Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File:                     qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier:          929aFXBBaECPMzQOMIL1C9c/vEC61UFZvLeGctgaAlU=
Subject key identifier:   FD:BA:A9:17:17:20:77:A8:B8:DA:B7:CE:85:78:0D:9C:3C:C0:DB:CA
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer:       /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial:       01A146171D176008EC2602A77482533C6FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number:          0C5C
Signing time:             Fri 16 Oct 2026 19:01:22 +0000
Manifest this update:     Fri 16 Oct 2026 19:01:22 +0000
Manifest next update:     Sat 17 Oct 2026 19:01:22 +0000
Files and hashes:         1: QRd4aPFV9jlBuWiqVWId4f78nwU.roa (hash: z76kR0ZXpWXElfaEyx2j2tbap+nSUCRwRkiT2NmSfmM=)
                          2: TDrwPz5cSUxFPnVvws0Z_s91Mkg.roa (hash: 3eqyc2mDwFuCfQZiQCI5BqQ2pZcss/40LOFRlTEbAQg=)
                          3: m4dgqt4q3BW8OWqlBOyJfQCkzg4.roa (hash: RX9ZrO6C2aJh14zzdzbYCuRJ5VKIoTmYAZYYqulZ2cM=)
                          4: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: a8R/SJXJdaxhMTIiUSLtJAXB25rOr1lyU1iqhVvoU8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 15:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:17:1d:17:60:08:ec:26:02:a7:74:82:53:3c:6f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
        Validity
            Not Before: Oct 16 19:01:22 2026 GMT
            Not After : Oct 17 19:01:22 2026 GMT
        Subject: CN=fdbaa917172077a8b8dab7ce85780d9c3cc0dbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:d0:61:3d:d0:a9:43:81:32:fb:ce:a3:7c:
                    82:b2:ec:6e:05:5d:47:cd:56:a6:ec:8d:d2:0f:59:
                    43:12:b8:a9:70:ee:b8:c4:2b:3d:fc:73:8e:0b:e4:
                    d2:11:cc:ea:e5:e6:df:a9:1e:f6:f8:ba:ae:0b:c2:
                    fb:cf:d9:21:57:7b:29:c6:5b:94:1f:30:6d:f2:50:
                    55:20:d6:09:d6:36:8b:a9:a8:02:d2:0b:94:a6:c7:
                    f9:1f:88:73:fe:4e:99:5d:c5:7d:23:de:e1:95:ed:
                    96:5e:a2:a8:a8:0f:14:41:bc:16:9f:35:c4:c4:4b:
                    46:62:ae:bb:84:cc:22:f6:dd:fb:6f:48:24:0d:4f:
                    96:22:22:36:8a:91:df:62:bc:7c:e9:8c:74:0f:61:
                    d8:f9:9d:ac:f2:0c:d6:43:3f:75:38:0e:79:b1:a4:
                    11:b7:9c:87:3c:21:a6:f8:53:28:6e:52:b8:02:10:
                    2a:98:ea:93:f5:1c:70:39:70:73:34:f9:dc:6e:88:
                    ff:25:74:33:8b:cc:9f:9a:9c:63:cb:67:b9:af:3e:
                    6d:fb:43:ce:64:42:3a:1d:ea:f8:b6:2f:7d:c7:b0:
                    8d:77:62:42:4f:11:d5:ca:74:2d:00:7a:09:17:ad:
                    6c:29:42:3a:92:5f:b6:3b:a8:db:e7:46:55:1a:dc:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BA:A9:17:17:20:77:A8:B8:DA:B7:CE:85:78:0D:9C:3C:C0:DB:CA
            X509v3 Authority Key Identifier:
                keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f7:4e:28:31:50:fd:de:ff:5f:9d:78:75:02:c6:92:85:08:
         1a:98:06:b4:f5:e9:d5:c0:10:b7:4e:90:a7:79:51:18:18:6e:
         b0:26:62:ca:00:80:74:d0:16:2b:2a:a2:fa:4d:39:b9:02:9f:
         a7:7f:5b:aa:63:69:00:81:99:18:9f:16:da:c4:0b:21:e7:7c:
         fc:14:fb:87:e5:17:44:7d:30:d6:17:02:81:da:3b:c0:64:12:
         e5:97:e7:f2:2b:f5:93:2d:bd:35:ce:b7:f6:4f:a2:77:8c:1b:
         15:7b:c1:e6:ad:96:4d:ca:dc:28:c4:3a:07:4a:b7:e5:a9:84:
         89:71:a0:9e:31:8b:5b:c0:b7:23:fe:f0:b7:59:28:28:db:46:
         a3:c5:66:e6:e7:ff:af:7f:57:ce:bf:e9:6e:5c:54:09:c2:29:
         4a:78:7d:8c:ec:8a:f6:de:05:f4:05:09:33:23:61:8b:82:92:
         31:90:d4:8d:27:ff:3d:b9:c9:34:91:43:49:75:bc:5c:bc:9f:
         3f:3d:0d:ff:c4:51:d1:d2:cf:35:57:15:71:44:38:0d:83:85:
         b0:7e:89:ce:a4:de:48:f9:db:08:20:65:3e:c4:1c:92:fc:2a:
         db:e2:ac:44:6a:e0:d2:e0:ea:c1:01:d0:53:d0:49:32:52:b9:
         2b:ae:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:41:22 2026 by rpki-client