Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File:                     QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier:          xhfrvQUluh5lYO20kbGmyKFiFQQSoQGZBgMWrMI2j8o=
Subject key identifier:   4D:22:18:36:8F:50:80:02:64:2C:E9:3F:77:E1:5F:14:E7:0E:6A:A1
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer:       /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial:       01A1065C439C280DB968A121DAF684DF61A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number:          1AB2
Signing time:             Sun 04 Oct 2026 10:01:12 +0000
Manifest this update:     Sun 04 Oct 2026 10:01:12 +0000
Manifest next update:     Mon 05 Oct 2026 10:01:12 +0000
Files and hashes:         1: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: 8XzzubEN683WI3aw9j/KLGmKDmSe6ptg4t4qYNm1hK4=)
                          2: XHNmhL-H_lU_Ditj5DOPMU-kKtY.roa (hash: bFFOvpr+igb/YTpH0FjZlwOdqO2o/Bhf2p5JdiNxZ04=)
                          3: gRLPj-QZguZ09jmT3_4W7rktsIQ.asa (hash: s5g3qik4l7YdfpWjnJdY6kRR7Y327DcpVO692i5PIOY=)
                          4: hBmGlltLexkP8f3hX0SAgg3Hio0.roa (hash: qAvglYr6lut4x7tEHzSK5Gh8yQ5C9t3pg4zrjJgOyJA=)
                          5: hWXO8_2KJhAsuSjK53w4WoXZ5ho.roa (hash: BtDfipiMIpPGVjZXVualjLnDPbN3Q7CaWpDWgdXMT9s=)
                          6: yeCw9h3KZU-0UNnW2F5N-0Bvork.asa (hash: Tp3AmGDQGTccp0cBgUHV9KzZGjjd75GREPDRqmOx7a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:5c:43:9c:28:0d:b9:68:a1:21:da:f6:84:df:61:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
        Validity
            Not Before: Oct  4 10:01:12 2026 GMT
            Not After : Oct  5 10:01:12 2026 GMT
        Subject: CN=4d2218368f508002642ce93f77e15f14e70e6aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:6f:c4:b5:2f:73:8f:2a:f6:7a:1c:dd:8b:
                    7d:d6:5f:d5:b9:38:37:11:43:cb:7c:4c:73:4a:f2:
                    55:40:1d:20:62:bf:dd:79:2e:95:62:78:d6:44:94:
                    db:0f:9a:ba:ab:ba:0e:1d:2c:28:9b:62:89:cd:8b:
                    35:41:7b:58:3f:16:e9:e8:d9:ae:9b:93:e8:69:f7:
                    b3:fa:2c:6a:42:56:09:51:b5:92:69:8a:47:23:17:
                    0a:83:44:79:3a:ea:c1:1f:54:84:4e:76:5d:d7:b2:
                    05:06:20:e2:e1:e5:11:14:cb:48:32:2c:4f:d6:ea:
                    f8:d5:0f:6a:e9:ed:ae:fd:0c:d7:f1:fc:ce:06:52:
                    0a:92:0c:a4:b1:d0:b7:6c:39:05:70:04:88:4d:11:
                    ad:4b:73:ce:f7:7c:fd:19:ed:a7:2f:a2:d6:60:e9:
                    58:50:d1:73:85:1c:e2:6e:9c:43:6e:52:18:80:f8:
                    93:01:52:a6:19:7d:ff:a3:3b:2b:72:31:6b:c3:77:
                    23:ae:e1:98:dc:4a:43:a6:5a:2d:0f:3e:81:f1:3a:
                    b4:f6:9a:21:36:b2:5a:7d:9f:d6:fc:4b:2e:43:10:
                    c3:af:a4:b2:30:f5:c3:93:27:3b:f0:5c:b4:33:29:
                    eb:12:04:e0:cc:57:6a:0d:f0:76:56:85:2e:89:00:
                    22:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:18:36:8F:50:80:02:64:2C:E9:3F:77:E1:5F:14:E7:0E:6A:A1
            X509v3 Authority Key Identifier:
                keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:02:71:70:27:7c:f2:93:6c:1f:d9:9b:c9:46:79:51:5b:71:
         1f:05:47:9f:da:02:13:6a:c3:98:21:a0:0c:0a:d1:8a:f4:48:
         2e:25:9d:11:39:e1:d2:60:3c:8d:89:95:62:ae:77:e4:41:28:
         7d:1e:e8:28:03:2c:df:a1:15:e3:44:2d:66:1e:7e:22:8b:b4:
         04:1d:ef:77:33:fd:d7:35:74:b2:e4:aa:4a:3e:ab:ad:cf:37:
         33:21:bc:54:33:24:ac:c6:78:fb:fc:85:4a:2e:fa:a3:f6:45:
         d4:48:82:47:15:87:cf:e0:df:b1:13:56:ac:4c:ba:73:74:1f:
         1f:cb:3f:27:29:22:c3:58:75:86:a1:f5:ac:6c:7e:7e:ce:b5:
         ac:4a:7f:f8:5c:57:4e:ba:cc:3e:a2:21:93:26:e0:30:3d:8a:
         e7:fc:38:5c:71:66:20:33:99:09:a5:d7:7a:1d:36:b8:2d:d4:
         9b:5b:3d:2e:55:90:08:2d:65:e4:b6:fe:30:bd:ab:3b:60:cf:
         34:de:47:0d:05:73:1f:de:3e:d8:fb:9d:23:5e:e3:f7:8e:ba:
         03:c5:1e:90:97:0a:fb:68:2a:a5:01:b2:48:25:ce:96:63:80:
         83:dd:02:09:f4:91:0c:9d:54:9f:1d:42:6e:0d:90:d4:e1:b5:
         cc:18:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:06:55 2026 by rpki-client