Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File:                     QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier:          8tk5CPm9IhHIIPz0U5JXH6DFDBvdFGP3tqy4XagPbwc=
Subject key identifier:   8D:34:30:1B:D8:5A:E2:3C:C8:FA:67:87:D7:75:84:56:24:C3:4F:E3
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer:       /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial:       01A10091781D338EF54714402D2F529F4181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number:          1A84
Signing time:             Sat 03 Oct 2026 07:01:35 +0000
Manifest this update:     Sat 03 Oct 2026 07:01:35 +0000
Manifest next update:     Sun 04 Oct 2026 07:01:35 +0000
Files and hashes:         1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: tlUR8jK42DeJz+gCvx2IlGsoM5ZB7GDbu26f/ntFG10=)
                          2: ugMrWtr-AgbWpTxdCrlYjC4RyWA.roa (hash: 5ukMlR12Rye0g+suC8BFsAQhk/pWlg5h05IGSX13iYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:91:78:1d:33:8e:f5:47:14:40:2d:2f:52:9f:41:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
        Validity
            Not Before: Oct  3 07:01:35 2026 GMT
            Not After : Oct  4 07:01:35 2026 GMT
        Subject: CN=8d34301bd85ae23cc8fa6787d775845624c34fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:fd:ae:3c:2c:af:16:62:e9:dd:4c:0b:71:
                    f8:ff:a4:31:c9:68:4e:00:ad:81:ca:4b:12:74:2d:
                    7d:d2:79:4c:74:36:93:91:90:7e:f0:70:af:f6:de:
                    96:c4:4f:17:10:c7:02:55:79:2c:28:e0:ba:be:cb:
                    5e:8a:3b:eb:fb:67:20:6d:f0:ec:80:95:e3:0b:04:
                    f5:fe:51:87:b4:29:29:da:91:1d:5c:ee:3d:97:b1:
                    eb:aa:c0:ce:3c:4a:9e:54:a7:1d:6f:6e:c7:23:e6:
                    7e:d7:81:0c:36:02:d5:e3:77:bd:d1:f1:8d:7a:27:
                    93:6a:39:e0:5e:74:19:5f:b3:9b:34:87:77:15:c3:
                    51:31:25:1e:cd:8b:48:cf:75:b1:e8:7e:44:81:2a:
                    d1:18:1b:2e:ef:96:c2:83:31:f6:2d:8b:29:28:d6:
                    40:20:59:40:e3:d6:11:9b:09:a0:24:a2:f4:95:c5:
                    49:20:54:75:c9:e1:cd:23:ac:83:d9:76:05:33:a2:
                    c9:d1:6e:df:03:db:93:b9:11:50:cb:9b:db:bb:9d:
                    20:68:94:cd:15:d6:7c:76:27:3d:94:2e:d3:1b:39:
                    d2:2c:da:57:e6:5c:86:10:0f:1b:e1:c8:ae:94:61:
                    27:26:15:04:b2:46:9e:e5:1c:fb:c5:28:9b:fa:0a:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:30:1B:D8:5A:E2:3C:C8:FA:67:87:D7:75:84:56:24:C3:4F:E3
            X509v3 Authority Key Identifier:
                keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:18:8c:6d:06:79:e9:dc:0d:c8:02:ed:3c:e3:c3:61:c9:46:
         b2:9b:f5:af:e3:fa:74:7d:9f:ad:14:95:83:ff:87:37:22:e2:
         6e:36:19:10:6e:d5:02:96:04:e4:2b:a0:57:a3:88:bf:06:33:
         28:f9:0a:24:e9:40:39:36:14:2c:66:2d:df:a0:f9:17:11:fd:
         d9:a1:b9:66:04:c1:18:9f:fd:f0:fa:59:40:6b:67:10:87:20:
         02:32:7b:b9:22:3b:e8:15:a8:fb:40:e9:de:da:b1:39:69:22:
         9c:bb:20:82:88:58:56:f4:3b:67:3e:28:8f:29:0d:24:19:5d:
         e6:c5:72:08:ae:c9:23:d3:f6:bb:71:a3:46:6d:de:0d:9f:f2:
         7a:6f:4f:ff:c1:92:6f:81:d7:76:a2:86:5d:11:79:ca:7a:7f:
         70:28:fa:8e:13:bc:a3:24:11:e7:49:f4:a4:3d:92:84:f3:9c:
         31:c7:ef:50:a3:30:d4:ad:1c:d6:b7:6f:02:ec:ff:42:bf:c2:
         59:c5:bc:5a:83:7a:eb:c7:48:86:0d:12:19:82:fa:d0:73:08:
         88:e9:b2:cf:97:be:eb:09:8f:6c:91:8c:9c:bf:eb:c6:84:7a:
         d3:72:6e:21:5b:53:c1:60:39:20:fc:0d:e3:a5:40:3a:5f:b3:
         fb:71:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:50:49 2026 by rpki-client