Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File:                     QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier:          Bb0SSb4aKCfYJ3Al2QASEN/EC8SYNoAV+SRSBjwhlOY=
Subject key identifier:   F8:69:00:26:7A:92:4C:77:A4:B9:C9:D2:C5:8E:23:C7:35:A7:4A:05
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       01A0DBA9205D195BCBF5D3D117AE660F8DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number:          1AC2
Signing time:             Sat 26 Sep 2026 03:01:29 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:29 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:29 +0000
Files and hashes:         1: BYfDobbNo_m_w4crOMgDM9Ap1xU.roa (hash: dR/BNJMAt8zObcpN49bBOHDWT2wNzIa3cO7OLcillkk=)
                          2: EI7CwvWnDzGoyUcQkEgispb35mE.roa (hash: t9+WU2EdfrtjbLHdXRpNBIukhT3LimVMvmcXGL3pKdk=)
                          3: GjHI4b9XG_Gq98DG7Vz6sUZGE80.roa (hash: WTcq50V1CPKptotufjQn29Ul1Zr2FOf8snIYBs8IL7M=)
                          4: J858U9M3Pu6Cp06GzOrCZktlpEU.roa (hash: /2LUChah4azSZ6Ix+z1gFSt47yg5myoIj13SluIuDYE=)
                          5: Kxo0teOZwloERI7QoSNyGmfd6Lc.roa (hash: l3pXjBFAyH7G75ccUcJxbRG9IMuyFszbxgxuaSQ++ko=)
                          6: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: tTR1AEa8E+VJDz6KNKhw/zMFXyMgR+dxazg3phFksJs=)
                          7: rXqfIetgsCX6da85a5Ypi-UQARs.roa (hash: jGTVr1toyFJPTSXndwmIhoe5UMPGvADQzpGtWiQW+1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:20:5d:19:5b:cb:f5:d3:d1:17:ae:66:0f:8d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Sep 26 03:01:29 2026 GMT
            Not After : Sep 27 03:01:29 2026 GMT
        Subject: CN=f86900267a924c77a4b9c9d2c58e23c735a74a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:ea:2a:3a:7b:74:4e:8d:4c:ca:0c:39:c2:
                    df:36:d8:06:75:93:bd:67:b7:ec:58:eb:73:0a:90:
                    6a:52:58:45:5a:4c:02:6a:f5:1c:30:05:08:7c:83:
                    04:dc:b5:02:c7:a3:86:ff:5d:04:7c:14:2e:a9:5a:
                    d2:6e:c5:6f:91:47:9c:26:6b:07:21:2c:b9:41:a6:
                    aa:88:7a:66:7a:3a:e3:dc:93:13:17:72:41:0f:fd:
                    8d:e1:74:4a:ef:72:3c:c9:d7:f5:3f:53:57:00:67:
                    eb:82:b0:65:93:9f:c0:f1:51:15:8e:c9:75:11:6b:
                    b7:8c:b1:cd:79:92:56:c5:db:51:6f:37:4f:7d:ee:
                    48:fd:19:b6:5e:b1:74:c9:77:d9:d9:4e:49:17:1a:
                    fa:f3:7a:43:18:21:e2:01:37:16:ce:a8:5b:ec:b8:
                    f6:b4:a1:be:f5:48:04:88:34:48:df:e3:76:20:c5:
                    8b:65:93:ac:f2:9f:ca:e1:65:f9:5d:20:75:79:a4:
                    f5:57:c8:cb:b9:3e:ac:95:5f:3e:0c:77:7c:b2:76:
                    68:f6:ed:25:e8:98:5d:d1:17:20:d7:c8:73:ab:15:
                    be:75:bf:68:ad:b4:12:87:07:f5:12:59:cb:e1:d6:
                    89:b3:a7:d9:b7:c7:17:29:36:87:aa:05:b8:ad:13:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:69:00:26:7A:92:4C:77:A4:B9:C9:D2:C5:8E:23:C7:35:A7:4A:05
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c1:6f:c2:a6:88:71:67:12:b5:8e:5c:ff:ec:e3:f3:f5:7d:
         b2:4d:7b:8c:2e:a9:24:2e:00:d5:6b:3c:57:b4:bd:91:05:20:
         0a:38:22:e5:33:ee:1d:ac:8e:c0:70:f0:9f:88:d2:29:cf:f2:
         0a:06:c8:a0:5f:a7:f7:15:0d:c7:0e:fa:79:78:cc:aa:ea:ab:
         47:1a:b2:02:7b:18:b4:f8:53:b1:36:fb:77:4e:0d:f6:56:d6:
         10:62:0a:c0:99:eb:4e:a7:c0:7a:e1:c1:b1:22:18:36:81:36:
         c5:0f:81:0e:84:22:14:a9:75:5a:0b:56:97:06:ab:14:82:14:
         3f:fb:72:a4:1f:86:3d:38:ac:73:52:6b:b7:a9:c6:0c:2e:36:
         51:e8:9d:8a:f7:3e:20:f4:c1:d4:81:8f:7d:6e:0a:af:dd:3a:
         13:81:85:32:ef:9c:21:06:c9:2b:74:c0:8d:73:fc:6a:51:9e:
         d2:2b:a0:6c:d1:c7:ec:26:1f:cf:32:cc:90:c7:df:02:79:c4:
         0f:70:7c:05:f2:e7:68:af:22:fa:f4:47:aa:a6:da:7d:f5:13:
         24:bd:41:6a:d2:fb:34:61:fb:8b:8e:4d:06:de:c1:e3:b2:4e:
         56:d7:8a:d2:df:a4:65:c8:4b:b0:cb:d6:ce:31:a5:88:2b:24:
         35:b5:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:17:55 2026 by rpki-client