:94:0f:5d:86:0b:f4:19:bf:d3:40:82:4f:17:
                    59:79:da:9b:ef:2f:fd:0f:b5:76:31:9c:ab:aa:d8:
                    be:26:76:0a:2d:ce:ef:36:ae:7c:6e:74:61:49:b9:
                    69:ce:ef:ff:7c:d0:f4:ba:a4:bd:1b:8f:0c:9f:3d:
                    3b:ab:9c:16:5e:f6:77:7b:7d:bd:61:8e:1a:1f:44:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:50:26:F1:5F:EE:1B:E3:A9:D8:DC:78:F7:58:15:34:A0:7E:E2:90
            X509v3 Authority Key Identifier:
                keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:54:29:eb:84:49:ca:93:a3:b4:e1:9f:fa:de:8c:08:3e:db:
         84:2c:dd:65:3d:b7:3f:91:30:62:bb:20:09:eb:64:5f:79:bc:
         6e:a9:d9:c3:15:dc:6b:23:da:ec:52:8d:42:25:b0:fa:0d:1f:
         ab:9c:d6:b4:55:ff:cb:b5:b6:84:4f:52:27:96:e3:b8:32:87:
         3c:99:85:f9:dc:00:c9:10:85:bf:26:b6:9a:35:7c:fa:47:a0:
         fd:f2:75:e6:b6:7a:26:ee:be:5e:02:78:23:b2:13:a0:09:8e:
         d1:f0:30:f3:7b:36:9c:c0:a7:04:bb:70:6c:74:ff:31:c8:ff:
         a4:11:9a:ef:33:1a:d3:0e:34:79:6c:e3:87:71:7f:08:2b:3c:
         37:6c:1e:78:2e:b0:3b:74:17:c9:0c:e0:21:b6:f7:8d:bf:93:
         f7:f6:29:a8:e9:6b:ac:b6:1f:47:f4:fd:0d:f8:ed:d2:07:cb:
         07:91:3e:80:08:0f:ce:d8:00:67:0f:12:39:12:75:03:0c:ee:
         dc:15:2c:88:2e:36:3c:32:dd:53:fe:ed:b9:d8:99:76:d7:74:
         97:95:86:d6:80:6c:83:33:60:5d:29:3a:93:6c:3d:77:87:41:
         4e:b0:2d:7d:fb:39:ab:0c:c9:36:88:06:bf:8f:a6:21:6e:89:
         8b:0f:29:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD6/YeMIV1lvekijan8kLWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZjA2YzM2OTg3MjRiMzdmZTFhMTcxMTQxN2RiZDg4ZWJi
ZjBhOTEwHhcNMjYxMDAyMDUwMTU0WhcNMjYxMDAzMDUwMTU0WjAzMTEwLwYDVQQD
Eyg3NTUwMjZmMTVmZWUxYmUzYTlkOGRjNzhmNzU4MTUzNGEwN2VlMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWRD13sdp0d0d3mHyuQmrNiXWnI8
jhE7e6QwlkPwaJY0dvV82Tqw48c2GgftWGlihmBQBXZxE6BBUuFpQXPTrfNcmwPw
n9wOj0wWuHzYKfww2wweAilVVmUKzsyc3HNK9eL80gcdG8h2eaMVPeGVr4uwlURZ
wPoHu96AyzZHWYWT3wLO9h1vDFS5O6i4ciWQEz0FjAvJkXDGltf1miVCBbiIOYak
kc1aMmO5o/NvE9jF/LXv5pQPXYYL9Bm/00CCTxdZedqb7y/9D7V2MZyrqti+JnYK
Lc7vNq58bnRhSblpzu//fND0uqS9G48Mnz07q5wWXvZ3e329YY4aH0ToowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVQJvFf7hvjqdjcePdYFTSgfuKQMB8GA1UdIwQY
MBaAFEPwbDaYcks3/hoXEUF9vYjrvwqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjct
MGUxZWZkNWEzNzQ2LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjctMGUxZWZkNWEzNzQ2
LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFQp64RJ
ypOjtOGf+t6MCD7bhCzdZT23P5EwYrsgCetkX3m8bqnZwxXcayPa7FKNQiWw+g0f
q5zWtFX/y7W2hE9SJ5bjuDKHPJmF+dwAyRCFvya2mjV8+keg/fJ15rZ6Ju6+XgJ4
I7IToAmO0fAw83s2nMCnBLtwbHT/Mcj/pBGa7zMa0w40eWzjh3F/CCs8N2weeC6w
O3QXyQzgIbb3jb+T9/YpqOlrrLYfR/T9Dfjt0gfLB5E+gAgPztgAZw8SORJ1Awzu
3BUsiC42PDLdU/7tudiZdtd0l5WG1oBsgzNgXSk6k2w9d4dBTrAtffs5qwzJNogG
v4+mIW6Jiw8p1Q==
-----END CERTIFICATE-----
Generated at Fri Oct 2 16:33:19 2026 by rpki-client