Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File:                     QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier:          PnhLyLsNbtqNEqs0qmlERbUbNa7XD1kgUB1o8MYitSM=
Subject key identifier:   AB:B5:13:B8:E6:16:D0:44:C2:11:7F:4E:50:48:75:EA:7E:37:87:3C
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       01A0D124526E5E3A98528E04570923C628D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number:          1595
Signing time:             Thu 24 Sep 2026 02:00:13 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:13 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:13 +0000
Files and hashes:         1: 0sWjJb905jqzQqAPMLxDrrjWBMk.roa (hash: Zma9KLmjg5EV1eKmRL4soE5jPO+CVQlU/IWoQZY27PQ=)
                          2: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: /YkxYpJlC/AtLQNwpZTs+W+1bQqRn5XhKyApmR8gF5o=)
                          3: V2xIm0MXuFbznin5m4AbMt91R94.roa (hash: MPiaxxk7o8f5I+HVf8eWEZiYR8UOsfetA4mv9WmhsH8=)
                          4: bWmOOPKyQMv70URwqTZU8sllHjY.roa (hash: yQ8N3UwrqjLlEaxQHxKpVivx2+Lei1qK8l2tgkVbZiM=)
                          5: jr2Bs93kCy1qM5dGaxCmTxVRCPs.roa (hash: JQrsYENJWrVuw6dKCnfSnh8ynO6digQQI/K1CgLtuIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:52:6e:5e:3a:98:52:8e:04:57:09:23:c6:28:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: Sep 24 02:00:13 2026 GMT
            Not After : Sep 25 02:00:13 2026 GMT
        Subject: CN=abb513b8e616d044c2117f4e504875ea7e37873c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:35:20:2d:94:f7:9f:9e:c5:38:c0:ab:a5:37:
                    24:29:69:c9:d3:15:a5:e9:1f:cc:d2:75:03:f7:da:
                    82:19:34:c9:01:f7:72:6c:dc:77:81:03:82:54:8f:
                    54:d6:62:dc:f4:d9:84:2c:57:80:99:89:cb:12:8e:
                    24:40:61:3d:7c:2b:0d:80:e7:d7:7c:a4:49:c7:ab:
                    e9:aa:ac:0a:bd:a7:57:e1:b6:79:80:bd:3b:42:c0:
                    cb:a9:59:e6:1b:de:65:15:ea:24:ca:22:da:52:98:
                    06:9c:87:fd:8b:61:d1:59:ec:5b:f8:a9:6e:1c:01:
                    fb:62:2a:d4:8c:04:b9:6e:24:ca:7b:6b:1f:2c:34:
                    3b:70:90:f6:05:15:3c:59:3e:2c:39:aa:77:3e:5d:
                    05:92:f3:24:a6:52:50:d4:51:13:17:81:aa:02:23:
                    81:49:5d:cb:be:87:bf:dd:9f:ab:92:b9:d5:21:c4:
                    b8:26:76:6b:b6:e5:6a:e5:98:1e:3c:2f:4f:61:7c:
                    c6:33:f8:89:8f:2d:81:ee:15:d0:10:94:fb:05:d9:
                    b3:32:09:22:af:6a:73:ea:78:0b:54:81:9c:28:31:
                    a8:8b:59:ba:0f:b4:35:47:5c:b0:63:f7:56:f2:95:
