Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File:                     QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier:          z2AcYL68Oh9wHDyci5a67Kek+TV5dfjsKDsvJ43stTc=
Subject key identifier:   01:BB:FC:B7:D1:02:AF:33:76:E2:03:DD:F9:C6:55:92:EF:6D:D6:82
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer:       /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial:       01A0C77D1C2567F1BF5D583B304C4D3AD901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number:          1A6E
Signing time:             Tue 22 Sep 2026 05:01:00 +0000
Manifest this update:     Tue 22 Sep 2026 05:01:00 +0000
Manifest next update:     Wed 23 Sep 2026 05:01:00 +0000
Files and hashes:         1: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (hash: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw=)
                          2: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (hash: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU=)
                          3: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (hash: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA=)
                          4: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: m803fKbvP3FQFCMpVaOj5ZZkiiP/AwSo0L8lOSxPcYo=)
                          5: zdUU6xh-U_UhQuIpzwDv3G1TgNc.roa (hash: Xcmlw4uYbZey4RR44rfO/TAhXzqgGs0gxnMsef5qoaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7d:1c:25:67:f1:bf:5d:58:3b:30:4c:4d:3a:d9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
        Validity
            Not Before: Sep 22 05:01:00 2026 GMT
            Not After : Sep 23 05:01:00 2026 GMT
        Subject: CN=01bbfcb7d102af3376e203ddf9c65592ef6dd682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:d8:98:be:de:46:d2:a8:8b:e7:3a:90:3d:
                    4a:ec:35:d0:60:5a:44:bb:9d:97:0d:8d:60:e8:c7:
                    e0:43:9e:cb:a2:9b:95:53:d0:fb:c2:2e:bd:cb:f6:
                    cb:ee:34:69:c6:d7:85:78:ea:f7:01:23:39:83:9c:
                    95:a5:3b:4f:4f:de:3b:71:2c:19:f4:dc:d2:15:25:
                    d6:f3:e4:94:90:f2:db:60:dc:97:38:d8:84:56:58:
                    f6:93:62:a2:c7:4a:c5:1c:29:84:fa:f9:74:9f:1b:
                    2d:40:76:f4:61:1a:0f:a6:d6:aa:30:b3:25:cc:2c:
                    9b:b1:86:66:9a:e9:89:0a:85:4e:78:8a:b3:ec:a7:
                    17:37:8c:7c:18:24:cd:46:a3:fb:2e:06:d2:40:fa:
                    85:5f:6a:05:6c:c4:e1:3d:fa:5f:dd:27:e2:07:d7:
                    ca:41:0c:83:96:59:60:f5:2f:20:c5:48:e5:e3:d2:
                    29:6e:c4:47:7b:48:8e:bb:32:26:df:a9:de:c8:60:
                    44:6a:c7:2c:af:80:b7:55:b8:a7:fa:79:69:4e:e2:
                    b9:a0:d6:a1:40:cb:83:db:50:43:a2:c7:a1:e9:5f:
                    66:2d:6b:80:a6:87:ab:19:95:44:f6:f4:a7:d4:f4:
                    32:d9:19:11:48:0e:c0:5b:db:a9:7e:0d:a6:f7:6a:
                    5e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:FC:B7:D1:02:AF:33:76:E2:03:DD:F9:C6:55:92:EF:6D:D6:82
            X509v3 Authority Key Identifier:
                keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:73:81:fe:a2:1a:ff:7e:da:72:dd:e3:d4:fe:84:27:9e:
         14:68:6d:93:a8:b4:6a:24:e0:37:3e:6d:35:16:67:84:f1:42:
         6a:2b:9d:5e:b2:37:48:e6:3c:5b:82:a1:ff:9e:15:e3:4e:54:
         ea:bd:76:65:93:95:c9:82:00:24:e1:56:16:10:dd:43:23:39:
         76:e8:b6:68:e6:95:61:08:cd:c6:59:65:cd:0a:1b:85:5f:ea:
         58:f5:2f:ff:7c:fb:5f:4f:50:b7:7b:a1:35:09:a9:a1:76:8a:
         d6:60:16:fd:36:3a:df:74:b6:3c:f9:b9:be:27:b0:e4:7f:13:
         35:ea:a1:2e:d7:73:be:cb:9e:90:33:12:08:b2:91:e3:22:93:
         7c:47:74:72:04:51:c1:5e:5c:08:55:84:48:8d:6d:92:bd:e6:
         4a:af:55:4d:d7:9c:f2:37:42:a9:c3:ff:25:bf:6f:6d:fd:dd:
         fb:c6:22:7a:1a:55:ef:53:2b:a9:8f:f0:2b:4a:ae:a4:b0:2a:
         4e:fa:1c:87:b7:d3:40:de:c0:96:13:cf:b3:ec:99:1d:bb:0a:
         91:e5:a4:8f:de:e8:99:bc:98:ba:1f:76:76:86:40:91:68:21:
         96:5a:df:d2:f9:ce:d5:2c:a3:04:87:f5:fb:af:a2:0d:a7:87:
         71:b5:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:20:10 2026 by rpki-client