Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
File:                     Qg_zglhintUOC3VkwjNBFYHh3w4.mft (raw, json)
Hash identifier:          QWcEAicWmJ0EkYCdK9+QyPWMQUBTFPWUWBJK59eplaY=
Subject key identifier:   E0:50:78:C2:C3:7B:DD:70:4B:7C:2F:82:53:38:EB:A8:26:F9:A8:C1
Authority key identifier: 42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E
Certificate issuer:       /CN=420ff38258629ed50e0b7564c233411581e1df0e
Certificate serial:       01A1250C5C04709B90F92EE2F94FB525FC16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
Manifest number:          0111
Signing time:             Sat 10 Oct 2026 09:02:09 +0000
Manifest this update:     Sat 10 Oct 2026 09:02:09 +0000
Manifest next update:     Sun 11 Oct 2026 09:02:09 +0000
Files and hashes:         1: Qg_zglhintUOC3VkwjNBFYHh3w4.crl (hash: HFQBTyE8Y3hdMTHB89awc8qftYkK8zEsjDRR1NQckpc=)
                          2: i44ZsQWX9kFjZrBXqxJShe4F4UY.roa (hash: BxMxpzl8UVGfzxTIfCiqxK6y7sVAleuv4Iaf2OthD/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 09:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0c:5c:04:70:9b:90:f9:2e:e2:f9:4f:b5:25:fc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420ff38258629ed50e0b7564c233411581e1df0e
        Validity
            Not Before: Oct 10 09:02:09 2026 GMT
            Not After : Oct 11 09:02:09 2026 GMT
        Subject: CN=e05078c2c37bdd704b7c2f825338eba826f9a8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6d:8c:1a:fa:3c:08:f9:e5:90:e6:69:6d:69:
                    51:10:f7:c8:48:13:a4:24:c1:d6:aa:92:3e:b2:16:
                    fe:b4:37:e4:e1:6e:65:ab:b2:70:e5:06:92:90:18:
                    c4:1c:d7:6a:25:70:43:31:43:19:a7:b9:7d:a1:25:
                    c4:ed:14:1e:6f:4d:21:be:b5:08:9d:cd:5d:4f:b1:
                    34:70:ac:6a:56:f0:3c:c6:6a:d8:6b:5b:e0:e8:62:
                    14:95:ae:f9:c0:78:bc:98:0b:8f:6d:37:f8:e1:75:
                    e9:e7:d3:da:d0:20:2c:c5:ab:43:7e:3d:6e:ea:42:
                    75:e0:fe:f8:fe:7a:8c:7d:64:ca:f1:cb:16:6c:05:
                    b3:d8:79:b0:9a:1f:2b:3c:1b:ad:b9:6b:aa:32:17:
                    4c:38:1d:2e:d9:93:c3:a9:59:a3:86:a4:65:02:78:
                    0c:7b:c0:7e:36:e9:04:a3:7d:2d:79:d1:ed:74:0a:
                    5e:95:da:73:9f:bb:89:0f:cd:ba:c8:3a:c7:aa:e7:
                    f7:f8:79:06:9d:43:70:8c:99:d4:1a:bd:1b:82:d2:
                    24:8c:93:e6:cc:ce:14:b1:74:9f:e3:3f:93:cc:9a:
                    e3:72:ec:1f:6d:1c:8c:e3:7a:e1:ae:f5:dc:01:42:
                    78:83:03:a0:09:ce:d4:83:2b:08:36:1e:e3:b2:72:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:50:78:C2:C3:7B:DD:70:4B:7C:2F:82:53:38:EB:A8:26:F9:A8:C1
            X509v3 Authority Key Identifier:
                keyid:42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:90:a0:e5:30:03:2a:f2:84:39:62:11:27:70:78:8c:4e:7c:
         81:9a:44:43:14:d6:6e:af:92:75:de:bd:f3:4e:a0:2e:9f:22:
         10:80:5a:86:5f:b2:28:e4:1d:9a:3e:5d:d3:08:55:0e:8f:2e:
         8c:f5:f5:43:d2:78:c3:88:d5:65:7b:e5:15:5c:98:3c:ee:e6:
         f8:d5:d8:38:fd:e1:65:08:35:10:36:77:17:f7:dd:c6:44:a0:
         d7:fd:7f:8e:16:d9:cf:0f:e8:7f:16:ea:db:09:53:53:f6:79:
         0a:7b:5a:0b:35:77:e2:e5:6a:82:52:ce:93:83:c1:6d:06:54:
         da:30:e5:4a:98:1f:48:70:81:e2:42:00:ac:fd:74:26:d4:fb:
         a3:66:d5:59:e1:21:3e:a5:36:52:6c:bc:2f:ec:ff:b0:77:a1:
         cc:bd:a1:fc:76:a4:55:9d:82:50:1c:4f:99:b0:9b:20:a2:8d:
         1a:27:d9:8b:fb:e9:c9:1b:5d:07:b3:fe:66:35:53:23:7b:8a:
         75:88:43:30:f8:e1:18:2d:2f:36:76:0a:bd:c1:50:04:4d:77:
         83:5d:50:c5:ce:4c:7e:d6:ca:95:ab:9c:ab:4d:cd:f9:13:34:
         37:58:92:58:38:ac:bd:eb:da:1a:9e:3b:5b:69:27:20:12:0a:
         2b:10:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:25:21 2026 by rpki-client