Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File:                     QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier:          KAeQxPMI4uERGHXWnzExmcxsWoe3due14NwEPhdTd3Y=
Subject key identifier:   ED:2D:77:64:EA:3F:01:04:9C:71:7F:33:F1:4C:DA:EF:47:35:86:9A
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer:       /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial:       01A12B44BA1454D700DA0713227EE1895E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number:          170E
Signing time:             Sun 11 Oct 2026 14:01:26 +0000
Manifest this update:     Sun 11 Oct 2026 14:01:26 +0000
Manifest next update:     Mon 12 Oct 2026 14:01:26 +0000
Files and hashes:         1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: PZC7J3SH28Kgpj0QswHClgqWOrA7IcP8Apd2AaiCRvQ=)
                          2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
                          3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
                          4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
                          5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
                          6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
                          7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:ba:14:54:d7:00:da:07:13:22:7e:e1:89:5e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
        Validity
            Not Before: Oct 11 14:01:26 2026 GMT
            Not After : Oct 12 14:01:26 2026 GMT
        Subject: CN=ed2d7764ea3f01049c717f33f14cdaef4735869a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:07:a8:99:9d:df:b4:da:ce:5f:d9:93:b5:
                    34:23:7c:71:b3:88:f5:d7:6e:a3:a8:ea:78:20:62:
                    d9:f4:91:2d:3d:1d:36:d7:bc:9e:6a:aa:4e:8b:6a:
                    64:4c:d9:69:c3:5e:80:a7:f9:67:b0:28:4c:eb:60:
                    8f:5b:2d:bc:cc:94:56:52:5f:3a:bb:1f:e2:9b:29:
                    31:c2:43:32:84:5c:79:7d:8d:c2:68:ac:a6:cf:7c:
                    ab:55:68:0d:d4:4f:62:af:b0:aa:bd:5a:ea:89:81:
                    0f:36:26:a7:8e:8f:db:b0:7a:8a:c0:9c:bc:fc:12:
                    45:1f:f7:71:dc:be:59:8d:41:f1:f5:59:e2:5c:3f:
                    d1:dd:42:63:d1:98:7d:e4:f8:34:45:56:02:0e:9e:
                    34:c5:1a:ce:f8:4c:50:7c:c9:4e:01:16:50:d2:91:
                    b3:98:3a:03:8f:07:f1:8b:46:a3:6b:e0:b2:35:9e:
                    2d:1a:cc:32:13:ed:83:00:8d:0b:85:fe:60:d6:f9:
                    44:5a:e8:3c:c1:3e:ad:a7:17:aa:34:ad:16:a9:d6:
                    35:4e:c2:e2:00:80:61:64:cd:7b:01:c1:8d:2c:08:
                    d8:d6:36:1d:3d:48:64:da:ab:17:10:6f:8d:15:36:
                    23:ae:f3:7b:ab:cf:6f:cb:63:df:f8:fb:54:e3:1a:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2D:77:64:EA:3F:01:04:9C:71:7F:33:F1:4C:DA:EF:47:35:86:9A
            X509v3 Authority Key Identifier:
                keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:80:80:80:05:09:49:48:95:b7:35:b5:bf:15:15:3b:e6:64:
         e3:ea:c4:62:a1:46:cd:11:e9:09:a7:4f:d3:05:09:bc:91:b5:
         eb:b0:4d:95:2c:53:65:f3:e8:3b:c0:e1:68:1d:34:9c:ff:e8:
         58:7e:87:1b:bf:3e:90:67:ec:1d:a2:c8:36:9e:9b:53:be:46:
         7d:4b:06:a8:b3:8f:d6:7a:e5:6a:a8:92:68:36:14:80:f4:3d:
         85:dd:62:4b:c9:c4:57:5e:54:c4:22:be:74:e0:1e:49:b1:6b:
         05:fa:90:ba:b5:af:55:4b:30:39:3d:7f:15:bb:f5:1d:03:94:
         a9:55:62:92:28:7c:c4:10:c8:92:56:03:ce:11:1c:f2:d0:1f:
         16:ca:6b:62:b0:2c:a7:ef:a7:2f:29:2d:58:f1:1c:00:73:68:
         cf:69:39:5f:ed:f8:a3:0c:d5:20:db:a0:9f:60:39:3d:8a:38:
         c0:5c:88:af:e1:05:3d:73:36:84:a1:e7:c7:33:2d:b0:b4:e8:
         2e:77:b7:c9:ae:3a:10:5c:18:2b:82:74:3e:37:a5:76:d3:fc:
         01:32:b8:dd:e5:39:e4:10:e8:aa:5d:1f:11:67:aa:4f:9b:26:
         4e:62:bf:c1:b8:18:04:8e:6e:7d:e2:ea:58:19:b3:03:57:e6:
         b9:b6:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:29:06 2026 by rpki-client