Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File:                     QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier:          rqU9QaSFdDV5f89T00+2eZAuHCEgRCaa13PVEuUtfEY=
Subject key identifier:   84:4A:3D:D1:E8:3A:1F:E7:7E:59:65:05:7B:5A:6B:79:C7:65:CC:A2
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer:       /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial:       01A0E92D7CB2A5F35E79F35F0E9888E97583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number:          084A
Signing time:             Mon 28 Sep 2026 18:01:07 +0000
Manifest this update:     Mon 28 Sep 2026 18:01:07 +0000
Manifest next update:     Tue 29 Sep 2026 18:01:07 +0000
Files and hashes:         1: 19x4kb04Y7lkLKvWJFOKELqw1Xg.roa (hash: Vy1XCfN6ZIucvkieeZycIXSoBeKFfbKJvllTGh4DEl8=)
                          2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: PYKcCuci6Pg3zGvtP3m9tiuKumBpZjD0gC4FuFct03M=)
                          3: odNrW4lU42BAvPE84otnwCnAcjo.roa (hash: F1kft2u6AJ9vT8iumt/E/kv8R0gxEkszQiPaKkBRYw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:2d:7c:b2:a5:f3:5e:79:f3:5f:0e:98:88:e9:75:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
        Validity
            Not Before: Sep 28 18:01:07 2026 GMT
            Not After : Sep 29 18:01:07 2026 GMT
        Subject: CN=844a3dd1e83a1fe77e5965057b5a6b79c765cca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:0c:da:68:8e:ea:7d:6c:0a:e6:67:51:08:
                    43:c7:54:6a:60:e7:5b:7a:5c:99:1d:8b:5d:97:aa:
                    e5:ef:11:b5:fb:58:77:49:eb:64:cd:6f:8e:0c:83:
                    56:c7:10:c9:1d:d5:84:76:44:4f:c9:60:f0:be:50:
                    7a:cd:7f:a4:58:4f:bb:c1:e9:30:c6:77:32:c7:32:
                    40:d7:00:85:93:45:ec:0d:91:57:23:cc:f7:23:88:
                    aa:8f:f5:89:f9:a4:6d:6f:71:4a:96:e2:6a:ac:24:
                    8e:bd:86:31:79:cc:1f:b0:af:3f:74:8b:17:b7:f6:
                    29:2b:36:48:70:61:3f:33:86:e6:16:dc:8e:e6:c9:
                    04:53:92:db:20:b4:4d:70:b8:be:7f:52:13:59:fc:
                    82:e7:40:38:b2:e7:de:50:9b:63:ac:2e:d9:c2:61:
                    cc:a3:a5:51:a2:76:87:6d:ac:8f:e5:c4:b0:70:4d:
                    7d:c1:d6:20:4a:ba:3c:18:09:2b:c4:6d:59:b7:90:
                    1c:b7:50:9d:9e:65:38:05:7b:50:d9:41:09:49:91:
                    66:aa:ee:d5:0c:be:ee:b0:d3:0f:bd:e6:4d:5b:35:
                    3d:2c:1a:29:3a:00:c0:a0:61:6b:e9:3f:23:0e:f6:
                    e3:43:b0:48:07:8f:7d:57:4f:73:c3:5a:f6:9f:6d:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4A:3D:D1:E8:3A:1F:E7:7E:59:65:05:7B:5A:6B:79:C7:65:CC:A2
            X509v3 Authority Key Identifier:
                keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9c:d3:97:94:b3:6f:a6:75:97:5f:3c:98:f4:75:37:c5:5f:
         6b:6f:7e:f1:67:11:58:85:f6:1e:55:d9:8b:52:12:ee:2d:ad:
         6e:c3:81:07:27:51:89:31:f3:8f:8b:14:76:74:65:df:24:ca:
         32:15:1e:04:65:64:56:36:c6:f5:16:1b:41:3f:d6:0f:c1:2c:
         5b:0d:71:c3:da:9c:4a:0a:32:6d:94:87:6b:0d:94:cd:7f:11:
         69:fd:ed:d2:f9:10:d7:f8:30:62:91:21:00:ba:bb:5b:ed:9b:
         a8:35:fb:cc:01:14:79:c6:df:28:25:db:fc:44:f5:42:ba:83:
         3c:eb:48:e1:9d:26:c4:3b:66:cc:11:98:41:9c:3a:32:a6:0f:
         d5:8b:59:85:9f:06:0b:91:7f:16:01:78:0e:f7:6f:29:d4:0d:
         9d:cc:63:a2:99:fd:dc:29:42:9c:b3:7c:97:ff:f5:46:2c:92:
         f1:2c:1a:ac:48:5d:1f:0e:f1:c8:09:64:b2:99:50:29:93:29:
         52:80:54:57:1c:d4:c0:f3:22:47:96:1c:6a:49:77:2c:d5:48:
         5e:99:07:54:d1:2c:5b:e3:2f:23:52:68:25:28:9d:73:5d:2a:
         3a:04:81:f0:11:54:cc:84:27:bb:99:96:ca:54:f5:7c:ca:4f:
         fa:ef:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:50:43 2026 by rpki-client