Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File:                     QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier:          on7U1HpMTqJzH43+Sec/GnPiDyG/m149VhITgy/yZ5Y=
Subject key identifier:   EE:C7:2A:B4:3C:56:93:92:1E:F4:C3:34:B5:00:F9:7B:54:61:AD:F9
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer:       /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial:       01A0D4264FC72BD75E72C1C6EFE95A742974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number:          1330
Signing time:             Thu 24 Sep 2026 16:01:15 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:15 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:15 +0000
Files and hashes:         1: 6RTIAwrwJbLJ1fPq_cac7ZJtAcY.roa (hash: 2ERzYxNpNYyjAlD2AAScZj0ODsBHs3ahvyC6T+s+AbM=)
                          2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: Yd6trQK1HqDBZWeujPgbuOC8rJZfANs8Lg3DjtLtOUs=)
                          3: oTRGw6Zs-d6bpDvQ-kL6ClRG4Ik.roa (hash: bLoXf9n41kaDI/ipYk9F3/X8uzxUQT3nnCgm1AJq7NE=)
                          4: oztBXyy3buPJ87mv28gbdNDGLjw.roa (hash: j94QmNmrVHRGHpcXkadwtbn926rIcrEUhkEOlIuoY3M=)
                          5: tGVxaOXkW7EuQqW9cKlE7ec1aac.roa (hash: muPN8zI+Nf3MgaQWzHsyyy2GZnIQWau/zxiVhyiqVlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:4f:c7:2b:d7:5e:72:c1:c6:ef:e9:5a:74:29:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
        Validity
            Not Before: Sep 24 16:01:15 2026 GMT
            Not After : Sep 25 16:01:15 2026 GMT
        Subject: CN=eec72ab43c5693921ef4c334b500f97b5461adf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:30:cd:75:aa:3f:40:b9:30:79:37:ca:d2:7b:
                    c5:4f:76:8e:60:cb:d4:77:c2:e8:2c:50:5a:9e:66:
                    09:fe:df:3d:40:52:5a:37:68:c2:b7:fb:bf:f4:49:
                    ed:7e:79:fc:f6:60:cb:79:dd:87:48:25:63:03:6f:
                    4e:48:d1:46:06:e3:8d:90:7d:69:a5:20:b4:80:75:
                    c0:9d:f5:e7:b5:96:d2:82:a5:30:dc:71:42:19:32:
                    60:11:23:26:c7:c7:ab:92:5f:fe:e3:57:11:b8:dc:
                    18:a8:00:e3:a8:6f:50:0a:88:57:51:9d:d1:d4:5f:
                    2b:83:61:c9:6b:e2:0b:93:71:cc:c0:1f:9d:78:ab:
                    69:f0:8c:9e:0a:53:49:bf:33:14:4d:78:f2:63:26:
                    8e:c1:d3:8b:00:a7:4a:b5:a8:ad:de:41:6a:41:57:
                    58:86:0f:67:9f:f1:a9:f8:51:60:b7:b9:f4:70:cc:
                    2c:d6:a9:76:ed:70:f2:7c:4e:9a:2c:5e:68:33:ed:
                    17:de:88:c7:20:f9:51:ab:05:35:ec:0a:cc:11:7f:
                    08:1e:f6:a9:5d:9d:50:6e:ac:c9:d4:04:f0:c5:88:
                    68:ef:5c:ba:54:12:70:26:ad:47:69:4b:4f:e5:ad:
                    b8:e1:18:c7:2f:80:c9:db:dd:47:fe:81:c4:03:75:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:2A:B4:3C:56:93:92:1E:F4:C3:34:B5:00:F9:7B:54:61:AD:F9
            X509v3 Authority Key Identifier:
                keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:85:70:2b:2c:fa:f5:e6:f6:b6:94:12:45:b7:b2:c8:e3:2b:
         ae:c5:51:2d:eb:c7:b6:50:0f:e9:49:e4:84:51:23:5b:df:56:
         32:04:6d:1b:c2:c7:25:7c:13:70:1a:42:67:1a:2d:53:b7:c0:
         c6:4b:55:5a:a4:ca:8a:e2:18:6b:a2:fb:ea:e1:0a:11:cc:35:
         5e:e5:12:87:20:d3:ad:d5:74:a8:78:af:cb:0c:86:34:4a:91:
         2a:8c:94:7f:27:8f:ea:b5:6f:e2:b8:ab:e4:53:ff:8b:cc:f7:
         61:2a:b7:4a:4d:fa:19:d6:08:ac:b7:dd:a4:31:d4:cf:7f:5c:
         27:1f:3b:02:6c:7e:74:48:2c:55:b3:0c:7e:fa:0d:6a:2e:34:
         62:d9:19:ca:48:18:6d:8a:7c:90:fb:4a:fe:e7:60:6f:f2:6c:
         89:03:94:c1:8d:d6:69:8e:34:be:08:9d:2e:3f:4a:13:a5:71:
         fc:81:89:3b:0a:96:16:07:a5:fa:41:20:ed:25:e6:60:9b:08:
         23:8f:35:76:3a:60:3e:8a:dc:05:b3:80:e0:5a:d1:80:75:fa:
         4e:dc:af:a9:72:fb:05:92:77:de:7b:66:b8:ce:72:96:41:a3:
         09:d3:2c:8c:23:2f:99:be:9c:b6:fc:46:f9:50:8a:99:1a:06:
         60:39:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:06:22 2026 by rpki-client