Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
File:                     QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft (raw, json)
Hash identifier:          op2XeE6yN+vnF0BYIbu9apyZfvZeq5x/I2Uk2PLOvmU=
Subject key identifier:   27:BE:D0:8D:AB:B9:6F:5E:72:FA:B8:00:B3:29:EC:E8:84:93:C3:C2
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Certificate issuer:       /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial:       01A1DD26AB55484BD33F40D38BEDF4B04F60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
Manifest number:          0176
Signing time:             Sun 15 Nov 2026 03:01:01 +0000
Manifest this update:     Sun 15 Nov 2026 03:01:01 +0000
Manifest next update:     Mon 16 Nov 2026 03:01:01 +0000
Files and hashes:         1: 9z84m-kebT8cdB-4tut3KLWmbhQ.roa (hash: tJspMU+tMRDYHrt52hzcYgBJTQsCCMP09cWPHPzuZFA=)
                          2: QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl (hash: 0WitniKuC7SK6S0lsmEh9jDYEsTkeIJgyuDCuG2dKUA=)
                          3: UyuDpsThd0HTxIHLtl_AcLRLcgU.roa (hash: cR9/I8Oh8wt0pXLSLn6pWKFwtuW+7P/mjqHujGnIbq8=)
                          4: bbCeI0gcrdJEbQysLJxjANiohZE.roa (hash: oG8FmKmodUCgjzGLEM0eyGJW2mVDzSmINHpgvQW+IsE=)
                          5: tgvXIki0g-pfbDcyTN4Jty571wU.roa (hash: aBHUTes6NUct+J0pVH5+kLoc6/IlFtoI9S3mihoYFaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:26:ab:55:48:4b:d3:3f:40:d3:8b:ed:f4:b0:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
        Validity
            Not Before: Nov 15 03:01:01 2026 GMT
            Not After : Nov 16 03:01:01 2026 GMT
        Subject: CN=27bed08dabb96f5e72fab800b329ece88493c3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:9b:2d:c3:cd:2b:b6:13:af:69:ca:2a:f4:
                    42:b1:a6:a1:5e:94:49:85:96:10:a9:a1:34:1e:14:
                    da:80:46:62:54:34:67:69:66:c1:d6:27:52:8e:ae:
                    ab:bc:14:eb:36:a1:2b:7a:6a:04:99:0e:45:2e:03:
                    30:bb:94:be:03:21:f1:14:8c:51:22:b9:d3:0d:5c:
                    bb:53:18:34:22:36:24:cb:79:ff:1c:aa:04:fb:0e:
                    9b:76:57:e1:3e:2f:10:0d:cc:09:82:0f:b9:c3:25:
                    f7:24:f2:e6:87:9b:60:c7:3b:ee:68:93:cb:86:d4:
                    27:2b:b8:e3:15:3f:eb:df:76:d4:3f:d9:fc:34:31:
                    e8:02:5e:4b:b0:c2:7c:38:d6:9a:e8:fe:00:3f:e8:
                    f6:7a:d1:9c:9b:c2:7c:cc:5b:1f:d9:cb:73:97:65:
                    75:45:f5:c8:d2:91:16:11:63:62:03:3f:85:68:e8:
                    28:a5:c8:9b:3b:2c:33:94:ab:82:35:83:85:c0:fd:
                    a1:b9:cb:2e:e0:14:58:46:d6:84:cb:70:66:a9:be:
                    73:d0:51:bc:f6:9b:97:78:84:18:ac:a2:ab:23:89:
                    c7:2e:6f:2c:a7:3b:eb:df:43:f4:cd:9c:fb:22:98:
                    9c:79:0b:1e:04:7b:01:1b:ed:63:16:55:06:76:b6:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BE:D0:8D:AB:B9:6F:5E:72:FA:B8:00:B3:29:EC:E8:84:93:C3:C2
            X509v3 Authority Key Identifier:
                keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c5:04:4b:71:94:b0:87:69:1b:e9:6d:a0:73:ec:53:63:3e:
         ec:f1:05:8a:cf:a8:c2:35:a3:d0:37:06:8a:88:12:0f:2e:b2:
         56:a6:f0:e9:08:97:4c:e5:33:36:05:81:dc:77:0a:1e:b9:b7:
         e3:3f:3c:b3:ee:5c:35:57:ab:7a:1d:4d:21:ed:fb:b4:9b:90:
         5b:51:2e:13:aa:85:9a:84:06:01:1f:ed:6c:f5:dd:65:a2:b5:
         e0:cb:3d:a1:54:2e:b7:a3:06:1b:53:cf:74:70:7d:24:65:b7:
         c1:30:1b:d9:15:6a:be:33:5b:d3:af:6e:91:e9:1a:44:e9:80:
         f2:a4:d6:6c:ff:bb:e8:c8:0c:6b:d4:d5:e9:de:bd:e5:ee:00:
         bf:50:4c:6c:21:33:d8:a6:b9:67:89:78:44:6b:62:74:a6:5e:
         66:8e:07:ab:4d:f9:e3:82:e8:2c:63:bd:7e:fc:63:94:6f:9b:
         01:96:34:af:29:7c:05:2a:e4:9d:1b:e7:77:88:10:92:b6:61:
         1f:f0:46:6d:b5:c1:d4:65:2e:d7:b5:ff:88:d2:0f:8c:d5:fa:
         84:09:c4:62:e5:34:0a:6f:b2:67:cd:cc:81:b2:19:35:6d:55:
         20:e8:55:04:8b:9e:cf:30:ff:07:0b:27:28:72:84:52:31:a4:
         ca:1b:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:20 2026 by rpki-client