                    b2:53:20:2e:00:c7:0a:3f:1a:9b:be:a3:0f:d4:8b:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B5:13:B8:E6:16:D0:44:C2:11:7F:4E:50:48:75:EA:7E:37:87:3C
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:95:bc:ad:b1:bf:ec:59:69:be:24:33:92:00:68:25:27:
         30:bf:7a:ed:78:7a:5b:ff:2e:5f:07:00:4c:55:2c:b4:d8:52:
         8d:7d:c9:56:82:46:e8:b4:bb:55:42:c8:df:97:d6:49:89:f0:
         37:6b:18:93:62:9a:17:0b:93:f2:1f:6f:fe:af:e9:33:e7:34:
         06:86:a7:e9:9d:39:b0:22:99:72:9d:64:61:20:d3:35:70:92:
         94:12:7a:29:70:49:67:8d:bf:a1:e2:9d:12:8b:a8:f1:10:14:
         46:08:1d:a4:37:f9:ae:e7:5f:c9:3b:68:99:31:4a:99:53:ed:
         c8:8d:98:aa:e7:93:14:75:73:9c:63:b9:bd:95:3b:69:cf:9b:
         0e:bd:6d:e8:24:1e:90:db:0c:01:f1:c1:06:7c:45:8e:bf:01:
         f4:56:46:16:68:3d:08:f5:71:d2:04:22:43:68:84:8f:9b:1b:
         29:e7:27:22:6a:1e:a7:7b:b9:b4:78:3d:e5:40:62:a5:bf:b7:
         eb:41:b2:19:43:25:91:4b:3e:97:c9:79:a7:ef:ba:34:bd:89:
         3c:06:87:8b:ac:0b:f7:85:d6:d2:0d:21:9b:e8:66:d6:c1:1f:
         04:26:d0:e3:b7:aa:cb:2c:bd:47:2d:a2:e9:b4:c8:2a:b2:1d:
         11:ea:f0:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJFJuXjqYUo4EVwkjxijQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjc1ZDMyNzc2MWI5MGMwODk5NjM4ZjQzMGViNjE0Yzg3
YzMxMDYwHhcNMjYwOTI0MDIwMDEzWhcNMjYwOTI1MDIwMDEzWjAzMTEwLwYDVQQD
EyhhYmI1MTNiOGU2MTZkMDQ0YzIxMTdmNGU1MDQ4NzVlYTdlMzc4NzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DUgLZT3n57FOMCrpTckKWnJ0xWl
6R/M0nUD99qCGTTJAfdybNx3gQOCVI9U1mLc9NmELFeAmYnLEo4kQGE9fCsNgOfX
fKRJx6vpqqwKvadX4bZ5gL07QsDLqVnmG95lFeokyiLaUpgGnIf9i2HRWexb+Klu
HAH7YirUjAS5biTKe2sfLDQ7cJD2BRU8WT4sOap3Pl0FkvMkplJQ1FETF4GqAiOB
SV3Lvoe/3Z+rkrnVIcS4JnZrtuVq5ZgePC9PYXzGM/iJjy2B7hXQEJT7BdmzMgki
r2pz6ngLVIGcKDGoi1m6D7Q1R1ywY/dW8pWyUyAuAMcKPxqbvqMP1ItbRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKu1E7jmFtBEwhF/TlBIdep+N4c8MB8GA1UdIwQY
MBaAFED3XTJ3YbkMCJljj0MOthTIfDEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAt
MjlhYzQ1ZTJlY2ZmLzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAtMjlhYzQ1ZTJlY2Zm
LzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMn2VvK2x
v+xZab4kM5IAaCUnML967Xh6W/8uXwcATFUstNhSjX3JVoJG6LS7VULI35fWSYnw
N2sYk2KaFwuT8h9v/q/pM+c0Boan6Z05sCKZcp1kYSDTNXCSlBJ6KXBJZ42/oeKd
Eouo8RAURggdpDf5rudfyTtomTFKmVPtyI2YqueTFHVznGO5vZU7ac+bDr1t6CQe
kNsMAfHBBnxFjr8B9FZGFmg9CPVx0gQiQ2iEj5sbKecnImoep3u5tHg95UBipb+3
60GyGUMlkUs+l8l5p++6NL2JPAaHi6wL94XW0g0hm+hm1sEfBCbQ47eqyyy9Ry2i
6bTIKrIdEerwMQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:33:44 2026 by rpki-client