Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
File:                     QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft (raw, json)
Hash identifier:          6UfsVaBVqYTyZRovbf2ycXmxBs05OJRVtb6N6a7kDik=
Subject key identifier:   F7:C2:CB:98:DF:14:07:17:2D:68:BA:28:55:69:90:EC:C4:0C:15:1B
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Certificate issuer:       /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial:       01A0C21F51125CFD64A42D5FE0AB9B0DA9C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
Manifest number:          E2
Signing time:             Mon 21 Sep 2026 04:00:27 +0000
Manifest this update:     Mon 21 Sep 2026 04:00:27 +0000
Manifest next update:     Tue 22 Sep 2026 04:00:27 +0000
Files and hashes:         1: 6hHyJvgfZ7hI-rvTQg30OP8uZOk.roa (hash: tb5yoL6DHfMFy0H1u/TLI8OpyyFIEJ1vLTzwk81h5qY=)
                          2: 9z84m-kebT8cdB-4tut3KLWmbhQ.roa (hash: tJspMU+tMRDYHrt52hzcYgBJTQsCCMP09cWPHPzuZFA=)
                          3: QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl (hash: E5Ste8Uwh75vc52FdEFNFWNLh4YH/wm6tc6nVWAPiQk=)
                          4: UyuDpsThd0HTxIHLtl_AcLRLcgU.roa (hash: cR9/I8Oh8wt0pXLSLn6pWKFwtuW+7P/mjqHujGnIbq8=)
                          5: tgvXIki0g-pfbDcyTN4Jty571wU.roa (hash: aBHUTes6NUct+J0pVH5+kLoc6/IlFtoI9S3mihoYFaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:1f:51:12:5c:fd:64:a4:2d:5f:e0:ab:9b:0d:a9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
        Validity
            Not Before: Sep 21 04:00:27 2026 GMT
            Not After : Sep 22 04:00:27 2026 GMT
        Subject: CN=f7c2cb98df1407172d68ba28556990ecc40c151b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:3f:78:c2:3d:b6:d5:1e:c3:e4:42:76:c6:
                    fa:7c:75:5f:1e:ed:92:61:89:9d:51:51:f7:f7:aa:
                    81:5a:07:5a:56:a2:b3:69:06:10:37:f3:a9:5a:61:
                    db:7b:39:02:91:8b:0f:81:6e:30:27:eb:fa:43:de:
                    41:b7:07:fd:06:54:e4:a9:14:82:31:cb:51:72:b9:
                    4a:3c:64:92:72:ff:e1:fa:30:45:b1:98:f5:0a:c9:
                    26:b7:bd:97:bd:68:b7:02:f0:5b:ab:61:45:43:52:
                    2c:b8:48:2c:e1:de:32:0f:3c:67:d5:84:de:e0:cc:
                    99:82:36:a0:e6:bb:18:4b:81:bc:31:6f:4d:e2:a4:
                    c2:36:d7:0c:21:d3:41:9d:1b:6a:d7:f2:30:cf:cf:
                    1d:4f:c1:31:f1:2e:b2:e7:74:1b:99:2e:43:de:84:
                    bf:ef:6c:a7:3e:62:b5:f2:15:2e:bd:af:a5:3f:9c:
                    60:fa:90:6c:13:e7:05:3e:30:6c:2a:12:d4:11:68:
                    f3:e4:c9:74:5e:f7:8a:c6:7f:08:d7:62:d9:19:4e:
                    ca:3e:fb:d7:2c:02:26:0d:e6:76:d7:f4:3a:c2:d4:
                    34:46:c1:ef:36:09:60:a9:2e:dd:ec:af:27:00:07:
