Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
File:                     qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft (raw, json)
Hash identifier:          OyIxRjlgT1TbwvL8eDpGj7zcU19fXvPOJnZV1qtAY1w=
Subject key identifier:   70:F1:DD:7F:0A:A8:48:7E:41:88:2A:E8:7F:ED:04:75:B1:34:31:93
Authority key identifier: AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98
Certificate issuer:       /CN=ab02bac8f78a6caafc33f36dfb68bccf698b2f98
Certificate serial:       01A12F8EAF1776D46465B74C6EBD90DFBF65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
Manifest number:          0164
Signing time:             Mon 12 Oct 2026 10:00:42 +0000
Manifest this update:     Mon 12 Oct 2026 10:00:42 +0000
Manifest next update:     Tue 13 Oct 2026 10:00:42 +0000
Files and hashes:         1: b4vi65uPTdNMY5XRr0qRTdhUpU0.roa (hash: NRN7alUSZG6XI/7Dcq7RGDyml4DdAwSF0Hh0/rTSFCE=)
                          2: qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl (hash: RhtgjDgmtrVvU6fgTAq0UFVN60H5SBZgYLzqjpT0kT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:8e:af:17:76:d4:64:65:b7:4c:6e:bd:90:df:bf:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab02bac8f78a6caafc33f36dfb68bccf698b2f98
        Validity
            Not Before: Oct 12 10:00:42 2026 GMT
            Not After : Oct 13 10:00:42 2026 GMT
        Subject: CN=70f1dd7f0aa8487e41882ae87fed0475b1343193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:80:44:03:cd:74:29:28:cc:96:88:00:72:
                    16:99:8a:da:10:04:ed:92:47:4b:89:8b:45:d3:9e:
                    65:28:1c:3b:55:34:81:25:69:7e:24:53:43:ea:8e:
                    b2:d4:83:40:14:61:b0:1b:34:74:28:e6:d4:30:9e:
                    c0:33:d1:9c:65:7a:1e:e5:3b:d6:8d:97:a0:c6:00:
                    b5:60:da:cf:ed:49:63:1d:c6:24:cf:1d:62:51:2d:
                    70:a7:b7:9a:c3:c8:5c:3c:d4:f6:90:2a:8e:a3:c3:
                    53:1b:09:e9:0e:a0:7a:f1:0d:5b:f2:6a:7a:89:29:
                    73:87:da:67:63:69:96:99:b1:3c:d8:41:98:1a:30:
                    16:40:fe:2a:c7:ea:47:e4:be:03:9d:93:3d:44:3f:
                    14:4d:d4:8e:55:cc:7c:74:f1:5a:b2:2b:cd:db:3b:
                    fd:8c:f4:ed:98:bc:ea:6c:b5:ce:f7:f1:0f:70:b4:
                    fb:7d:35:3f:cf:be:43:6c:a9:a4:bc:fb:8e:34:b6:
                    96:81:48:e0:c3:8a:f9:1e:d2:40:a6:31:30:fd:42:
                    76:5a:e1:8a:b9:69:d0:04:46:92:89:13:83:0b:51:
                    c0:ae:e8:ca:66:7b:27:7c:ca:5c:bd:66:91:70:00:
                    48:8a:5c:c7:31:a3:bb:8f:85:e5:e2:0b:11:9b:3e:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:DD:7F:0A:A8:48:7E:41:88:2A:E8:7F:ED:04:75:B1:34:31:93
            X509v3 Authority Key Identifier:
                keyid:AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d3:54:23:e3:e8:9e:2e:06:2a:0c:c2:7f:79:e1:e7:05:44:
         d2:03:fd:fa:29:21:37:57:02:2e:82:4f:64:31:f0:45:5f:b5:
         6e:d6:5d:ef:99:39:df:1b:60:b6:40:c2:03:ff:81:c1:7f:cb:
         0f:dc:9f:15:25:a5:90:32:9c:b0:01:55:03:a2:f0:64:bd:a5:
         01:5b:ac:f6:61:80:e3:f5:11:b1:86:fc:24:17:d1:20:c8:5b:
         f0:95:9b:08:24:a0:91:bc:1d:29:5f:26:ce:43:0a:79:49:76:
         c2:f5:31:f6:cb:1d:61:2d:25:cb:24:41:bd:7e:ed:0a:a7:ef:
         0c:af:4f:a4:15:71:fa:8a:94:f8:d2:25:84:3b:a2:f5:b6:a0:
         46:a6:d4:30:9c:55:49:df:14:9d:b2:12:b4:be:91:b3:44:f4:
         9d:f8:f1:5e:4b:3c:1d:6d:25:02:6d:b4:28:cd:45:d3:69:b8:
         55:42:5b:ff:4d:44:d2:9b:61:88:19:a6:fa:e6:4f:ab:4f:d9:
         58:e5:7f:3e:de:39:98:63:01:76:d2:71:4d:f7:f6:57:ae:a5:
         1f:73:3e:e7:25:76:e9:b8:83:c2:41:1f:5c:e0:c4:92:ba:7d:
         93:79:ac:fc:b4:be:4f:ac:b6:3b:98:69:e8:e7:73:e9:cc:99:
         18:64:16:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:25:28 2026 by rpki-client