Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File:                     QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier:          QXzrjUhkjdQhTJKUuBHHdI+Zqa1U/VUrWAjcfoCbb04=
Subject key identifier:   A6:79:74:80:B6:2C:63:BF:49:5D:B2:D0:7A:9E:C9:B2:1E:B8:B0:5E
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer:       /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial:       01A0F8D7EC93E900B10E09562FAD846DAEDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number:          1AAB
Signing time:             Thu 01 Oct 2026 19:01:35 +0000
Manifest this update:     Thu 01 Oct 2026 19:01:35 +0000
Manifest next update:     Fri 02 Oct 2026 19:01:35 +0000
Files and hashes:         1: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: Pd8+24DRW5u6sRDtxctPEyTgZnZ4qtm7p9lxOkDYCoY=)
                          2: XHNmhL-H_lU_Ditj5DOPMU-kKtY.roa (hash: bFFOvpr+igb/YTpH0FjZlwOdqO2o/Bhf2p5JdiNxZ04=)
                          3: gRLPj-QZguZ09jmT3_4W7rktsIQ.asa (hash: s5g3qik4l7YdfpWjnJdY6kRR7Y327DcpVO692i5PIOY=)
                          4: hBmGlltLexkP8f3hX0SAgg3Hio0.roa (hash: qAvglYr6lut4x7tEHzSK5Gh8yQ5C9t3pg4zrjJgOyJA=)
                          5: hWXO8_2KJhAsuSjK53w4WoXZ5ho.roa (hash: BtDfipiMIpPGVjZXVualjLnDPbN3Q7CaWpDWgdXMT9s=)
                          6: yeCw9h3KZU-0UNnW2F5N-0Bvork.asa (hash: Tp3AmGDQGTccp0cBgUHV9KzZGjjd75GREPDRqmOx7a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f8:d7:ec:93:e9:00:b1:0e:09:56:2f:ad:84:6d:ae:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
        Validity
            Not Before: Oct  1 19:01:35 2026 GMT
            Not After : Oct  2 19:01:35 2026 GMT
        Subject: CN=a6797480b62c63bf495db2d07a9ec9b21eb8b05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:f0:b8:21:be:6e:f5:c4:b1:5d:f8:4c:0f:
                    6b:fa:f9:1e:b7:5b:68:fe:11:a6:fb:9f:bd:c6:70:
                    1a:0d:7b:38:06:41:7a:20:90:4b:88:68:c7:ac:45:
                    dc:e1:d3:8b:bc:e4:65:69:b9:67:83:6a:f7:7f:7c:
                    6a:77:c2:4b:bf:ac:46:02:10:e9:be:bb:dd:b1:ff:
                    c0:b0:c5:8c:2c:58:94:a9:f4:e0:66:6c:fb:ed:1f:
                    87:f0:99:7b:5f:38:1c:17:7e:32:ea:12:c6:b8:cf:
                    f6:5e:6a:80:a6:b1:2f:f7:fa:75:0a:9d:49:ff:a6:
                    43:e8:f9:18:56:f5:5b:a4:99:fb:fc:43:32:99:a9:
                    7c:86:14:87:3c:17:22:32:84:d4:1d:21:0c:29:56:
                    16:27:b1:7a:d8:cc:3d:13:2b:12:42:45:40:1e:8f:
                    91:39:91:a4:89:3f:5b:21:8d:64:eb:bd:7d:19:79:
                    9a:67:0d:6b:cd:01:f6:a6:32:6f:55:db:03:8e:72:
                    aa:49:3d:7f:7f:c9:9e:bb:1f:24:e6:b7:2b:93:ce:
                    9a:c4:ee:01:ec:08:10:29:9e:81:73:c0:6a:8f:a7:
                    8b:da:c6:75:08:3f:67:e2:8f:e5:6e:3b:a2:f4:85:
                    a9:bc:87:b2:c8:57:ee:ed:90:f9:12:be:f0:ed:1b:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:79:74:80:B6:2C:63:BF:49:5D:B2:D0:7A:9E:C9:B2:1E:B8:B0:5E
            X509v3 Authority Key Identifier:
                keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:41:01:93:19:95:03:00:dc:b6:af:e5:28:f6:2d:4b:5c:
         5b:b6:b3:41:12:0b:e3:3b:0c:35:33:ba:7b:3c:0f:2f:68:1e:
         f8:1f:79:9f:a7:28:a9:b4:72:b4:e9:1c:07:dd:b9:2c:eb:cf:
         62:60:30:df:97:f5:ec:45:d8:49:8c:22:bb:2d:4f:7f:54:03:
         a8:55:13:6c:ac:f4:1a:3a:36:36:8f:54:a6:9e:79:12:ed:98:
         5d:e9:36:b3:38:8a:39:4c:b5:17:4a:84:c4:89:cd:e3:df:86:
         9d:bb:4d:dc:6e:40:35:16:64:e2:45:19:d5:bc:6f:01:79:0c:
         f3:d9:5c:60:1f:c5:3d:d1:70:94:2d:32:3b:94:f1:d4:1d:ee:
         6a:07:02:2c:6f:de:36:80:63:70:60:9a:74:9d:8f:72:81:56:
         18:6f:c5:6f:1c:7f:2d:3a:bc:ac:14:29:45:da:61:2c:57:2a:
         f4:ab:c2:9f:28:76:d4:6f:cf:c1:db:24:c1:b1:28:9e:e7:1b:
         87:f7:62:41:a4:5b:fa:01:ec:47:9c:5c:1d:0d:67:1d:b8:75:
         b6:2e:82:cf:5d:7e:b7:f1:fc:3e:59:12:6a:b9:8a:4c:f1:e4:
         fc:53:a9:34:99:8b:ec:42:5c:9b:e8:34:47:9a:a8:5c:01:80:
         bd:48:9d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 00:56:59 2026 by rpki-client