Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File:                     QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier:          W+2vL+4QLoTnMpVr6L7DBTDPdpAU0KrZqb7BNOzfofE=
Subject key identifier:   F0:9B:AA:74:8D:47:E2:58:58:F6:93:EB:F7:4B:E6:6F:B3:B9:CA:81
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer:       /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial:       01A0C8C62512E0F5CC68B19756DFA1DD5025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number:          16B7
Signing time:             Tue 22 Sep 2026 11:00:23 +0000
Manifest this update:     Tue 22 Sep 2026 11:00:23 +0000
Manifest next update:     Wed 23 Sep 2026 11:00:23 +0000
Files and hashes:         1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: qOXa545Y6Bi3CWrP9fUt8zBMq0FDoSrVFQoUthPeGP4=)
                          2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:25:12:e0:f5:cc:68:b1:97:56:df:a1:dd:50:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
        Validity
            Not Before: Sep 22 11:00:23 2026 GMT
            Not After : Sep 23 11:00:23 2026 GMT
        Subject: CN=f09baa748d47e25858f693ebf74be66fb3b9ca81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:7e:60:a5:7e:b1:b9:b2:0c:1f:d4:e1:53:
                    b4:3a:94:75:e9:70:04:98:09:cc:84:3e:1a:0b:a3:
                    ca:a3:0a:95:0d:5b:49:56:8e:06:d8:4b:ea:59:16:
                    b2:c3:d4:ad:8d:2c:1a:73:39:40:7f:60:dd:ba:1a:
                    33:2d:7f:36:8e:fe:20:7e:2f:dd:00:b4:e1:82:ed:
                    8a:e3:b6:e3:b2:56:60:ce:29:86:7e:ab:04:e8:2f:
                    d0:37:3c:bd:11:32:e1:19:92:04:2d:5e:3c:cf:97:
                    9a:56:a4:a8:0a:be:83:6e:5c:67:6a:a3:b2:4f:35:
                    ef:26:0a:d6:11:ea:94:83:00:f9:eb:16:79:f1:0b:
                    18:66:9d:19:cf:6e:30:15:72:d5:21:da:c9:2b:54:
                    38:2b:11:bf:23:b3:ca:6a:99:6b:ff:5a:bb:03:48:
                    38:6b:7d:38:36:29:c0:16:5c:e9:58:70:b2:cb:6d:
                    2b:c0:62:72:5c:64:c3:71:a9:78:62:08:be:9f:72:
                    eb:22:fe:e3:34:05:1a:9d:67:55:ba:56:e9:b6:be:
                    9a:73:3a:c5:c3:8a:e6:30:45:f9:bc:df:7d:b1:a6:
                    6a:f2:ce:b8:98:db:f5:54:58:f7:bc:5c:9a:4e:8d:
                    ca:a4:3c:a7:23:58:4f:a0:d7:cb:ff:55:3b:96:71:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9B:AA:74:8D:47:E2:58:58:F6:93:EB:F7:4B:E6:6F:B3:B9:CA:81
            X509v3 Authority Key Identifier:
                keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:39:28:4c:b7:2a:b7:76:f5:20:99:18:83:0e:a6:17:bd:
         6c:95:fc:67:35:d4:79:39:2f:96:4a:df:88:05:9b:12:01:40:
         4e:0d:7c:03:5c:50:70:16:bd:c6:de:2b:6e:23:52:08:0d:e7:
         6a:8f:8f:ee:46:66:ce:3a:71:41:77:fe:9b:a7:94:61:35:b5:
         45:52:67:84:b5:f1:04:f4:bf:d6:4c:b3:71:b8:6a:0b:75:b0:
         83:d4:e5:e7:e5:d4:9e:b9:b8:96:87:a9:5d:26:b7:ef:f0:80:
         1c:70:be:a5:95:9a:c2:fb:3d:51:77:45:5e:06:a3:ca:b9:fe:
         fb:5d:53:b7:f4:df:52:bf:1f:a7:00:f1:5a:27:84:46:85:31:
         01:94:8b:19:8d:bc:b0:c0:24:0a:e5:62:3c:72:31:2e:6d:80:
         d5:d6:59:be:79:88:4a:8c:33:e6:f9:05:75:ba:a7:bd:19:e3:
         3c:b3:3c:1c:0b:8e:d0:90:a3:b2:3a:0e:6e:16:c5:61:fc:f5:
         ae:12:0e:a7:41:f9:9b:c7:5d:e1:44:63:9d:8e:90:90:27:66:
         46:56:94:bf:02:d1:01:dd:fe:3c:9a:e8:5d:0a:a3:b0:68:77:
         27:aa:6f:1e:6a:58:43:3f:e3:5c:57:71:35:1d:ae:bf:99:f7:
         9f:e6:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:38:09 2026 by rpki-client