Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File:                     QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier:          BkxEYava2JomAGSWrbn2v2137dPvP6ePUFODuKAFCcM=
Subject key identifier:   D8:68:65:DE:57:27:38:84:9F:A8:DB:DF:B7:51:90:62:CA:01:00:AD
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer:       /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial:       01A0CC6C638F17B6E0F07A9D45B1EB1A1D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number:          0FC7
Signing time:             Wed 23 Sep 2026 04:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 04:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 04:00:50 +0000
Files and hashes:         1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
                          2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: 9aQcYp+ySFubg9keCeXZt9Gv+xoEdaYCO48bNfkpoek=)
                          3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
                          4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:6c:63:8f:17:b6:e0:f0:7a:9d:45:b1:eb:1a:1d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
        Validity
            Not Before: Sep 23 04:00:50 2026 GMT
            Not After : Sep 24 04:00:50 2026 GMT
        Subject: CN=d86865de572738849fa8dbdfb7519062ca0100ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:18:6c:8f:da:e9:22:aa:e8:79:6f:1c:79:
                    56:fa:fc:0d:1d:06:0b:93:90:fd:26:12:c5:f8:28:
                    93:16:2f:43:91:36:56:1a:a9:17:1d:d6:76:c5:00:
                    b1:47:5f:31:27:b7:13:58:4f:b3:98:a3:63:54:ff:
                    d2:7b:1f:52:a5:0c:f7:78:d9:62:b3:c2:e5:b6:03:
                    cf:5b:14:62:7c:b4:b5:c1:aa:e7:a7:4d:a8:3f:92:
                    f1:6a:b5:de:21:cb:c4:15:2a:8a:e2:a9:eb:d5:08:
                    7e:7d:89:9b:c6:0a:12:6b:aa:2d:03:a7:0b:30:fc:
                    b0:d1:61:29:69:0a:ac:d4:84:c5:34:78:bd:ca:58:
                    7f:9d:fa:d4:61:e2:1d:09:ec:b1:1b:f9:d3:bf:71:
                    c5:6a:fe:af:46:05:fe:ab:de:73:5f:ef:6f:76:a8:
                    18:8c:f7:85:49:ad:f4:ac:58:72:78:85:d8:30:07:
                    cd:3b:50:e3:dd:85:9d:32:49:e8:20:de:b5:c9:03:
                    8e:81:89:bf:d5:4b:b0:02:62:ee:4d:2a:d9:c0:57:
                    0e:be:37:ba:f1:ea:45:ab:1a:53:27:4c:f2:53:07:
                    c1:89:be:fc:1e:32:8f:42:a1:d3:93:eb:d3:27:d4:
                    fa:08:0f:dc:0a:d9:87:79:79:58:59:c6:c7:24:79:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:68:65:DE:57:27:38:84:9F:A8:DB:DF:B7:51:90:62:CA:01:00:AD
            X509v3 Authority Key Identifier:
                keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5d:e0:f1:51:39:74:c4:0f:c4:70:53:75:44:d8:01:33:bd:
         16:11:c6:b5:fe:19:f6:b2:4b:ac:33:29:25:86:49:55:e6:99:
         01:21:71:25:a8:27:89:fc:8e:91:13:ec:4b:44:3f:4a:3c:2b:
         10:9b:b7:78:9a:48:68:25:9c:dc:0d:5b:5d:18:f3:4b:10:2c:
         53:54:15:9d:a1:ef:71:86:2f:9f:d5:8d:e6:74:78:c0:b8:a6:
         dc:30:93:71:11:9a:b3:6c:bf:de:a9:f0:d6:99:d8:cd:cc:3a:
         33:3c:be:38:1c:9b:bd:a0:5a:8b:ab:be:8e:02:fd:81:b3:91:
         16:0f:70:95:78:3b:5a:7d:a2:2a:d2:54:f4:79:d8:37:de:18:
         1e:03:b5:f4:1e:5e:14:6f:49:59:6d:21:e1:cd:bc:a9:e9:cb:
         fc:64:c7:d0:d5:27:5a:6d:4b:3b:a3:87:bb:05:53:08:99:a8:
         8c:ca:07:77:e2:62:9d:21:2a:2e:c4:2e:60:7c:a1:26:f3:22:
         86:09:e1:ca:95:de:fe:d2:74:5b:20:68:36:46:6c:f6:6c:65:
         cb:f4:67:95:34:e8:bc:d1:f2:92:fe:8f:37:62:2c:c1:71:3e:
         80:c0:f3:4f:4d:37:47:10:3d:57:b9:bf:85:b1:3e:a3:6d:ca:
         38:e7:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:15:47 2026 by rpki-client