Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File:                     QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier:          3Z5YBHntLCM19b6a09wLdqha+UZH+ZqNUcUhLiWKklE=
Subject key identifier:   B3:68:7B:50:6E:E2:D6:FF:2F:DD:67:C6:AC:41:37:F8:AB:E3:49:A4
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       01A0D501E1EFE6C91A084B1AB37EFD0647FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number:          1597
Signing time:             Thu 24 Sep 2026 20:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:05 +0000
Files and hashes:         1: 0sWjJb905jqzQqAPMLxDrrjWBMk.roa (hash: Zma9KLmjg5EV1eKmRL4soE5jPO+CVQlU/IWoQZY27PQ=)
                          2: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: gLmHnSEKhbopMNCYPctIoTVPXuveM4Lte35FGeHz93Q=)
                          3: V2xIm0MXuFbznin5m4AbMt91R94.roa (hash: MPiaxxk7o8f5I+HVf8eWEZiYR8UOsfetA4mv9WmhsH8=)
                          4: bWmOOPKyQMv70URwqTZU8sllHjY.roa (hash: yQ8N3UwrqjLlEaxQHxKpVivx2+Lei1qK8l2tgkVbZiM=)
                          5: jr2Bs93kCy1qM5dGaxCmTxVRCPs.roa (hash: JQrsYENJWrVuw6dKCnfSnh8ynO6digQQI/K1CgLtuIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:01:e1:ef:e6:c9:1a:08:4b:1a:b3:7e:fd:06:47:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: Sep 24 20:01:05 2026 GMT
            Not After : Sep 25 20:01:05 2026 GMT
        Subject: CN=b3687b506ee2d6ff2fdd67c6ac4137f8abe349a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:9d:03:9c:08:59:ad:95:9d:19:39:8e:a3:
                    6e:85:b0:e1:dd:13:b3:75:32:56:30:57:60:f0:20:
                    12:b0:d7:24:f0:35:f6:8e:ab:94:e0:28:9b:68:e7:
                    eb:bd:d6:a2:11:28:90:08:44:39:d6:4f:07:ad:10:
                    59:a3:4a:6b:69:88:0d:d2:fa:08:42:f8:0e:c0:17:
                    1b:10:3a:45:fe:32:5c:9f:f8:fc:8a:43:51:70:c9:
                    de:19:8f:54:3e:79:1f:da:f8:1b:21:8b:5a:21:a3:
                    8c:ad:72:fd:87:66:e3:8c:85:0b:b6:dc:a5:0f:f5:
                    82:7b:e0:c5:cd:6b:94:9c:d5:f9:8d:6e:e8:8e:03:
                    d7:5f:a0:ed:b6:03:7c:5f:41:5b:28:53:a0:44:8d:
                    d5:07:bb:1d:4f:b3:38:2f:b3:2f:ed:13:32:9d:56:
                    74:3c:24:6b:03:18:75:a1:70:74:7f:4c:36:c8:c0:
                    5e:15:38:d6:1d:1f:65:03:f6:08:50:b6:24:b6:7a:
                    1d:49:9c:d0:3f:8f:56:c2:b1:86:1c:ac:78:32:0e:
                    1d:c3:e9:9a:82:c5:b0:ea:5d:ce:54:92:54:46:22:
                    57:fb:89:95:c8:3a:75:13:b7:f4:d5:a6:74:c7:9c:
                    a8:34:e6:c7:71:1a:d9:89:f9:b8:ca:47:e1:ef:7d:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:68:7B:50:6E:E2:D6:FF:2F:DD:67:C6:AC:41:37:F8:AB:E3:49:A4
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:51:1b:19:34:5a:e9:48:71:ea:33:50:6d:58:65:4c:3f:dd:
         fb:2c:8d:0d:c2:69:df:6b:78:96:bd:92:19:fb:82:31:bb:ba:
         98:ed:60:ec:64:e1:06:76:2f:df:75:a2:56:96:d8:ee:c0:ea:
         33:d6:40:e5:c5:91:2e:0c:fb:ce:7d:ab:b4:81:13:61:2a:f4:
         18:b1:c7:e4:d1:69:20:36:92:f2:2d:50:06:db:69:f0:a8:83:
         26:3d:65:7a:73:24:45:52:e1:f7:df:c6:72:5a:36:d8:7a:90:
         a8:13:74:6c:0b:12:10:81:7c:06:9d:a4:95:cf:64:c5:b1:81:
         40:1e:ed:fe:48:be:94:d1:6c:38:54:9e:f4:fb:5a:da:2a:fb:
         05:2c:72:6f:6d:9a:96:32:18:80:5f:9b:ea:48:50:c7:c4:13:
         49:f6:24:2f:01:e2:2f:d3:11:46:62:8d:54:91:a5:8d:e0:37:
         4a:2f:74:94:5c:83:9d:d7:1d:0b:88:3f:d7:92:d0:f2:de:5b:
         2c:69:d9:5e:2f:55:ae:2b:bd:a3:e2:69:ca:2d:a0:08:25:64:
         4d:51:4e:67:de:b9:2a:30:43:63:01:99:24:5d:e2:93:06:ab:
         60:11:eb:fc:34:a9:9a:92:14:c6:da:31:55:bb:97:6a:a9:65:
         59:26:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:39:27 2026 by rpki-client