                    f6:02:70:52:7f:b5:1a:ff:1b:fc:31:6e:68:7c:59:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C2:CB:98:DF:14:07:17:2D:68:BA:28:55:69:90:EC:C4:0C:15:1B
            X509v3 Authority Key Identifier:
                keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:39:44:66:a2:ea:fd:03:58:aa:83:82:29:14:45:2d:db:cf:
         ba:9a:94:5b:cc:76:90:7f:27:d8:a9:17:83:2f:ff:e7:2b:9e:
         6b:ec:e7:95:c0:a9:06:38:d5:b0:c3:2d:88:93:58:8e:bd:ae:
         69:e5:08:0f:cf:6b:b9:76:6c:fe:a5:f4:c4:7e:c4:75:11:12:
         0f:a4:c9:3f:e2:82:08:d7:02:7e:cd:c9:20:f6:1f:21:e8:de:
         0c:ec:7a:bb:2f:0b:d6:7d:67:28:d7:db:c3:a0:81:02:3a:16:
         c5:68:55:fc:40:39:27:6d:17:9b:a0:82:f4:8b:90:08:a1:06:
         57:a1:9f:c1:be:58:0d:85:c4:1d:6a:1b:60:44:33:f9:ff:64:
         b3:12:46:4f:dc:7c:28:de:88:f9:db:50:95:86:53:bd:ab:35:
         9e:75:8e:96:02:ef:3b:21:cb:b7:ae:f1:c8:2c:10:95:fd:2b:
         54:39:0f:ce:48:e9:44:9c:ad:98:be:18:70:1a:a3:08:85:a0:
         47:dc:3e:f8:3c:74:e4:d3:6a:fa:a2:ef:1e:f8:7c:a0:b8:5b:
         ac:ed:97:12:9a:03:b9:b8:13:53:bb:8f:ca:9f:c8:6b:07:3c:
         b9:5f:f5:9f:7c:8d:ba:64:74:10:1f:64:c6:70:b4:d0:e9:c0:
         90:6d:f5:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCH1ESXP1kpC1f4KubDanHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMTdiNGM5ZjAxZGE4MzQ2OWE5ODUxZjk1MTA2ZTM5NmZk
MjVlNjQwHhcNMjYwOTIxMDQwMDI3WhcNMjYwOTIyMDQwMDI3WjAzMTEwLwYDVQQD
EyhmN2MyY2I5OGRmMTQwNzE3MmQ2OGJhMjg1NTY5OTBlY2M0MGMxNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmQ/eMI9ttUew+RCdsb6fHVfHu2S
YYmdUVH396qBWgdaVqKzaQYQN/OpWmHbezkCkYsPgW4wJ+v6Q95Btwf9BlTkqRSC
MctRcrlKPGSScv/h+jBFsZj1Cskmt72XvWi3AvBbq2FFQ1IsuEgs4d4yDzxn1YTe
4MyZgjag5rsYS4G8MW9N4qTCNtcMIdNBnRtq1/Iwz88dT8Ex8S6y53QbmS5D3oS/
72ynPmK18hUuva+lP5xg+pBsE+cFPjBsKhLUEWjz5Ml0XveKxn8I12LZGU7KPvvX
LAImDeZ21/Q6wtQ0RsHvNglgqS7d7K8nAAf2AnBSf7Ua/xv8MW5ofFkhPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfCy5jfFAcXLWi6KFVpkOzEDBUbMB8GA1UdIwQY
MBaAFEAXtMnwHag0aamFH5UQbjlv0l5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUJlMHlmQWRxRFJwcVlVZmxSQnVPV19TWG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvUUJlMHlmQWRxRFJwcVlVZmxSQnVPV19TWG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvUUJlMHlmQWRxRFJwcVlVZmxSQnVPV19TWG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2DlEZqLq
/QNYqoOCKRRFLdvPupqUW8x2kH8n2KkXgy//5yuea+znlcCpBjjVsMMtiJNYjr2u
aeUID89ruXZs/qX0xH7EdRESD6TJP+KCCNcCfs3JIPYfIejeDOx6uy8L1n1nKNfb
w6CBAjoWxWhV/EA5J20Xm6CC9IuQCKEGV6Gfwb5YDYXEHWobYEQz+f9ksxJGT9x8
KN6I+dtQlYZTvas1nnWOlgLvOyHLt67xyCwQlf0rVDkPzkjpRJytmL4YcBqjCIWg
R9w++Dx05NNq+qLvHvh8oLhbrO2XEpoDubgTU7uPyp/Iawc8uV/1n3yNumR0EB9k
xnC00OnAkG315A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:31 2026 by rpki-client