Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File:                     qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier:          v4DH7nDg7DhE+u34T/Uw+RoRXMt1jouguOKH6c1JciA=
Subject key identifier:   F1:B2:B6:F5:46:C1:D6:A2:F0:3A:27:41:1D:29:E5:3C:01:CC:24:41
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer:       /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial:       01A0D15BE44A52FB95D56D85C5F61ECECE54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 03:00:55 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:55 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:55 +0000
Files and hashes:         1: HnCge9v0VMFv4p4n7gbHmPrHGJY.roa (hash: d62k4x4IFTUWXOO9eicQRIOUN/u5FXiup6Gnw1Q4kpc=)
                          2: M5Pjk3-Iv7owCPOWJdu9RksUoQk.roa (hash: 0apaBVPVgcAHb1VlUzCJsDR4I1XWTpJr/hHmPBPsgfc=)
                          3: RfnkqIe2fHDUVZT4yILbhKXutw4.roa (hash: GT4F8iAiZzVkJzzHLTAMNw/dN/RUobDqO6F2Kw345n4=)
                          4: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: nYi6bqeZ6KMz+BdgDLZeIVZdb4rWNz+EH7JV145oBx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:e4:4a:52:fb:95:d5:6d:85:c5:f6:1e:ce:ce:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
        Validity
            Not Before: Sep 24 03:00:55 2026 GMT
            Not After : Sep 25 03:00:55 2026 GMT
        Subject: CN=f1b2b6f546c1d6a2f03a27411d29e53c01cc2441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:b5:e4:94:98:af:e2:60:ea:51:8b:a5:d1:
                    b3:99:39:c3:f4:19:24:47:58:b9:7e:b1:57:0c:5b:
                    be:dc:b2:4d:b0:f5:30:ac:de:38:8f:61:de:3d:c8:
                    9b:8a:31:af:8b:7d:1f:a1:01:9b:b5:5d:5c:fd:a9:
                    f1:d7:42:53:0b:92:7a:18:d3:d7:d9:64:10:25:22:
                    1c:6c:65:4f:e4:05:1d:7f:81:d5:c1:5d:e4:f3:78:
                    ad:bf:c3:5f:40:32:24:82:ea:57:64:e4:72:1b:5a:
                    be:f1:42:9b:92:3c:64:32:7a:11:2e:fa:a7:93:56:
                    90:65:81:f3:8f:af:60:20:9d:ba:c6:08:6a:25:91:
                    75:d4:3a:30:53:a0:93:00:9f:16:3f:2a:03:66:66:
                    b3:fe:53:19:0b:fb:da:10:7d:52:e6:45:2e:54:a1:
                    f1:ab:9b:3b:73:34:77:ab:81:13:2d:62:6d:64:40:
                    36:aa:ce:f7:05:32:8a:24:27:cb:96:95:23:35:22:
                    07:5b:9c:c6:94:ba:9f:bc:59:4c:20:92:0e:ba:e5:
                    d5:5f:be:d3:b4:48:8b:e9:df:86:d8:a5:f1:6a:3d:
                    5c:76:1e:5d:93:fe:da:50:4f:f1:54:3e:99:83:62:
                    e7:3d:7f:4a:1b:f6:be:61:49:7c:0a:b3:9b:d5:eb:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B2:B6:F5:46:C1:D6:A2:F0:3A:27:41:1D:29:E5:3C:01:CC:24:41
            X509v3 Authority Key Identifier:
                keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:03:87:ec:62:77:03:d2:29:9b:df:b3:78:4f:f2:79:3f:
         55:3b:1b:c5:aa:9c:ee:92:b2:4d:ad:8d:a1:7a:0b:ee:ab:fc:
         1f:19:f7:7f:25:db:52:65:a7:fa:2e:4d:21:25:00:81:6c:bc:
         62:b9:8a:eb:f7:f2:58:e0:7c:b8:ba:97:77:7e:53:f7:00:1c:
         d7:be:02:7d:20:ca:5b:a2:2f:c4:0d:af:82:f5:20:89:d1:d5:
         a8:6a:46:58:37:8f:11:fc:00:25:b3:1c:22:ef:fb:98:f0:c1:
         d4:f0:8d:2a:d0:d4:a5:5f:76:c9:54:b8:c2:80:f6:bd:04:da:
         88:a6:28:37:e8:f1:75:b4:b8:15:36:88:c7:64:c2:68:cf:58:
         6d:73:6f:f3:cb:0c:a3:ab:6a:37:45:37:aa:61:40:a0:b4:8a:
         a0:a2:a7:be:9a:94:47:68:cd:f1:a9:18:d5:c5:5f:f3:43:b8:
         b3:fc:10:92:46:28:2e:84:eb:7c:0d:49:da:47:30:7e:d4:86:
         3f:24:e0:c6:ad:a2:d6:6f:ca:a0:2c:c5:35:41:38:d7:42:c6:
         88:cc:86:47:b9:b6:54:12:b9:05:66:60:f6:1c:99:f7:97:9c:
         9e:88:96:51:aa:25:b5:e7:35:d1:5c:90:dc:cb:b9:f0:fd:6a:
         8e:09:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:03:00 2026 by rpki-client