Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File:                     QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier:          GqBDdA2kQ9+7Wn2FPcVgbYfRIGir8mVjN5k0O7ZfyyY=
Subject key identifier:   4C:1C:67:F5:67:75:64:35:C0:F4:85:97:0B:50:AF:11:97:4E:AE:77
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       01A0D012E5637C5D6D3E6F0C5422512AE9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number:          1ABC
Signing time:             Wed 23 Sep 2026 21:01:34 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:34 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:34 +0000
Files and hashes:         1: BYfDobbNo_m_w4crOMgDM9Ap1xU.roa (hash: dR/BNJMAt8zObcpN49bBOHDWT2wNzIa3cO7OLcillkk=)
                          2: EI7CwvWnDzGoyUcQkEgispb35mE.roa (hash: t9+WU2EdfrtjbLHdXRpNBIukhT3LimVMvmcXGL3pKdk=)
                          3: GjHI4b9XG_Gq98DG7Vz6sUZGE80.roa (hash: WTcq50V1CPKptotufjQn29Ul1Zr2FOf8snIYBs8IL7M=)
                          4: J858U9M3Pu6Cp06GzOrCZktlpEU.roa (hash: /2LUChah4azSZ6Ix+z1gFSt47yg5myoIj13SluIuDYE=)
                          5: Kxo0teOZwloERI7QoSNyGmfd6Lc.roa (hash: l3pXjBFAyH7G75ccUcJxbRG9IMuyFszbxgxuaSQ++ko=)
                          6: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: MCq5bU4kSWiB5I+vePwvbZ6sbo1z2vROgPYk+Rr1pfs=)
                          7: rXqfIetgsCX6da85a5Ypi-UQARs.roa (hash: jGTVr1toyFJPTSXndwmIhoe5UMPGvADQzpGtWiQW+1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:e5:63:7c:5d:6d:3e:6f:0c:54:22:51:2a:e9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Sep 23 21:01:34 2026 GMT
            Not After : Sep 24 21:01:34 2026 GMT
        Subject: CN=4c1c67f567756435c0f485970b50af11974eae77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5d:ee:49:77:4d:ef:ec:20:2e:1e:fe:0e:73:
                    d4:0a:86:90:23:b0:24:12:72:a4:df:31:7f:a2:3d:
                    92:e3:8c:ff:cc:7c:15:bb:5d:a8:4c:d3:54:c5:60:
                    f4:7a:42:0c:69:e1:2e:8b:77:0b:32:7f:8e:02:c2:
                    60:f1:f9:38:84:a1:62:d6:b3:34:a0:e3:9b:ab:de:
                    23:ef:80:4c:98:37:42:ff:b0:28:9e:c0:89:30:52:
                    73:c9:5e:17:d1:cd:cf:88:25:73:24:4c:98:cb:50:
                    87:04:70:f1:5e:fc:00:aa:a3:26:95:5c:65:f3:a8:
                    8b:71:7a:4b:50:5f:15:c6:ed:09:3d:fd:98:05:14:
                    72:bd:a2:c6:ac:80:9b:49:7a:29:4c:73:da:11:fb:
                    07:ae:3d:0f:cc:d5:01:f3:76:7c:4c:ef:fd:6c:1f:
                    18:64:3c:24:7e:2b:2c:c5:c0:49:40:69:35:c0:4b:
                    1e:c6:61:20:60:2d:b7:c2:ce:00:0e:53:c2:fd:94:
                    48:85:36:f8:e2:c3:0e:78:7f:50:0b:81:02:3e:7b:
                    80:2c:66:00:49:f1:90:ea:af:5b:b4:eb:76:51:8a:
                    d3:e2:80:0a:58:8b:fa:c5:af:ec:aa:c7:94:a3:86:
                    1a:7f:62:f7:20:0f:38:15:fb:19:ac:d5:64:bb:19:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1C:67:F5:67:75:64:35:C0:F4:85:97:0B:50:AF:11:97:4E:AE:77
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:ec:5e:6e:61:bf:d1:fa:0c:bb:7d:ec:8e:09:de:9b:d9:
         fe:cb:8a:c7:12:4f:11:bc:5d:81:71:13:6c:1e:f0:ef:13:07:
         7d:f2:8a:d2:72:7b:00:e7:77:53:c6:ca:10:20:3e:22:03:8c:
         8f:43:8a:a2:16:ef:03:64:c9:d3:a3:f7:a2:ee:5c:a9:4b:c2:
         dd:c9:8c:d2:0b:d4:1c:c9:40:0a:ef:1d:9d:ec:cc:2f:bd:6f:
         e2:78:48:1b:cc:83:78:8f:80:61:78:fc:b1:48:11:48:9e:1c:
         db:3b:84:8d:91:c0:e0:73:1b:be:1a:75:4d:65:6d:6d:1e:93:
         e0:45:d4:fb:51:47:e0:4e:9d:c1:fe:a9:2f:e2:7f:86:eb:a3:
         85:c6:73:1e:57:f2:fd:d2:79:e2:3c:62:71:87:56:b3:c1:8d:
         28:c2:e3:57:b7:e1:99:05:8b:f6:ec:e8:93:d0:0d:a0:69:49:
         79:dc:16:11:e9:dc:36:e0:a8:2b:bc:e5:7b:51:19:04:6d:69:
         57:1f:6b:56:23:b9:d4:87:d6:ca:41:e1:54:f5:01:f4:f2:a9:
         1d:ab:6a:5b:af:ca:36:b8:ce:a5:13:d4:31:23:57:ef:5a:0c:
         2e:4d:f7:49:aa:0b:84:43:fd:53:77:fa:9e:34:af:6d:2c:e8:
         02:8b:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:26:30 2026 by rpki-client