Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File:                     QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier:          GasSF7YbYwDe33t9gxROXFAxHEF6LBkg9XfcKC1ibvU=
Subject key identifier:   1B:70:37:A4:A1:26:49:D4:4E:ED:94:C1:F1:CC:84:67:84:AA:55:F5
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer:       /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial:       01A0DCBBCAA1FB0A5A1EACB0F6032183C876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number:          0FCF
Signing time:             Sat 26 Sep 2026 08:01:29 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:29 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:29 +0000
Files and hashes:         1: 4-pw4uLEo4VnWcR86rkNPjJNRVs.roa (hash: WG5Ck6gXAP87uE0pDUMDgFNMmC5kc/oQd4zsYjgc8g8=)
                          2: LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa (hash: 3JzQl1ZmDDQ+FM0DDHENCmm9FT3/85lOBaUMGb8N8SM=)
                          3: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: kkzz0xNZ9KSqaJ/KFrfntxU2sPWAF2UoAKDHsABRutw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 08:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bb:ca:a1:fb:0a:5a:1e:ac:b0:f6:03:21:83:c8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
        Validity
            Not Before: Sep 26 08:01:29 2026 GMT
            Not After : Sep 27 08:01:29 2026 GMT
        Subject: CN=1b7037a4a12649d44eed94c1f1cc846784aa55f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7a:f0:d8:e3:4d:33:dd:c2:9c:c7:04:86:0a:
                    0f:5a:5c:c2:5f:4a:b6:f1:9f:be:3c:83:53:9a:c8:
                    fd:3b:3b:75:cb:c2:aa:38:4f:83:37:85:50:62:33:
                    4c:63:91:11:47:d4:bd:25:b6:94:a1:be:d0:14:8a:
                    b5:04:d9:16:ee:e7:98:67:9e:ee:30:d4:01:fa:8c:
                    eb:c9:5d:31:c9:4a:22:dd:27:fd:c5:b3:7f:50:b6:
                    33:c1:2f:a6:60:7d:1e:be:f8:0f:a0:c9:b6:a7:1b:
                    c4:91:9f:ce:d4:97:21:76:37:46:f5:81:f0:af:45:
                    e7:1a:3d:d2:8c:2a:e2:69:ff:c5:5d:1c:ab:0d:07:
                    fb:ac:88:8a:49:f6:25:64:22:0d:62:16:a3:02:af:
                    7c:00:77:4a:8c:2e:fc:97:69:91:53:2d:b8:54:3e:
                    83:87:a9:c9:84:60:d9:44:4e:59:13:42:bb:a2:44:
                    1f:34:05:fd:77:31:e0:b4:7a:ce:ee:b9:2e:f9:24:
                    4c:3b:ee:37:f1:0b:9c:56:bb:b6:c2:17:3e:d4:e3:
                    39:74:4f:f7:7d:bb:bc:0c:3b:b3:1f:83:8d:a1:59:
                    03:3a:e7:c5:0c:f4:b5:b6:9c:19:1c:4e:b9:dd:a2:
                    37:e4:8a:05:4a:b4:8f:39:d6:30:5b:7b:29:b5:f8:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:70:37:A4:A1:26:49:D4:4E:ED:94:C1:F1:CC:84:67:84:AA:55:F5
            X509v3 Authority Key Identifier:
                keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f3:10:61:a8:22:2c:7c:eb:20:d2:d1:fd:48:b3:50:86:9a:
         bc:c4:43:ed:86:4d:fe:e2:c7:ab:30:02:dd:23:b0:6b:b6:93:
         8d:aa:48:66:1c:39:e7:60:fd:d5:34:22:39:c0:af:6b:75:36:
         41:00:ea:9e:e7:8e:dc:17:e0:dc:ce:5b:fb:15:63:26:0f:5f:
         38:b4:5a:2f:3c:f9:d8:d5:c6:35:e3:be:be:40:0f:ad:23:f9:
         68:05:56:48:dd:eb:1a:0c:67:b5:dc:07:a1:7b:f4:7b:48:66:
         e1:02:a4:98:65:a7:e6:19:e5:84:63:02:30:93:0f:c5:34:74:
         0c:03:be:a7:c1:12:2c:b1:5a:56:98:d2:9f:17:b1:b9:ae:99:
         d6:c6:98:97:51:01:33:85:ff:7f:4d:71:13:a1:96:b5:7b:09:
         f1:b5:f8:fa:ed:06:85:9c:d5:2a:ea:e4:bc:cb:db:17:a0:a4:
         b5:b5:7d:5b:e2:c1:4f:0f:b7:84:be:9d:0d:d0:d2:7f:57:00:
         1e:fd:1d:d1:89:cc:fc:f6:7e:93:1c:f5:60:2b:92:a9:e2:c1:
         58:5b:67:60:53:2c:bc:ad:b3:f2:54:d4:10:70:de:04:11:fb:
         a0:cf:76:c4:50:75:68:74:a9:27:ce:6f:14:98:7e:7d:7b:75:
         0f:be:99:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:42:26 2026 by rpki-client