Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File:                     qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier:          l4bZWUOF5QVKu2cgxtHjp5RnU/0PyqSuMRPogoIkWx8=
Subject key identifier:   C3:B6:8D:09:2E:0B:77:FA:8A:12:D1:E8:02:1F:D0:5F:45:2A:48:1E
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer:       /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial:       01A1238B1190778436D27E55A2C70D718EDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number:          082A
Signing time:             Sat 10 Oct 2026 02:01:18 +0000
Manifest this update:     Sat 10 Oct 2026 02:01:18 +0000
Manifest next update:     Sun 11 Oct 2026 02:01:18 +0000
Files and hashes:         1: 7cxeVgz8TbfDoo5I7-2NKyTzXTo.asa (hash: qASt1tPeqwlwGXks2FNMyN+aJfbPnWYSXeXKrC2Yero=)
                          2: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: d7I3f/bU6wz0hF3nyIi4uQZLIqkJRq7RtIu1cbmhjRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:8b:11:90:77:84:36:d2:7e:55:a2:c7:0d:71:8e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
        Validity
            Not Before: Oct 10 02:01:18 2026 GMT
            Not After : Oct 11 02:01:18 2026 GMT
        Subject: CN=c3b68d092e0b77fa8a12d1e8021fd05f452a481e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:c2:c7:a6:b0:be:35:ba:1e:21:bc:e2:0e:
                    75:9a:e5:0e:59:42:22:a3:64:9a:b8:8f:c4:b6:a6:
                    4a:02:28:80:3f:ec:92:8b:e7:a7:40:08:44:3e:ba:
                    62:ef:90:9c:03:bd:3e:4d:9d:c6:c3:64:2c:df:4b:
                    08:f6:87:0b:ba:e6:bd:bc:dd:ad:ef:64:ef:ca:4e:
                    c5:4c:15:1b:9c:cc:ff:9f:25:5a:f8:df:51:33:22:
                    70:c2:02:c0:1b:61:33:ab:9e:c4:61:e4:4a:91:5a:
                    78:f6:e9:6f:13:d9:8b:e5:81:a4:45:88:8e:0c:5a:
                    a9:f1:1c:55:56:aa:77:fe:8f:6c:8e:f6:00:0b:aa:
                    22:e7:f2:c8:e7:26:56:1a:5b:95:a7:96:4d:37:ed:
                    ff:49:53:a9:8b:fa:56:23:1b:0a:a5:c3:3c:3c:bc:
                    fe:67:ef:3d:b0:39:ac:33:30:54:dc:4c:bf:83:0f:
                    53:15:7a:92:d0:bf:8f:e2:4e:0f:fa:49:33:71:00:
                    4e:fe:70:d0:34:cd:af:4a:04:1b:1e:21:c0:60:b6:
                    c2:e0:03:5a:5e:d7:f4:3a:1a:0a:e2:16:28:39:0f:
                    95:2b:1f:df:13:ab:a5:90:a6:bc:b2:76:39:c5:e8:
                    de:24:ef:5f:65:0b:51:18:19:f4:c5:77:f6:c7:06:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B6:8D:09:2E:0B:77:FA:8A:12:D1:E8:02:1F:D0:5F:45:2A:48:1E
            X509v3 Authority Key Identifier:
                keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:74:2f:4e:a4:93:e2:d0:79:ea:e3:8c:2b:f1:35:b0:62:
         26:a2:34:0a:c1:d0:a9:d1:86:81:3c:06:bb:0c:c2:93:ab:b7:
         4c:32:a9:8f:db:89:87:c6:7d:5a:3c:2d:e1:e1:0f:4d:87:fd:
         eb:4c:bd:14:7a:82:53:cd:d7:9e:d8:10:7f:81:42:f3:57:f4:
         7b:5a:ae:04:92:a6:3a:30:f9:60:81:9e:6d:ab:11:0b:cc:43:
         83:cf:ff:90:32:ac:3c:bd:45:40:55:1b:ba:06:a5:1f:14:2e:
         4e:fc:c8:d0:eb:55:ab:b2:48:45:18:33:e9:28:0e:ab:2a:bc:
         bf:94:27:01:00:07:d4:6f:c9:e2:0f:1c:4c:4f:e8:04:b5:a0:
         b4:3c:3e:4a:65:bb:e3:79:d0:18:00:95:dd:d0:23:68:24:93:
         7f:d4:27:5c:75:21:a1:33:9c:a0:9d:ac:d3:c0:ef:02:90:74:
         5a:1c:ff:26:ab:6e:72:17:ed:62:c6:9d:0f:dd:9b:d2:c8:5f:
         77:44:cc:24:9d:52:79:a2:4c:2f:15:d4:93:f9:e8:88:79:1d:
         7b:3f:16:af:2a:54:64:63:e9:15:2e:35:d5:08:22:f1:02:64:
         3f:78:6a:39:6e:9f:b2:ae:48:c7:d6:5e:3f:15:27:f9:94:3c:
         2d:75:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:07:46 2026 by rpki-client