Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
File:                     QhuumJiY2UAkJKra-7R8Om1MJbM.mft (raw, json)
Hash identifier:          EQ3YgcXYa88qtGNk/fblnLlATHHPw1T/J2LlnWRHBlU=
Subject key identifier:   A3:CB:1A:B1:FE:FF:38:38:2A:53:44:F4:D3:DC:EE:6F:94:C8:CD:DB
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Certificate issuer:       /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial:       01A0D6F12397E0708E5E8158DBC076883AEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
Manifest number:          1A7C
Signing time:             Fri 25 Sep 2026 05:02:02 +0000
Manifest this update:     Fri 25 Sep 2026 05:02:02 +0000
Manifest next update:     Sat 26 Sep 2026 05:02:02 +0000
Files and hashes:         1: NJO_Y8Rmad7gmCoQl4EFdeb0puI.roa (hash: PeV4K+XBlCAlY87jlA0oZLozJmq4/8N/ed2usUmq5JY=)
                          2: NOncOo0ID7OFhBxkxahXCWMkSks.roa (hash: eW58ef5cup8x8SSubU4LarAJsD4cHKXH22VsKckNWME=)
                          3: QhuumJiY2UAkJKra-7R8Om1MJbM.crl (hash: Q4p35YbKOJZpD9DXG/mfhhA3uQfoLv9kfRBhKnIp0io=)
                          4: eaOjyMxTzYhh_bIW9oREZcAo448.asa (hash: HbYO8CvxsSV9fRtPHpySseux+cYBfxgm0JLgC9+sH74=)
                          5: rNA54cjskPX4lQNjfLFcvXVm1ps.roa (hash: 25Bd9sAqIVmNUoNvrSpnzoBxZmHIxEPQvqsKC2Kc+TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 05:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f1:23:97:e0:70:8e:5e:81:58:db:c0:76:88:3a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
        Validity
            Not Before: Sep 25 05:02:02 2026 GMT
            Not After : Sep 26 05:02:02 2026 GMT
        Subject: CN=a3cb1ab1feff38382a5344f4d3dcee6f94c8cddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:0a:f7:13:b8:f5:89:f1:b1:23:32:47:6c:
                    fe:41:67:a6:0d:d8:14:75:52:e3:b4:34:15:9b:11:
                    60:5d:f7:f3:6b:e7:57:45:e9:ec:48:5f:eb:d2:b1:
                    e2:58:59:20:35:6c:38:6d:c4:3d:8b:0a:ff:e4:ae:
                    f9:fd:67:b7:5d:35:29:97:7e:33:2d:23:da:3a:c0:
                    d4:d1:7a:13:f7:15:6f:0e:0e:b1:a6:39:95:de:e1:
                    ea:72:3d:b3:ad:ee:97:ae:4b:1e:b5:ab:1d:f4:85:
                    a0:bb:0f:b8:17:bf:9a:2e:7f:01:b0:07:72:ae:b6:
                    da:43:60:b8:73:c2:9d:e1:19:74:ad:de:96:22:bb:
                    1f:43:98:20:9d:10:fc:4c:0f:45:25:d0:8c:cf:74:
                    94:17:3c:a0:a0:1f:d5:eb:27:18:92:58:4a:48:cc:
                    bc:92:b3:5a:c5:fd:14:50:0c:69:dc:fe:ad:b7:e0:
                    e8:46:5c:41:1b:7f:08:2e:14:77:b4:ed:a5:89:c4:
                    a8:49:9b:c6:3c:d7:5b:b8:91:83:3b:89:23:21:8f:
                    7a:0f:1f:43:ab:23:da:f3:da:f1:55:93:16:a0:76:
                    57:ec:0c:31:5a:bc:c2:18:53:16:3f:78:1b:01:e0:
                    37:f9:81:b4:b2:60:d2:7e:7d:6b:ef:c2:da:51:bf:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CB:1A:B1:FE:FF:38:38:2A:53:44:F4:D3:DC:EE:6F:94:C8:CD:DB
            X509v3 Authority Key Identifier:
                keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e4:4e:84:56:f3:10:aa:4a:7a:b5:dc:a2:17:5b:df:a3:7b:
         e9:b0:35:13:99:9f:88:54:cb:31:6e:a8:60:7d:18:f8:32:e7:
         0a:54:9e:34:4b:28:e9:a1:1d:61:df:96:b0:fb:a8:65:4a:34:
         1b:74:d5:b3:43:d7:ef:a8:6b:94:03:7e:1a:6a:a8:d7:db:e8:
         8b:29:c2:f5:67:8c:a5:82:c8:ee:96:f6:ae:f3:5d:f8:04:fa:
         78:1e:ce:17:43:1c:c3:6a:a0:f4:2b:2b:a0:cf:db:69:bc:27:
         f7:7e:04:39:c5:6e:b5:11:05:a3:ae:91:bc:00:3b:a9:92:ab:
         21:a5:73:e6:2b:5f:6a:6e:8e:ce:2b:3f:8b:45:ff:01:a1:70:
         bf:28:aa:36:89:3c:3e:15:89:ed:25:5a:7c:e1:52:55:1c:e2:
         be:fd:c8:e3:88:2d:28:f6:66:54:cf:de:93:ea:05:a5:66:27:
         7b:6f:e2:51:c1:19:5d:b5:95:97:68:e6:00:37:b6:0d:74:db:
         25:c9:94:26:68:4e:bd:d8:b0:73:a7:80:6d:24:59:24:aa:9f:
         c4:21:98:e8:30:c9:f0:af:fb:0a:cb:58:a2:41:57:93:d2:c6:
         15:9b:79:58:71:15:0a:04:22:5d:01:af:56:6c:5f:34:30:88:
         23:fe:28:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:12:32 2026 by rpki-client