Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          TQ39IkQ2+6prNkCXO/YsgMJ+ZPIM3RUyPfiYTFTfoCc=
Subject key identifier:   47:77:A0:D6:96:D4:02:EC:01:72:AF:C0:A5:02:B3:BD:96:B8:E8:F0
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       01A0E3D0DAD20435201DC129C826D53CEE3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0E62
Signing time:             Sun 27 Sep 2026 17:01:50 +0000
Manifest this update:     Sun 27 Sep 2026 17:01:50 +0000
Manifest next update:     Mon 28 Sep 2026 17:01:50 +0000
Files and hashes:         1: 4YMSKNsUfIJZYY47MNVzndwjo04.roa (hash: 8oujs3evvYwGVLJbLnpR6K4HU81UoQYW70JF1WusQ7o=)
                          2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: nbKd8o26+QaFwlptrBGRsHvJtnRj5uO23euD4sNa5Qw=)
                          3: UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa (hash: narBwfpb8RAcShxX1DzjbkkEFV1ZbklkMy2WAyEvk6Q=)
                          4: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:d0:da:d2:04:35:20:1d:c1:29:c8:26:d5:3c:ee:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Sep 27 17:01:50 2026 GMT
            Not After : Sep 28 17:01:50 2026 GMT
        Subject: CN=4777a0d696d402ec0172afc0a502b3bd96b8e8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:aa:fc:55:0b:c0:df:58:99:91:73:0f:03:
                    9a:f5:c4:83:cc:33:d6:bb:3f:fd:01:b1:f5:23:12:
                    93:39:2f:90:5f:f2:66:32:29:54:9a:42:d1:97:25:
                    1d:1c:de:f5:ea:62:e2:7d:07:6a:1d:e8:f7:8e:54:
                    ee:b5:80:44:03:b4:6e:0b:b8:c8:25:43:d3:29:d7:
                    5d:80:7b:28:52:f1:48:78:5a:97:5e:a3:42:e1:ed:
                    42:19:74:db:db:60:8f:f1:c5:49:77:5a:c8:64:f3:
                    68:6b:a8:d2:54:cb:b9:08:cb:db:cf:22:d4:e9:05:
                    0f:78:3f:8b:3e:c5:46:f9:d1:e5:0b:49:75:b6:d1:
                    78:4e:52:c0:7a:54:f0:48:53:0d:66:7b:4e:7c:03:
                    a1:9d:52:02:72:8d:85:c0:a3:c4:f6:2e:ee:55:84:
                    27:5e:59:f9:bd:ca:42:ca:45:c5:90:69:05:1d:38:
                    d0:79:b0:d9:73:f8:f4:e5:9a:f9:2e:54:af:a1:cc:
                    ca:bc:f9:88:44:7f:a3:42:0b:1c:d6:95:9b:66:cd:
                    ad:0c:a3:83:26:34:be:f2:f5:83:ab:85:de:ec:30:
                    11:c0:a2:4e:0b:cc:73:27:2a:00:ca:d7:20:ae:ce:
                    ab:a9:a1:ad:73:4e:d8:01:fd:1f:b4:17:73:a5:d3:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:77:A0:D6:96:D4:02:EC:01:72:AF:C0:A5:02:B3:BD:96:B8:E8:F0
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:49:a8:b9:e6:03:33:4e:46:a3:d8:0f:91:86:d5:cf:87:
         9f:a3:5b:24:6b:8d:8c:c3:cc:2d:10:51:9c:14:dc:fc:ab:6f:
         de:f1:fd:6a:c1:d7:ed:e2:ea:8a:7a:a9:b2:d9:e5:e5:09:16:
         1a:db:71:42:7d:bc:fa:0b:4e:26:a7:09:18:92:c5:dd:3b:fd:
         a5:79:e1:59:37:f7:bd:38:9e:14:18:8c:c4:56:5e:fb:94:e2:
         86:d4:90:54:3a:09:44:e2:28:85:77:f3:4a:1f:83:b5:61:7f:
         b3:f3:1f:8d:59:4a:5e:05:1b:12:d2:0e:b7:a0:35:b4:bb:ae:
         18:79:ea:c3:c0:bf:a3:4f:f8:12:fb:b1:7b:75:4c:bc:07:19:
         4d:51:01:1d:26:83:b3:f8:b5:e4:65:0a:46:80:04:53:e7:ce:
         63:42:82:09:e0:74:50:5d:ca:3f:2d:5b:d9:c8:1c:32:10:88:
         a4:4f:f4:dd:9a:be:dc:be:4e:b3:cc:f1:0b:6b:f1:ff:e5:5d:
         1e:a1:1a:67:62:21:f1:41:05:cb:c9:00:70:bb:cb:6c:1c:85:
         66:c2:0a:79:a4:10:17:1a:f0:ff:83:fd:ad:ed:c2:3f:1f:5e:
         b2:b3:5f:08:0c:62:ea:03:06:d2:3a:79:bc:65:76:57:1b:b7:
         97:9a:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:29:37 2026 by rpki-client