Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File:                     QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier:          nLKXglo6z18kp8HxUKLYRzZ9dMTlrES2g2qw6lGO7yw=
Subject key identifier:   16:F2:40:22:11:4D:65:6E:68:F1:41:4A:E6:99:E9:50:68:90:AB:50
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer:       /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial:       01A0E2195F6419FA72BDA6A210640C5F3B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number:          1A7E
Signing time:             Sun 27 Sep 2026 09:01:48 +0000
Manifest this update:     Sun 27 Sep 2026 09:01:48 +0000
Manifest next update:     Mon 28 Sep 2026 09:01:48 +0000
Files and hashes:         1: Dxm0EoxGp2ndo74sPdVeeXzoflk.roa (hash: yNKkIjFKgCoECJezorrDtiFQ2gdUXVgat36+B1ETObs=)
                          2: OMxShmSN_MmgdqjB3FCH456QPyw.roa (hash: Vm7cRKSz6QpnQGwyuo2jJgMyLFID06ztzYaKVdmY098=)
                          3: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: 4c+avdZqElDQGR8XYr42PJyjJM+wE9lMTTdB7xee6e8=)
                          4: VLAKggAmP_2e5ujcu_orpJmGymk.roa (hash: R7zarhFK+F6qeI1f2Us/zQph/cT5R9wLEpRj2LShETc=)
                          5: g_4YB2ktK_BZdQW2jisjb57z4v4.roa (hash: FrWnOJyYlT2BDuUH41B6UfYjVVUxab5ezAoKnJ2JP3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:19:5f:64:19:fa:72:bd:a6:a2:10:64:0c:5f:3b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
        Validity
            Not Before: Sep 27 09:01:48 2026 GMT
            Not After : Sep 28 09:01:48 2026 GMT
        Subject: CN=16f24022114d656e68f1414ae699e9506890ab50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:40:cc:bb:a2:bf:dd:5b:e5:02:ba:b4:d0:ab:
                    2e:71:4c:c5:56:63:e4:91:c6:ee:9d:9b:de:30:06:
                    0b:cd:74:a2:29:5b:41:9a:20:7c:82:4c:66:ae:9b:
                    ef:04:bb:88:ed:af:a4:f5:a5:3a:3b:11:cd:f9:77:
                    00:52:64:21:15:48:41:8b:53:fe:84:53:cb:e0:c7:
                    34:f5:ec:6f:f5:cc:b5:88:97:83:22:e3:ba:73:a9:
                    54:2f:74:95:02:02:cf:ec:b7:b2:b7:8b:eb:6a:9d:
                    1d:e3:8c:bb:8e:2c:da:48:0f:77:52:d2:ea:6b:99:
                    01:1a:3e:45:2a:06:52:dc:13:e3:c3:cb:84:b4:dc:
                    9d:99:8b:85:a7:04:61:9f:a2:36:5f:81:1f:6e:4f:
                    79:39:8b:fc:45:19:c7:76:dc:34:08:b5:70:78:bc:
                    96:4f:cc:34:ac:44:16:0c:6c:1b:32:93:c8:34:f5:
                    36:aa:d3:52:4c:b4:df:44:8a:92:ca:b3:21:93:3a:
                    82:ec:bf:b3:ba:64:9b:20:43:e6:ec:31:61:aa:90:
                    09:f5:a2:d8:7a:d9:1e:5d:b4:f8:c3:7b:11:c1:57:
                    3b:0a:d3:17:1e:5e:23:73:bd:14:d7:aa:d0:19:25:
                    68:16:ae:96:5c:e8:68:ce:08:39:8a:a3:ec:85:e4:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F2:40:22:11:4D:65:6E:68:F1:41:4A:E6:99:E9:50:68:90:AB:50
            X509v3 Authority Key Identifier:
                keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:26:28:63:c8:19:60:e0:65:e0:02:c6:12:dd:f3:f0:61:3b:
         4b:51:cd:4a:f1:54:9d:27:61:d3:61:e5:4d:d5:0c:33:7b:e2:
         59:ae:56:90:0e:15:af:04:34:51:44:da:f3:ed:ed:c0:1a:9a:
         05:dd:2b:e1:4c:ea:5e:44:bc:89:aa:0d:5a:c4:fd:c5:a0:2a:
         4f:59:21:c9:df:39:1b:b6:a2:f0:4d:72:08:0f:13:5b:06:66:
         8b:de:fa:51:a1:14:54:a3:eb:47:d8:ff:32:f5:6c:b0:2b:53:
         5f:61:2d:44:81:fd:0c:93:39:9f:fe:fd:58:a6:e0:aa:ed:60:
         c3:7d:cf:2d:03:f9:55:cb:69:e0:68:37:82:5a:65:0f:ec:e3:
         3e:fe:ae:a4:9b:0a:16:0a:d4:9e:44:25:04:da:fc:53:6e:d4:
         a4:d6:41:bc:6c:7e:09:8c:4d:62:e2:c5:15:8d:b6:7c:2f:c2:
         5a:11:97:1b:4e:f8:35:45:a9:c9:d9:04:16:b0:b7:50:fa:9c:
         06:96:8b:77:7a:99:ab:3b:ac:ff:c8:6e:5b:9f:01:f0:95:8c:
         ce:dc:e9:37:03:a4:a9:b6:a0:a2:20:91:22:59:85:0e:4d:bf:
         1b:b0:ac:12:5b:dc:ec:c0:aa:fb:60:c8:88:78:6b:55:7d:d7:
         97:d3:c5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:01:58 2026 by rpki-client