Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
File:                     qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft (raw, json)
Hash identifier:          SZ3TVCVjy3uGIUjXNXRTlx+BlDxtmSwUB60GoTfSpio=
Subject key identifier:   0D:70:6E:8F:69:10:3A:89:F9:A7:1B:73:4A:53:AF:E7:16:C4:68:88
Authority key identifier: A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
Certificate issuer:       /CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Certificate serial:       01A0D9BA5F195466AAD48AF3A7BEAF8D6DED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
Manifest number:          EA
Signing time:             Fri 25 Sep 2026 18:01:04 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:04 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:04 +0000
Files and hashes:         1: 1-uaXjZ6yrrtJqfNtsY2-IfoHC9A.roa (hash: ZnV7OIgyRpJomB9RH+WRj4jIbkVriTkEGmB17bdQUdY=)
                          2: UiuaMadIa34ZVH4JPpb_7TjTz3A.roa (hash: 81//4wt6oj+yRk5h9sBjg6Uv03FMVzZyifdZ80jFUsU=)
                          3: qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl (hash: 8xnpH7JyH57IhfsI45Lb/pvmxB8PeUHD3gA6l1u9+j8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:5f:19:54:66:aa:d4:8a:f3:a7:be:af:8d:6d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
        Validity
            Not Before: Sep 25 18:01:04 2026 GMT
            Not After : Sep 26 18:01:04 2026 GMT
        Subject: CN=0d706e8f69103a89f9a71b734a53afe716c46888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1b:f6:00:2c:83:c3:8b:56:a5:a8:b3:0c:32:
                    b3:77:fb:88:10:84:9f:6d:15:0a:4a:6e:1a:07:41:
                    0d:98:98:0c:aa:9f:81:fa:2d:05:d9:14:c7:9a:bf:
                    fa:ed:d6:39:47:3a:6b:85:bf:f9:8f:34:e2:db:dd:
                    69:23:d9:ac:ab:85:44:f3:3d:57:1f:c2:15:3a:11:
                    29:19:b6:ce:39:8d:4f:3f:c7:71:38:9b:88:30:42:
                    5c:a0:ab:5f:1c:72:48:d1:0e:b2:5c:8c:b0:15:1a:
                    d9:05:b9:3d:1d:86:9f:d0:0f:ff:fe:ac:26:76:5d:
                    67:96:1f:be:e5:a6:32:f1:65:bd:b7:6e:fb:4d:a8:
                    fa:cc:d4:f0:cb:a3:7b:7a:3a:d7:dc:e0:13:99:42:
                    f2:f4:31:1a:f8:4f:7c:f8:45:09:fe:04:2c:09:b2:
                    68:d3:56:48:cf:7e:49:bc:b4:9c:3b:17:96:65:8e:
                    a4:03:92:f2:1c:d8:aa:61:b0:df:f6:e3:28:9c:e3:
                    c0:a8:29:1a:a9:9e:d3:d4:c0:41:c5:92:0e:58:ee:
                    de:71:00:5b:8a:9f:65:c0:a4:aa:ed:36:c7:ea:ef:
                    a8:19:b5:b4:3b:6c:f4:51:dc:55:63:30:e1:53:ba:
                    f5:b4:b1:37:1e:b0:6c:c0:10:3c:54:15:d9:e0:fd:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:70:6E:8F:69:10:3A:89:F9:A7:1B:73:4A:53:AF:E7:16:C4:68:88
            X509v3 Authority Key Identifier:
                keyid:A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d5:53:e2:61:49:ce:1e:57:50:d4:e4:cd:87:8c:59:04:19:
         db:f4:b5:6a:c1:d2:3b:e5:fc:42:90:7b:fa:6c:cf:5b:00:3d:
         8b:86:07:19:c4:e1:0f:0d:0a:76:dd:14:e7:c3:22:95:ca:35:
         ec:56:b8:56:b7:28:dc:a7:95:a5:07:6f:09:8a:c2:75:ac:e3:
         fa:ff:d7:bf:05:ae:3f:05:3e:20:ad:42:c7:fe:88:38:78:a0:
         33:f7:d3:5a:86:9e:28:c8:ca:b8:40:d7:b9:6a:c3:a1:6c:78:
         d6:7a:b6:67:a4:55:f0:cb:72:b1:61:62:2e:85:06:97:02:f7:
         91:cb:fc:a9:76:50:81:05:f7:86:ee:3e:d7:66:f5:77:bf:9e:
         4d:e2:2f:a4:52:ab:2b:59:b5:95:81:96:7c:22:3f:96:b7:7b:
         64:35:cf:41:36:2a:cb:a6:aa:5a:2a:50:5a:86:23:1a:5a:25:
         77:7f:27:b5:32:ca:17:a1:35:b8:40:29:23:41:80:bf:6a:27:
         85:30:96:49:f9:cc:d6:ec:c4:21:94:31:03:d6:48:72:56:b1:
         40:7a:88:f0:2f:0a:62:bb:d2:7c:fa:39:ab:af:87:0a:7a:18:
         fb:50:73:5d:13:4c:48:7c:f3:fc:c1:57:5a:b2:7a:7e:9b:89:
         62:96:3b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:01 2026 by rpki-client