Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          qIs4vVchK8HVAuW0HNJx6spbv/FCCLKIYgPqjqBBTOw=
Subject key identifier:   0A:E8:19:20:81:D8:4E:43:A5:F8:52:31:5E:6E:35:A1:20:6A:22:84
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       01A0C746147F4EC245723203D335EE542BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          0662
Signing time:             Tue 22 Sep 2026 04:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 04:00:53 +0000
Files and hashes:         1: 52DLcP5QY9pi7vojxO_II_zfgcQ.roa (hash: RzKzGr4Ea3LAud+NmUq6w6faNUNWCiigM9sI+gxiGqs=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: 3r8hkPopdiplSn6Ou2taOdslkyVUZ6fAi6MpYl6mfq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:14:7f:4e:c2:45:72:32:03:d3:35:ee:54:2b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Sep 22 04:00:53 2026 GMT
            Not After : Sep 23 04:00:53 2026 GMT
        Subject: CN=0ae8192081d84e43a5f852315e6e35a1206a2284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:61:12:98:4d:45:30:95:a9:7b:36:08:30:
                    34:bd:c2:a6:73:39:fa:a8:8e:01:13:d7:99:b0:4c:
                    5f:6a:40:60:69:60:e3:69:dc:cf:3c:67:45:7c:95:
                    d1:6d:c3:09:96:44:e1:de:d6:0c:97:31:e2:29:e4:
                    98:8c:52:29:da:34:0c:34:8e:d8:dc:e1:2b:cb:62:
                    e3:c5:f9:9a:2c:4b:9d:9a:b3:de:e3:ec:e8:66:d2:
                    b8:6e:ff:d2:6f:45:4b:a5:9f:f1:09:6a:0a:b1:0b:
                    a2:0c:eb:6f:8c:19:df:14:ce:7a:c7:a3:0a:63:d5:
                    38:e4:56:2f:3d:c7:fd:e0:e1:08:09:19:9b:59:df:
                    d9:2f:65:64:46:03:04:d7:a5:e0:d3:9c:bc:8a:47:
                    ef:21:2a:1c:c7:bf:b6:28:49:d3:b2:bc:d6:98:3b:
                    ce:2a:ac:60:f1:ef:5d:85:9d:17:03:ab:4e:7a:3e:
                    e3:56:f1:65:21:27:c3:36:2f:41:6d:8a:d2:e1:e5:
                    18:d8:6d:d4:df:f7:73:4b:e1:e0:76:53:68:a2:f8:
                    e9:4f:7a:9e:5a:3a:dc:87:3c:95:dc:5f:c7:7b:74:
                    a5:4b:14:5e:79:27:79:46:b8:29:e2:b7:8e:63:1d:
                    b8:da:d7:99:b7:b4:38:f3:79:8f:66:43:f5:53:ca:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E8:19:20:81:D8:4E:43:A5:F8:52:31:5E:6E:35:A1:20:6A:22:84
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:55:c2:4b:8f:15:53:06:04:42:8f:4e:a8:02:1e:f2:bf:1b:
         37:04:bf:39:70:30:a2:1b:d2:ea:5d:d4:b0:45:ec:15:18:7a:
         e0:11:1d:97:ba:f9:df:d3:f7:e8:d2:bc:ba:9e:7d:11:a0:9b:
         9f:21:94:81:8f:04:da:81:17:d8:ab:c4:29:a6:44:c8:7b:6f:
         83:bd:6d:e5:d6:90:bc:3c:08:2e:a5:ac:cd:9a:73:28:9a:c3:
         a0:db:3c:23:32:a8:71:d0:4a:fe:35:95:25:f9:90:8e:2c:b1:
         91:03:d0:91:08:b1:6d:99:cd:49:48:55:87:b5:89:99:1d:78:
         87:c3:90:8c:ae:d2:a1:50:54:d0:e5:1d:25:6c:63:9c:e4:24:
         c1:54:d3:6a:d4:c4:30:a0:fe:9c:9f:73:64:43:64:5e:d1:8e:
         f3:05:6a:f9:98:23:18:55:6b:84:b4:57:4e:9a:19:f0:f7:89:
         7f:38:03:3d:b6:17:e0:cc:45:46:20:e8:5a:bd:a1:ce:c0:ea:
         ac:b2:9c:e2:5d:76:09:5c:05:26:1e:9b:cc:85:93:d8:39:fa:
         2c:95:87:56:14:7d:4d:2c:d3:76:6c:59:05:1e:de:6d:fa:15:
         26:23:7c:4d:21:c1:62:49:42:1f:e1:3d:78:43:4a:2b:f8:f4:
         f3:b1:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:16:23 2026 by rpki-client