Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File:                     QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier:          7Xm3ErH2aWkq0RoCzf6mioQbr90pd8dog9ZzQNPH8uo=
Subject key identifier:   6D:BD:2D:9C:33:5B:68:13:C7:C4:09:C3:63:EF:54:C1:39:F9:2D:73
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer:       /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial:       01A0D804592E5F3905721898E4CDCE243761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number:          1A73
Signing time:             Fri 25 Sep 2026 10:02:38 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:38 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:38 +0000
Files and hashes:         1: COcuQD28TY4ZqHPvGBIq2LU3DXk.roa (hash: sGBU4PQ1UIgFaLuANN/BNFi8JnXaw9XHPOkCM2vz3ZQ=)
                          2: K_paFEQGcD7Dwb0KkGKaMQdIqNM.roa (hash: ivJfY98y3w5lIdblfpjkHHl9Y491gAGuVUxW2bbSNrk=)
                          3: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: bfvm8bahLZgwNnhKeIuIhRh1J96UhkrqWDv2x0sbW/k=)
                          4: SLqudbuR-X_G17PVNpWnd2oSWUg.roa (hash: D231831UXSiNe5nD27nyCz/MyBN0j+z0R+T49a0xy84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:59:2e:5f:39:05:72:18:98:e4:cd:ce:24:37:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
        Validity
            Not Before: Sep 25 10:02:38 2026 GMT
            Not After : Sep 26 10:02:38 2026 GMT
        Subject: CN=6dbd2d9c335b6813c7c409c363ef54c139f92d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b0:c6:01:2d:65:8b:cb:30:e0:b7:4a:31:cd:
                    7b:a4:cc:aa:c2:d7:86:c2:b7:f0:3e:3c:32:57:a1:
                    3f:bf:2b:be:cd:02:8d:fd:c0:d7:2f:64:e7:b7:73:
                    1b:f3:6b:07:bb:ed:32:77:d0:9f:5d:62:cc:9d:d0:
                    f5:98:a2:17:78:c9:09:79:da:95:a4:7f:62:2a:7e:
                    50:28:55:34:aa:24:27:df:8f:dd:ba:37:ee:96:3f:
                    52:9c:c9:f0:b2:58:f7:43:fc:0c:a6:74:0a:de:ff:
                    8d:d5:d4:87:e6:7d:82:2c:e7:11:bf:90:f5:f6:7d:
                    f6:f0:d4:ff:4c:56:bb:89:0f:3a:12:f9:d2:ed:83:
                    0c:29:a8:75:64:34:32:7c:fa:93:57:09:a6:6b:5c:
                    e9:de:c5:c8:2c:ac:87:7f:bc:a8:1c:7d:07:5b:ed:
                    4c:5d:c5:5d:44:0a:2e:32:d4:b9:89:60:1a:fb:18:
                    e1:dc:45:76:b0:58:60:b9:29:ad:4b:5b:23:c2:2f:
                    7e:96:b2:fa:82:d2:ee:ba:ad:07:8c:17:f7:55:c7:
                    b3:72:45:1b:cc:0f:c9:35:8c:31:41:2e:84:62:6e:
                    a7:05:3d:61:f5:78:18:ea:df:14:7f:6b:cb:07:af:
                    4c:87:d0:ff:23:31:a7:04:03:e4:0a:e4:ed:d6:fe:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BD:2D:9C:33:5B:68:13:C7:C4:09:C3:63:EF:54:C1:39:F9:2D:73
            X509v3 Authority Key Identifier:
                keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:72:39:6c:2a:d4:2a:70:4b:3d:58:ee:cb:bd:a3:f2:ff:70:
         ee:88:1f:84:ed:e4:84:fc:51:75:b8:d5:63:ff:3f:53:4f:d7:
         dd:c3:86:08:51:db:a3:de:8a:87:7f:c7:a7:9f:2a:3f:18:82:
         ed:bb:f5:fe:eb:de:b4:84:de:cf:88:fb:82:58:fb:bd:3e:74:
         9e:ff:64:cd:d2:29:8f:5b:cc:fa:ff:b1:b1:ea:08:e6:c6:6b:
         01:ba:d9:a6:e8:eb:4c:c7:9c:6b:3e:2e:b6:88:f4:2a:10:f4:
         2e:48:9a:00:f4:df:e8:ff:47:c8:71:33:80:3a:7a:88:3a:53:
         46:76:91:a0:38:51:4f:f7:e6:69:fc:69:49:15:18:16:04:36:
         e5:2c:17:bd:fa:f0:95:5c:27:8f:da:76:47:33:9e:43:56:11:
         8a:d0:6f:74:8b:dc:9a:b6:9d:12:68:e9:b2:d7:d8:22:3e:be:
         fd:9a:e3:1f:f6:26:ed:f6:2d:c7:73:83:11:e4:b5:f4:8c:2c:
         01:a9:e7:cd:95:8f:e0:99:d8:27:e9:fb:80:7a:40:c3:67:b1:
         71:6d:33:ed:d3:61:7c:2c:0f:a5:88:9c:8e:03:97:93:5a:15:
         b4:fc:f2:a7:c5:35:0d:cb:c9:29:27:67:7e:01:47:4a:03:aa:
         86:3f:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:50:28 2026 by rpki-client