Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft
File:                     QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft (raw, json)
Hash identifier:          2Kz+A9wN1SwKy1mUMFhiAm5lN7L3olZHDK++LBQi8NY=
Subject key identifier:   88:12:57:22:FB:DC:B7:13:C8:5D:7D:E8:15:4A:6F:FE:EB:34:05:B9
Authority key identifier: 41:79:69:83:93:D0:EB:0D:AF:69:FF:D9:7F:78:7D:7B:88:23:72:21
Certificate issuer:       /CN=4179698393d0eb0daf69ffd97f787d7b88237221
Certificate serial:       01A134EC13E903C673EB057CF52A686FF9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft
Manifest number:          62
Signing time:             Tue 13 Oct 2026 11:00:49 +0000
Manifest this update:     Tue 13 Oct 2026 11:00:49 +0000
Manifest next update:     Wed 14 Oct 2026 11:00:49 +0000
Files and hashes:         1: 0sKQ6lhJjOfA8m4MnsDvoZK8mfU.roa (hash: pRrSriyn66y2vAXuLnClWani4xncpO1hF4wIQyYy3So=)
                          2: QXlpg5PQ6w2vaf_Zf3h9e4gjciE.crl (hash: 7xrHdT1SUAnvMtQuEW8UVWMDYyQxJ0/nwsl8uM0mZLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:ec:13:e9:03:c6:73:eb:05:7c:f5:2a:68:6f:f9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4179698393d0eb0daf69ffd97f787d7b88237221
        Validity
            Not Before: Oct 13 11:00:49 2026 GMT
            Not After : Oct 14 11:00:49 2026 GMT
        Subject: CN=88125722fbdcb713c85d7de8154a6ffeeb3405b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:1c:ae:5e:f8:ad:43:e0:df:6e:89:79:6f:
                    f9:58:27:08:15:50:f0:79:24:de:27:ca:bd:c7:e2:
                    90:19:35:b9:46:75:64:57:a1:b0:44:bf:72:5d:08:
                    32:10:6f:8b:b2:ac:2f:32:ff:c4:f4:2e:e1:2f:e0:
                    41:2e:13:09:43:21:70:60:f0:2c:40:d8:30:2e:aa:
                    77:e2:06:01:5b:cf:30:ae:fc:b5:73:c6:0d:57:82:
                    d0:8f:05:7e:01:f4:66:65:07:6c:7f:ec:39:58:01:
                    1f:32:de:d4:03:32:35:a4:27:17:45:f2:bd:e2:13:
                    7c:f6:16:49:c4:20:73:fa:5d:17:1a:24:ee:a5:ea:
                    09:72:0b:42:7b:b2:5a:1c:cb:05:7f:46:84:d6:3d:
                    76:d5:09:e5:1e:f7:75:c1:49:66:8b:13:e0:c7:0a:
                    a1:03:43:69:12:01:5c:82:b0:37:85:26:62:b3:49:
                    59:c4:86:2c:df:62:8f:aa:b4:4e:fc:f5:6c:99:15:
                    cd:d0:f7:e3:e4:12:77:f2:e4:01:53:b7:ae:55:41:
                    16:de:20:1c:dc:dd:3c:ad:9b:f8:2d:9c:87:b9:a5:
                    66:77:d0:c3:d2:2e:20:0b:8f:f4:36:dd:67:8c:bb:
                    3c:42:c6:33:ce:21:c6:12:bb:5f:c6:94:4d:27:91:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:12:57:22:FB:DC:B7:13:C8:5D:7D:E8:15:4A:6F:FE:EB:34:05:B9
            X509v3 Authority Key Identifier:
                keyid:41:79:69:83:93:D0:EB:0D:AF:69:FF:D9:7F:78:7D:7B:88:23:72:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9e:b6:29:b2:c5:a3:da:2f:41:ff:97:de:4e:a9:d9:68:7a:
         77:13:d7:40:18:09:07:51:4c:da:9d:b9:2d:69:44:bc:16:78:
         76:a8:a8:d6:31:50:03:94:70:66:91:f3:bf:33:eb:bf:e9:b1:
         d0:e4:fa:9b:f8:09:47:a0:ed:9c:b9:76:4b:67:78:6c:ad:58:
         94:19:7b:b5:2c:cc:f3:2e:d2:1b:98:eb:84:66:65:59:87:29:
         f1:3f:1f:10:ad:b6:68:34:bb:38:47:98:fb:08:66:11:1a:92:
         be:7a:7d:2a:81:ba:4d:fb:00:ff:f4:38:e8:50:2b:5a:19:c6:
         14:f4:e6:3c:4a:f4:2e:fa:08:61:5b:d6:4c:de:e7:c5:b7:fc:
         85:c1:d1:74:fd:54:4d:b0:f3:4c:bb:93:15:da:28:4b:2b:0f:
         af:b0:04:c9:b4:6c:39:eb:3a:a7:97:fe:6b:0e:35:34:16:b6:
         71:e1:e5:09:52:89:86:c2:4b:3c:25:b1:bd:ca:e7:54:1f:46:
         04:c3:4d:11:75:57:8c:cf:f1:39:55:ce:38:d8:e8:6e:45:72:
         92:29:e3:7b:ae:c7:c6:eb:fb:1d:33:a8:0f:78:7c:7e:48:df:
         2b:73:0d:b8:85:69:35:a2:48:d6:3a:4c:51:65:32:73:eb:42:
         3e:31:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:24:12 2026 by rpki-client