Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          NTlae7rltDhcdrEaPObLz7DylM5yHQhSzDFmWzkBerQ=
Subject key identifier:   20:54:18:CC:B0:07:49:2B:48:AA:5E:03:B5:D0:0F:D2:2A:96:4B:0F
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       01A0DD29279A075C624BFAD40DC037411032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          0E48
Signing time:             Sat 26 Sep 2026 10:00:56 +0000
Manifest this update:     Sat 26 Sep 2026 10:00:56 +0000
Manifest next update:     Sun 27 Sep 2026 10:00:56 +0000
Files and hashes:         1: F46yJZ1_ZtncXoXA1gqtcgSgxks.roa (hash: 4xB/U3VlaMjmD/USOo57UOd/gQlGLMP8wxFd8TZyukw=)
                          2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
                          3: MdEs2m-IrHBQCFgn-JlK3Bk7udc.roa (hash: Mo1ibwxe067q8YpdjNU7MlbnD4U4Cl8kB+EULAl5HTk=)
                          4: RBsCiDLoRPUa1sEuFbaN0WsP-WA.roa (hash: 2UgnVxLlLuAenOg0pXBuNFTqN4KE476l2bQbrokLRSM=)
                          5: SZxwFn-rv4YHYIn11rPhhdZalEE.roa (hash: qGdnGUtcjilIGvYv6gZqj/DBGuFNWX/5F8NZ1f7ELoQ=)
                          6: dQp1_bF-2hRgZhoSUp2j8-OiYAI.roa (hash: Ktp1XPuBOcTSPdwju+u+aKIoeTI5yi+j2Ty+pydNaPA=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: UpEJOoqjVFYwUIHty56TwIw8ZBFfr+UmKQ5Rr9Ocs1w=)
                          8: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:29:27:9a:07:5c:62:4b:fa:d4:0d:c0:37:41:10:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Sep 26 10:00:56 2026 GMT
            Not After : Sep 27 10:00:56 2026 GMT
        Subject: CN=205418ccb007492b48aa5e03b5d00fd22a964b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:15:09:0a:54:d5:76:ee:9c:ab:9e:3b:0d:
                    8b:3f:70:9e:73:91:81:86:29:f5:43:5f:72:28:06:
                    ec:da:ca:87:df:34:b4:6b:81:34:0d:f1:fd:55:6b:
                    81:2a:ff:ff:da:0b:11:04:23:55:ff:a9:0c:66:7c:
                    81:c7:c6:8e:be:04:84:49:4b:22:c8:1b:3b:18:4d:
                    56:32:c8:18:d5:59:bb:a2:a9:03:fb:42:c8:7e:f6:
                    d1:d8:96:ae:15:13:4a:26:8f:fd:10:4c:4a:e4:dc:
                    f8:78:81:63:fd:c4:26:c8:74:1b:e6:b7:f2:b1:ec:
                    8d:f9:6f:53:0f:9f:76:64:3d:29:eb:9d:dd:73:7e:
                    aa:cf:e9:27:ba:4b:df:eb:63:42:48:09:5e:51:14:
                    df:fd:96:78:9b:99:76:c7:12:ed:e3:0d:e4:da:e7:
                    22:9b:d2:c0:94:fd:bc:08:5d:37:35:0a:b7:4f:ec:
                    f5:db:87:aa:5a:4c:12:a7:8a:84:57:26:ba:f0:07:
                    bd:da:df:0c:82:fc:e4:f4:fe:f0:05:79:86:5b:ef:
                    aa:d4:4e:71:18:5d:a3:c5:c4:69:78:2a:ea:c1:5f:
                    03:9e:0f:c1:8f:c1:8e:f0:2a:5a:7c:03:a6:5c:69:
                    d2:4c:b0:ea:95:7c:41:00:71:f0:1d:9b:6f:69:2b:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:18:CC:B0:07:49:2B:48:AA:5E:03:B5:D0:0F:D2:2A:96:4B:0F
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d0:58:b2:70:4b:aa:a9:26:1f:47:e3:7e:94:8a:91:bb:94:
         85:28:62:de:79:ea:5f:1b:ad:46:1e:c9:80:11:90:79:15:46:
         e9:5c:20:77:c6:aa:93:43:95:04:df:51:19:f0:eb:d2:75:26:
         ee:6f:5f:40:b0:3b:4a:69:f8:c9:62:c1:9c:6b:f7:2f:36:07:
         3e:10:b0:1f:ce:96:6e:4b:59:d3:e6:e6:c5:18:b8:17:02:6c:
         f2:d7:f5:21:ee:5c:0f:0e:8b:07:97:9b:e7:52:d3:9e:32:7a:
         9f:10:fa:d3:b5:dd:d7:53:1c:b1:c9:6e:25:04:d0:67:da:a0:
         e0:4a:3c:92:50:3f:bc:24:fc:ac:9c:86:f9:a0:73:1a:42:6d:
         57:c6:26:37:eb:9e:22:c6:df:a3:a7:09:0b:20:56:3e:54:d2:
         f6:72:99:ff:36:60:ef:5a:9b:24:9d:62:de:a8:e8:9d:d6:7c:
         25:ce:b3:a2:d1:29:f4:17:dd:85:da:43:95:6b:74:75:80:45:
         58:3d:43:c9:2e:0b:9d:3d:48:b5:c8:28:49:e0:9c:07:61:66:
         94:b3:89:36:8e:fd:0a:c7:a8:21:22:9e:69:2e:76:3d:aa:cb:
         45:97:bd:2c:98:88:e7:9e:c4:d5:1f:d1:8a:53:43:39:20:53:
         49:01:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:30:54 2026 by rpki-client