Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File:                     QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier:          sCK1Z9I1XDsCKKLafV5sSfoLGAwk4+0bZti4CvAl6kY=
Subject key identifier:   50:C8:D1:56:BA:FE:79:F9:7F:A3:D6:29:E7:E9:B4:A1:9D:C4:BC:28
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer:       /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial:       01A0CB59E2693DDBBCDEBF3E58F723234F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number:          0BA5
Signing time:             Tue 22 Sep 2026 23:01:00 +0000
Manifest this update:     Tue 22 Sep 2026 23:01:00 +0000
Manifest next update:     Wed 23 Sep 2026 23:01:00 +0000
Files and hashes:         1: 65LDhkWiOsePvay_daaS19w9IrU.roa (hash: RDR1Bk3idKoyL2q+z5ptGPj51Bc2Dh1ei6t9SnrsQKk=)
                          2: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: wSFhbQ/ODD8fRihl2R5kpFXeu4odqZdr3xL6AX9bSTo=)
                          3: VwG9H-H3BKxa182EuYMKOfW-pDY.asa (hash: VucV4WG0cObsmaD2Gcwxp4U13EVpmlKVeoHtemnYiqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:e2:69:3d:db:bc:de:bf:3e:58:f7:23:23:4f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
        Validity
            Not Before: Sep 22 23:01:00 2026 GMT
            Not After : Sep 23 23:01:00 2026 GMT
        Subject: CN=50c8d156bafe79f97fa3d629e7e9b4a19dc4bc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:d0:c7:c9:37:da:be:43:03:6f:4d:5b:91:
                    3f:be:9e:23:9a:77:1e:14:ca:69:bb:ed:13:30:d5:
                    c3:33:c0:1e:e4:31:16:6d:10:fa:68:85:6e:22:42:
                    6a:49:ca:e3:2e:c0:b9:9c:a6:d1:22:13:05:1b:5e:
                    e5:5a:99:4a:af:9f:36:51:7e:70:a9:2b:4c:9f:46:
                    50:3e:fd:a8:41:c4:66:57:a3:7a:84:d0:f3:53:ba:
                    32:02:0c:31:c8:df:b2:1b:5a:20:d3:70:5a:e8:d8:
                    bd:6f:6c:8e:bc:ad:1a:07:f6:1e:ae:ca:8c:24:cc:
                    e0:aa:9b:3d:91:cf:81:e6:27:02:4b:34:49:69:ec:
                    31:af:65:f0:aa:29:e8:31:bf:1b:c7:62:34:34:0b:
                    24:96:b4:a2:cf:4d:38:7e:29:13:a3:e2:d7:a8:2c:
                    3a:b3:cf:d6:da:6b:f2:6a:53:af:2d:04:a1:bf:bc:
                    74:48:55:12:d2:24:b0:a3:46:27:64:f4:18:a1:4c:
                    11:d7:5b:2a:a3:7f:7b:2c:82:73:85:d2:28:78:b5:
                    e0:d4:c9:57:79:27:24:b2:fe:0a:16:71:bf:8d:fe:
                    51:5d:dd:6e:3b:ae:2f:b4:3f:ad:cc:3a:06:14:fe:
                    73:5f:f8:cc:ea:46:5c:b5:2d:b9:7f:ea:29:06:14:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C8:D1:56:BA:FE:79:F9:7F:A3:D6:29:E7:E9:B4:A1:9D:C4:BC:28
            X509v3 Authority Key Identifier:
                keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:ee:99:e1:13:45:76:03:98:2b:60:6a:2f:5a:2b:c6:34:
         36:da:55:fe:3c:a1:de:39:cd:a1:cd:f8:b5:d8:da:5f:89:b8:
         7d:83:88:ff:e4:93:94:f1:04:b3:6b:37:36:95:74:8a:3b:44:
         48:f0:63:76:27:ff:15:15:d4:0c:49:40:b9:c3:8f:7c:ef:e9:
         0f:06:08:32:8b:22:95:e8:9d:22:c2:22:00:4c:4c:67:d6:ee:
         55:4e:02:3e:74:20:fb:39:b7:19:a5:bb:58:3b:e7:4b:1c:12:
         7c:f7:03:08:9b:5f:2c:9b:ab:5a:e1:64:fc:ee:af:bd:69:09:
         0c:a4:30:d9:d5:92:2d:6c:30:ec:77:59:85:b0:31:3d:a7:22:
         05:22:2e:ac:2d:16:1f:d0:57:5c:72:eb:0f:f7:71:5b:99:41:
         4e:a4:03:ae:31:e7:81:95:75:c8:8c:94:02:2b:81:0a:ee:ca:
         d0:0c:0e:48:28:87:ea:5f:84:5b:22:a1:81:a6:fd:e4:13:8e:
         c7:69:95:e8:46:2b:0d:47:57:1c:fc:1c:4b:3e:1d:2c:9a:d8:
         d4:d1:44:f2:71:66:d8:eb:9d:12:64:8c:c5:19:1b:bd:9d:06:
         95:61:5f:5f:29:d4:01:27:4a:63:14:6f:2a:4c:44:1f:10:2d:
         16:96:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:26:59 2026 by rpki-client